CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

364 matches found

RedhatCVE•added 2025/11/14 12:1 a.m.•3 views

CVE-2025-60672

An unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin. The vulnerability occurs in the 'SetDynamicDNSSettings' functionality, where the 'ServerAddress' and 'Hostname' parameters in prog.cgi are stored in NVRAM and later used by rc to...

6.5CVSS8.2AI score0.03549EPSS

Exploits1References1

EUVD•added 2025/11/13 9:31 p.m.•6 views

EUVD-2025-175375

7.7AI score0.03549EPSS

Exploits1References5

OSV•added 2025/10/28 3:16 p.m.•5 views

CVE-2025-34317

IPFire versions prior to 2.29 Core Update 198 contain a stored cross-site scripting XSS vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code through the TLSHOSTNAME parameter when adding a new DNS entry. When a user adds a DNS entry, the application issues an HT...

5.4CVSS6AI score0.00453EPSS

Exploits0References3

NVD•added 2025/10/28 3:16 p.m.•13 views

CVE-2025-34317

5.4CVSS0.00453EPSS

Exploits0References3

CNNVD•added 2025/10/28 12:0 a.m.•11 views

IPFire 安全漏洞

IPFire is an open source Linux distribution from the IPFire organization. It is mainly used as a router and firewall. IPFire suffers from a cross-site scripting vulnerability that stems from insufficient cleanup and escaping of the TLSHOSTNAME, UPSTREAMUSER, UPSTREAMPASSWORD, ADMINMAILADDRESS, an...

5.1CVSS6AI score0.00479EPSS

Exploits0References4

EUVD•added 2025/10/07 12:30 a.m.•5 views

EUVD-2019-8556

Malware in sbrugna...

6.1CVSS6.5AI score0.055EPSS

Exploits0References11

EUVD•added 2025/10/07 12:30 a.m.•3 views

EUVD-2018-7474

Malware in sbrugna...

6.1CVSS6.3AI score0.00802EPSS

Exploits0References2