Lucene search
+L

11072 matches found

CNNVD
CNNVD
added 2025/11/24 12:0 a.m.8 views

AMD uProf 安全漏洞

AMD uProf is a suite of performance analysis tools from AMD for analyzing the performance of x86 architecture applications on Windows, Linux and FreeBSD systems. AMD uProf suffers from an improper input validation vulnerability that can be exploited by an attacker to cause an out-of-bounds write...

5.5CVSS6.9AI score0.00108EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/24 12:0 a.m.10 views

PT-2025-47965

Name of the Vulnerable Software and Affected Versions AMD uProf affected versions not specified Description A flaw exists in AMD uProf due to improper input validation. This can allow a local attacker to write out of bounds, potentially leading to a crash or denial of service. Recommendations At...

5.5CVSS6.2AI score0.00108EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/11/24 12:0 a.m.9 views

PT-2025-47962

Name of the Vulnerable Software and Affected Versions XOCL driver affected versions not specified Description A flaw exists in the XOCL driver due to improper input validation. This can allow a local attacker to trigger an integer overflow. Successful exploitation could lead to a loss of...

8CVSS6.1AI score0.00129EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/11/22 7:15 p.m.12 views

CVE-2025-48502

Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in crash or denial of service...

5.5CVSS6.6AI score0.00108EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/11/21 9:30 p.m.7 views

EUVD-2025-198504

Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in crash or denial of service...

5.5CVSS6.1AI score0.00108EPSS
SaveExploits0References2
NVD
NVD
added 2025/11/21 7:15 p.m.8 views

CVE-2025-48502

Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in crash or denial of service...

5.5CVSS0.00108EPSS
SaveExploits0References1
NVD
NVD
added 2025/11/21 1:15 p.m.18 views

CVE-2025-66098

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Camille V Travelers' Map travelers-map allows Stored XSS.This issue affects Travelers' Map: from n/a through = 2.3.2...

6.5CVSS0.00151EPSS
SaveExploits0References1
NVD
NVD
added 2025/11/21 1:15 p.m.7 views

CVE-2025-66057

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in boldthemes Bold Page Builder bold-page-builder allows DOM-Based XSS.This issue affects Bold Page Builder: from n/a through = 5.5.2...

6.5CVSS0.00186EPSS
SaveExploits0References1
CVE
CVE
added 2025/11/21 12:30 p.m.19 views

CVE-2025-66098

CVE-2025-66098 pertains to WordPress travel ers-map plugin with a Stored XSS flaw due to improper input neutralization during web page generation. Affected plugin versions are Travelers' Map <= 2.3.2 (authenticated context). The issue is substantiated across multiple sources (NVD, Red Hat, CIR...

6.5CVSS5.6AI score0.00151EPSS
SaveExploits0References1
CVE
CVE
added 2025/11/21 12:29 p.m.30 views

CVE-2025-66090

CVE-2025-66090 is a DOM-Based XSS in WordPress plugin SKT Skill Bar (versions <= 2.5). The issue arises from improper input neutralization during web page generation, enabling cross-site scripting. Affected: SKT Skill Bar plugin for WordPress. CVSSv3.1 base score 6.5 (Network, Low/Low/Low) wit...

6.5CVSS6AI score0.00151EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/11/21 12:29 p.m.7 views

EUVD-2025-198458

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sonalsinha21 SKT Skill Bar skt-skill-bar allows DOM-Based XSS.This issue affects SKT Skill Bar: from n/a through = 2.5...

6.5CVSS5.9AI score0.00151EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/11/21 12:29 p.m.8 views

EUVD-2025-198466

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jeff Starr Head Meta Data head-meta-data allows Stored XSS.This issue affects Head Meta Data: from n/a through = 20250327...

5.4CVSS5.5AI score0.00199EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2025/11/21 11:50 a.m.6 views

Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Improper Neutralization (CVE-2025-5878)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the improper neutralization vulnerability Vulnerability Details CVEID:CVE-2025-5878 DESCRIPTION: A vulnerability was found in ESAPI esapi-java-legacy and classified as problematic. This issue affects the interface...

7.5CVSS7AI score0.004EPSS
SaveExploits1Affected Software1
Positive Technologies
Positive Technologies
added 2025/11/21 12:0 a.m.13 views

PT-2025-47760

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bqworks Accordion Slider accordion-slider allows Stored XSS.This issue affects Accordion Slider: from n/a through = 1.9.13...

6AI score0.00151EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/11/21 12:0 a.m.8 views

WordPress plugin Head Meta Data 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability...

5.9CVSS5.9AI score0.00199EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/21 12:0 a.m.11 views

PT-2025-47796

Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in crash or denial of service...

5.5CVSS6.6AI score0.00108EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/11/21 12:0 a.m.6 views

WordPress plugin Travelers Map 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

6.5CVSS5.8AI score0.00151EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/11/21 12:0 a.m.10 views

WordPress plugin Nelio Popups 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin ... A cross-sit...

6.5CVSS5.9AI score0.00151EPSS
SaveExploits0References1
NVD
NVD
added 2025/11/20 8:16 p.m.8 views

CVE-2025-55124

Improper neutralisation of input in Revive Adserver 6.0.0+ causes a reflected XSS attack in the banner-zone.php script...

6.1CVSS0.00406EPSS
SaveExploits1References1
GithubExploit
GithubExploit
added 2025/11/20 3:47 a.m.276 views

Exploit for Improper Input Validation in Microsoft

Moni...

9.8CVSS7.1AI score0.9466EPSS
SaveExploits24
Rows per page
Query Builder