Lucene search
+L

1624 matches found

CNNVD
CNNVD
added 2025/04/15 12:00 a.m.7 views

Oracle MySQL Server 安全漏洞

Oracle MySQL is an open source relational database management system.MySQL Client is a MySQL client, a program used to communicate with a server to process information in a database managed by the server. A security vulnerability exists in MySQL Client for Oracle MySQL, which stems from improper...

6.5CVSS6.1AI score0.01051EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/04/15 12:00 a.m.7 views

Oracle MySQL Server 安全漏洞

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server that originates from improper handling of the Server: Options component and can be exploited by an attacker to cause a denial of service...

4.9CVSS6AI score0.00725EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/04/11 8:26 p.m.45 views

CVE-2025-30656

An Improper Handling of Additional Special Element vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on MX Series with MS-MPC, MS-MIC and SPC3, and SRX Series, allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. If the SIP ALG processes...

8.7CVSS7.1AI score0.00417EPSS
SaveExploits0References3
Microsoft CVE
Microsoft CVE
added 2025/04/11 7:00 a.m.7 views

The vulnerability in unzip occurs due to improper handling of Unicode strings

...

3.3CVSS5.9AI score0.00616EPSS
SaveExploits1
NVD
NVD
added 2025/04/09 8:15 p.m.30 views

CVE-2025-30659

An Improper Handling of Length Parameter Inconsistency vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. When a device configured for Secure Vector Routing SVR receives a...

8.7CVSS0.00417EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/09 8:15 p.m.42 views

CVE-2025-30652

An Improper Handling of Exceptional Conditions vulnerability in routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged attacker executing a CLI command to cause a Denial of Service DoS. When asregex-optimized is configured and a specific "show...

6.8CVSS0.00163EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/09 7:57 p.m.93 views

CVE-2025-30652

CVE-2025-30652 affects Juniper Junos OS and Junos OS Evolved. The vulnerability is an improper handling of exceptional conditions in the routing protocol daemon (rpd) that allows a local, low-privilege attacker to trigger a Denial of Service by executing a specific CLI command when asregex-optimi...

6.8CVSS5.7AI score0.00163EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
added 2025/04/09 7:57 p.m.11 views

CVE-2025-30652 Junos OS and Junos OS Evolved: Executing a specific CLI command when asregex-optimized is configured causes an rpd crash

An Improper Handling of Exceptional Conditions vulnerability in routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged attacker executing a CLI command to cause a Denial of Service DoS. When asregex-optimized is configured and a specific "show...

6.8CVSS7AI score0.00163EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/09 7:57 p.m.40 views

CVE-2025-30652 Junos OS and Junos OS Evolved: Executing a specific CLI command when asregex-optimized is configured causes an rpd crash

An Improper Handling of Exceptional Conditions vulnerability in routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged attacker executing a CLI command to cause a Denial of Service DoS. When asregex-optimized is configured and a specific "show...

6.8CVSS0.00163EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/09 12:00 a.m.17 views

PT-2025-15863 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 21.2R3-S9 Junos OS versions 21.4 prior to 21.4R3-S10 Junos OS versions 22.2 prior to 22.2R3-S6 Junos OS versions 22.4 prior to 22.4R3-S5 Junos OS versions 23.2 prior to 23.2R2-S3 Junos OS versions 23.4 prior to...

8.7CVSS6.6AI score0.00417EPSS
SaveExploits0References11
NVD
NVD
added 2025/04/08 5:15 a.m.16 views

CVE-2025-20947

Improper handling of insufficient permission or privileges in ClipboardService prior to SMR Apr-2025 Release 1 allows local attackers to access image files across multiple users. User interaction is required for triggering this vulnerability...

5.5CVSS0.00171EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/08 4:50 a.m.9 views

CVE-2025-20946

Improper handling of exceptional conditions in pairing specific bluetooth devices in Galaxy Watch Bluetooth pairing prior to SMR Apr-2025 Release 1 allows local attackers to pair with specific bluetooth devices without user interaction...

8.8CVSS6.9AI score0.00269EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/08 12:00 a.m.15 views

PT-2025-15347

Name of the Vulnerable Software and Affected Versions: Galaxy Watch versions prior to SMR Apr-2025 Release 1 Description: The issue arises from improper handling of exceptional conditions when pairing specific Bluetooth devices in Galaxy Watch. This allows local attackers to pair with specific...

8.8CVSS5.9AI score0.00269EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/04/04 12:00 a.m.10 views

WordPress plugin Daisycon prijsvergelijkers SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...

8.5CVSS9AI score0.00454EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/04 12:00 a.m.12 views

youkefu 代码问题漏洞

youkefu is a customer service support application by the individual developer zhangyanbo2007. A code issue vulnerability exists in youkefu version 4.2.0 and earlier, which stems from an incorrect manipulation of the routercontent parameter that results in an XML external entity reference...

9.8CVSS6.5AI score0.00633EPSS
SaveExploits1References4
Veracode
Veracode
added 2025/04/03 12:00 a.m.15 views

Sensitive Information Exposure

org.apache.commons, commons-vfs2 is vulnerable to Sensitive Information Exposure. The vulnerability is due to improper handling of exception messages, where the FtpFileObject class exposes the original URI, including sensitive information like passwords, when a file is not found. It allows an...

5CVSS6.5AI score0.00855EPSS
SaveExploits0References5Affected Software1
Veracode
Veracode
added 2025/04/02 11:30 p.m.17 views

Arbitrary Code Execution (ACE)

k8s.io/ingress-nginx is vulnerable to Arbitrary Code Execution ACE . The vulnerability is due to improper handling of mirror-target and mirror-host annotations, allowing arbitrary configuration injection into nginx...

8.8CVSS9.8AI score0.83498EPSS
SaveExploits7References9Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.12 views

The vulnerability of the itc_sample_row_check component in the Virtuoso-OpenSource web application development platform allows a hacker to trigger a service failure.

The vulnerability of the itcsamplerowcheck component in the Virtuoso-OpenSource web application development platform is related to the improper elimination of special elements used in SQL commands. Exploiting this vulnerability allows an attacker to cause service interruptions by sending speciall...

7.8CVSS7.3AI score0.00884EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:00 a.m.14 views

The vulnerability of the jp_add component in the virtuoso-opensource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the jpadd component in the Virtuoso-OpenSource web application development platform is related to the improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause a service failure by sending specially crafted SQL...

7.8CVSS7.3AI score0.00921EPSS
SaveExploits1References4Affected Software2
OSV
OSV
added 2025/03/26 5:24 p.m.12 views

GO-2025-3533 Improper Handling of Highly Compressed Data (Data Amplification) in github.com/getkin/kin-openapi/openapi3filter

Improper Handling of Highly Compressed Data Data Amplification in github.com/getkin/kin-openapi/openapi3filter...

7.5CVSS6.7AI score0.00518EPSS
SaveExploits0References6
Rows per page
Query Builder