Lucene search
+L

6 matches found

CNNVD
CNNVD
•added 2025/09/11 12:00 a.m.•19 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to exclude terminated tasks during the scheduling class transition phase, which could lead to...

5.5CVSS6AI score0.00154EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/08/14 4:54 p.m.•17 views

CVE-2025-55011

Kanboard is project management software that focuses on the Kanban methodology. Prior to version 1.2.47, the createTaskFile method in the API does not validate whether the taskid parameter is a valid task id, nor does it check for path traversal. As a result, a malicious actor could write a file...

6.4CVSS7.2AI score0.00372EPSS
SaveExploits1References1
NVD
NVD
•added 2025/08/12 4:15 p.m.•33 views

CVE-2025-55011

Kanboard is project management software that focuses on the Kanban methodology. Prior to version 1.2.47, the createTaskFile method in the API does not validate whether the taskid parameter is a valid task id, nor does it check for path traversal. As a result, a malicious actor could write a file...

6.4CVSS0.00372EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2025/08/12 3:57 p.m.•18 views

CVE-2025-55011 Kanboard Path Traversal in File Write via Task File Upload Api

Kanboard is project management software that focuses on the Kanban methodology. Prior to version 1.2.47, the createTaskFile method in the API does not validate whether the taskid parameter is a valid task id, nor does it check for path traversal. As a result, a malicious actor could write a file...

6.4CVSS6.6AI score
SaveExploits0References5
CVE
CVE
•added 2025/08/12 3:57 p.m.•85 views

CVE-2025-55011

Kanboard prior to version 1.2.47 is affected by a path-traversal/file-write vulnerability in the API’s createTaskFile handler. The issue arises because task_id validation is missing and path traversal is not checked, allowing a malicious actor to write files to arbitrary locations reachable by th...

6.4CVSS7.1AI score0.00372EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/04/14 12:00 a.m.•12 views

CVE-2015-0098: Undefined Security Weakness

Task Scheduler in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows local users to gain privileges by triggering application execution by an invalid task, aka "Task Scheduler Elevation of Privilege Vulnerability."...

7.2CVSS5.9AI score0.01624EPSS
SaveExploits0References2
Rows per page
Query Builder