Lucene search
+L

2579 matches found

Packet Storm News
Packet Storm News
added 2025/11/07 12:0 a.m.6 views

Large Language Models for Explainable Threat Intelligence

As cyber threats continue to grow in complexity, traditional security mechanisms struggle to keep up. Large language models LLMs offer significant potential in cybersecurity due to their advanced capabilities in text processing and generation. This paper explores the use of LLMs with...

6.5AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/11/06 12:0 a.m.13 views

PT-2025-45526

Name of the Vulnerable Software and Affected Versions SuiteCRM versions 8.6.0 through 8.9.0 Description SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Versions 8.6.0 through 8.9.0 are susceptible to an authenticated, blind time-based...

6.8CVSS6.7AI score0.00326EPSS
SaveExploits0References15
AstraLinux
AstraLinux
added 2025/11/01 10:54 a.m.4 views

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: trace/fgraph: The warning caused by the missing unregister notifier has been fixed. This warning was triggered during testing on v6.16: notifier Callback ftracesuspendnotifiercall is already registered WARNING: CPU: 2, PID: 86, i...

5.5CVSS5.8AI score0.00135EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/11/01 6:30 a.m.7 views

Cross-site Scripting (XSS)

Overview @cosmos.gl/graph is a GPU-based force graph layout and rendering Affected versions of this package are vulnerable to Cross-site Scripting XSS due to writing a user-controllable HTML string directly to the DOM without sanitization. An attacker can execute arbitrary JavaScript code in a...

6.1CVSS5.4AI score
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/10/31 10:8 p.m.16 views

CVE-2023-7315

Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting XSS via the Graph Explorer component. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.4CVSS6.2AI score0.00479EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/31 10:8 p.m.9 views

CVE-2023-7316

Nagios XI versions prior to 2024R1 are vulnerable to cross-site scripting XSS via the Graph Explorer component. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.4CVSS6.2AI score0.00547EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2025/10/31 4:38 p.m.5 views

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: fgraph: Add READONCE when accessing fgrapharray In ftracereturntohandler, a loop iterates over the fgrapharray elements, which are fgraphops. The loop checks if an element is a fgraphstub to prevent using a fgraphstub afterward...

4.7CVSS6.5AI score0.00165EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/31 2:12 p.m.7 views

OESA-2025-2557 thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: This vulnerability affects Firefox versions prior to 143 and Firefox ESR versions prior to 140.3. Specific vulnerability type and impact details require further confirmation.CVE-2025-10527 This vulnerability affects...

9.8CVSS7.3AI score0.00681EPSS
SaveExploits0References17
NVD
NVD
added 2025/10/30 10:15 p.m.13 views

CVE-2023-7315

Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting XSS via the Graph Explorer component. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.4CVSS0.00479EPSS
SaveExploits0References3
NVD
NVD
added 2025/10/30 10:15 p.m.7 views

CVE-2023-7316

Nagios XI versions prior to 2024R1 are vulnerable to cross-site scripting XSS via the Graph Explorer component. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.4CVSS0.00547EPSS
SaveExploits0References3
OSV
OSV
added 2025/10/30 10:15 p.m.10 views

CVE-2023-7315

Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting XSS via the Graph Explorer component. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.4CVSS5.8AI score0.00479EPSS
SaveExploits0References3
OSV
OSV
added 2025/10/30 10:15 p.m.7 views

CVE-2023-7316

Nagios XI versions prior to 2024R1 are vulnerable to cross-site scripting XSS via the Graph Explorer component. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.4CVSS5.9AI score0.00547EPSS
SaveExploits0References3
CVE
CVE
added 2025/10/30 9:52 p.m.22 views

CVE-2023-7316

CVE-2023-7316 concerns Nagios XI prior to 2024R1. The vulnerability is an XSS flaw in the Graph Explorer component caused by insufficient validation or escaping of user-supplied input, enabling an attacker to inject and execute arbitrary script in a victim’s browser. Affected software: Nagios XI ...

5.4CVSS5.8AI score0.00547EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/30 9:52 p.m.6 views

CVE-2023-7316 Nagios XI < 2024R1 XSS via Graph Explorer

Nagios XI versions prior to 2024R1 are vulnerable to cross-site scripting XSS via the Graph Explorer component. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.1CVSS5.8AI score0.00547EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/10/30 9:52 p.m.14 views

CVE-2023-7316 Nagios XI < 2024R1 XSS via Graph Explorer

Nagios XI versions prior to 2024R1 are vulnerable to cross-site scripting XSS via the Graph Explorer component. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.1CVSS0.00547EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/10/30 9:52 p.m.15 views

CVE-2023-7315 Nagios XI < 5.11.3 XSS via Graph Explorer

Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting XSS via the Graph Explorer component. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.1CVSS0.00479EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/10/30 9:52 p.m.3 views

CVE-2023-7315 Nagios XI < 5.11.3 XSS via Graph Explorer

Nagios XI versions prior to 5.11.3 are vulnerable to cross-site scripting XSS via the Graph Explorer component. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

5.1CVSS5.8AI score0.00479EPSS
SaveExploits0References3
CVE
CVE
added 2025/10/30 9:52 p.m.18 views

CVE-2023-7315

Nagios XI prior to version 5.11.3 is affected by a cross-site scripting (XSS) vulnerability in the Graph Explorer component. The root cause is insufficient validation or escaping of user-supplied input, enabling an attacker to inject and execute arbitrary script in a victim’s browser. Supported b...

5.4CVSS5.8AI score0.00479EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
added 2025/10/30 12:31 p.m.6 views

EUVD-2025-36994

Apache Airflow /api/v2/dagReports executes DAG Python in API...

5.4CVSS6.4AI score0.00487EPSS
SaveExploits0References5
NVD
NVD
added 2025/10/30 10:15 a.m.12 views

CVE-2025-62402

API users via /api/v2/dagReports could perform Dag code execution in the context of the api-server if the api-server was deployed in the environment where Dag files were available...

5.4CVSS0.00487EPSS
SaveExploits0References2
Rows per page
Query Builder