Lucene search
+L

11282 matches found

Microsoft CVE
Microsoft CVE
added 2025/10/14 2:0 p.m.13 views

Windows Search Service Denial of Service Vulnerability

Improper input validation in Microsoft Windows Search Component allows an authorized attacker to deny service locally...

5CVSS6.8AI score0.00442EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/10/14 2:0 p.m.5 views

Windows Kernel Elevation of Privilege Vulnerability

Improper input validation in Windows Kernel allows an authorized attacker to elevate privileges locally...

7.8CVSS6.9AI score0.00285EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/10/14 2:0 p.m.7 views

Windows Search Service Denial of Service Vulnerability

Improper input validation in Microsoft Windows Search Component allows an unauthorized attacker to deny service locally...

5.5CVSS6.8AI score0.00467EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/10/14 2:0 p.m.11 views

Windows Speech Runtime Elevation of Privilege Vulnerability

Improper input validation in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...

8.8CVSS6.8AI score0.00369EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/10/14 2:0 p.m.10 views

Windows Error Reporting Service Elevation of Privilege Vulnerability

Improper input validation in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

7.8CVSS6.9AI score0.03158EPSS
SaveExploits0
OSV
OSV
added 2025/10/14 8:43 a.m.7 views

BIT-KIBANA-2025-25018 Kibana Stored Cross-Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation in Kibana can lead to stored Cross-Site Scripting XSS...

8.7CVSS5.8AI score0.00214EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/14 12:0 a.m.6 views

Centreon 安全漏洞

Centreon is a set of open source system monitoring tools from the French company Centreon . The product provides monitoring capabilities for resources such as networks, systems and applications. A security vulnerability exists in Centreon versions 24.10.0 through 24.10.13, 24.04.0 through 24.04.1...

7.7CVSS5.8AI score0.0023EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/10/14 12:0 a.m.7 views

Fortinet FortiSIEM 跨站脚本漏洞

Fortinet FortiSIEM is a security information and event management system from Fortinet, Inc. The system includes features such as asset discovery, workflow automation, and unified management. A cross-site scripting vulnerability exists in Fortinet FortiSIEM that stems from improper input...

6.4CVSS5.7AI score0.00252EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/10/14 12:0 a.m.3 views

PT-2025-42128

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description Improper input validation in Microsoft Exchange Server can allow an unauthorized attacker to perform spoofing over a network. Recommendations At the moment, there is no...

7.8CVSS8.3AI score0.00951EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2025/10/14 12:0 a.m.4 views

PT-2025-42079

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An issue with input validation in the Windows Kernel could allow a local attacker to gain elevated privileges. Recommendations At the moment, there is no information about a newer...

7.8CVSS8.9AI score0.00285EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/10/14 12:0 a.m.9 views

PT-2025-42165

Improper input validation in the component /kafka/ui/serdes/CustomSerdeLoader.java of kafka-ui v0.6.0 to v0.7.2 allows attackers to execute arbitrary code via supplying crafted data...

6.5CVSS7.8AI score0.00365EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/10/14 12:0 a.m.12 views

PT-2025-42139

Name of the Vulnerable Software and Affected Versions Windows Authentication Methods affected versions not specified Description An improper validation of a specific input type within Windows Authentication Methods can allow a local attacker to gain elevated privileges. Recommendations At the...

7.8CVSS9AI score0.00255EPSS
SaveExploits0References3
Redos
Redos
added 2025/10/14 12:0 a.m.7 views

ROS-20251014-11

Go programming language vulnerability is related to improper input validation. Exploitation The vulnerability could allow a remote attacker to bypass existing security restrictions. security...

5.4CVSS7AI score0.00308EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/10/14 12:0 a.m.7 views

PT-2025-41964

An improper neutralization of input during web page generation vulnerability CWE-79 in FortiSIEM 7.2.0 through 7.2.2, 7.1 all versions, 7.0 all versions, 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions, 6.2 all versions may allow an authenticated attacker ...

6.4CVSS5.8AI score0.00252EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/14 12:0 a.m.6 views

Centreon 安全漏洞

Centreon is a set of open source system monitoring tools from the French company Centreon . The product provides monitoring capabilities for resources such as networks, systems and applications. A security vulnerability exists in Centreon versions 24.10.0 through 24.10.13, 24.04.0 through 24.04.1...

6.8CVSS5.8AI score0.00195EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/10/14 12:0 a.m.7 views

Adobe Connect 跨站脚本漏洞

Adobe Connect is a software for creating meeting environments from the American company Audobee Adobe. Adobe Connect suffers from a cross-site scripting vulnerability that is caused by improper validation of user-supplied input. An attacker could exploit the vulnerability to steal the victim's...

8.1CVSS6.2AI score0.00365EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/14 12:0 a.m.4 views

SFS Winsure SQL注入漏洞

SFS Winsure is an insurance solution suite from SFS Turkey. SFS Winsure versions 21.08.2025 and earlier suffer from a SQL injection vulnerability that stems from improper neutralization of special elements, which could lead to a blind SQL injection attack...

9.8CVSS7.8AI score0.00349EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/14 12:0 a.m.12 views

Centreon 安全漏洞

Centreon is a set of open source system monitoring tools from the French company Centreon . The product provides monitoring capabilities for resources such as networks, systems and applications. A security vulnerability exists in Centreon versions 24.10.0 through 24.10.13, 24.04.0 through 24.04.1...

6.8CVSS5.8AI score0.00195EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/10/14 12:0 a.m.2 views

PT-2025-42054

Name of the Vulnerable Software and Affected Versions Microsoft Windows Speech affected versions not specified Description An issue with improper input validation exists in Microsoft Windows Speech. This allows an authorized attacker to elevate privileges locally. Recommendations At the moment,...

8.8CVSS8.8AI score0.00369EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/10/14 12:0 a.m.12 views

PT-2025-42082

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description An issue with input validation in the Microsoft Windows Search Component can allow a local attacker to cause a denial of service. Recommendations At the moment, there is no...

5.5CVSS8.6AI score0.00467EPSS
SaveExploits0References3
Rows per page
Query Builder