Lucene search
+L

32966 matches found

Microsoft CVE
Microsoft CVE
added 2025/09/04 4:32 a.m.7 views

ipv6: Fix signed integer overflow in __ip6_append_data

...

5.5CVSS7AI score0.00269EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/09/04 12:28 a.m.9 views

CVE-2025-55473

Asian Arts Talents Foundation AATF Website v5.1.x and Docker version 2024.12.8.1 are vulnerable to Cross Site Scripting XSS. The vulnerability exists in the /ip.php endpoint, which processes and displays the X-Forwarded-For HTTP header without proper sanitization or output encoding. This allows a...

6.1CVSS6.9AI score0.0032EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/09/04 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2021-4180

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An information exposure flaw in openstack-tripleo-heat-templates allows an external user to discover the internal IP or hostname. An attacker could exploit this...

4.3CVSS5AI score0.00791EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/09/03 12:00 a.m.13 views

PT-2025-35813

Name of the Vulnerable Software and Affected Versions Cisco Desk Phone 9800 Series Cisco IP Phone 7800 and 8800 Series Cisco Video Phone 8875 Description A vulnerability exists in the directory permissions of the affected devices, potentially allowing an unauthenticated, remote attacker to write...

5.3CVSS6.8AI score0.00353EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/09/03 12:00 a.m.9 views

Cisco多款产品 访问控制错误漏洞

Cisco IP Phone 8800 Series and so on are products of Cisco USA.Cisco IP Phone 8800 Series is an 8800 series IP phone.Cisco IP Phone 7800 Series is a 7800 series IP phone.Cisco Desk Phone The 9800 Series is a series of IP phones. An Access Control Error vulnerability exists in various Cisco...

5.3CVSS6.7AI score0.00353EPSS
SaveExploits0References2
NVD
NVD
added 2025/09/02 5:15 p.m.10 views

CVE-2025-55473

Asian Arts Talents Foundation AATF Website v5.1.x and Docker version 2024.12.8.1 are vulnerable to Cross Site Scripting XSS. The vulnerability exists in the /ip.php endpoint, which processes and displays the X-Forwarded-For HTTP header without proper sanitization or output encoding. This allows a...

6.1CVSS0.0032EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/09/02 12:00 a.m.6 views

PT-2025-35583

Name of the Vulnerable Software and Affected Versions: Asian Arts Talents Foundation AATF Website versions 5.1.x Asian Arts Talents Foundation AATF Docker version 2024.12.8.1 Description: The Asian Arts Talents Foundation AATF Website and Docker image are susceptible to a Cross Site Scripting XSS...

6.1CVSS6.1AI score0.0032EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2025/09/02 12:00 a.m.17 views

CVE-2025-55473

Asian Arts Talents Foundation AATF Website v5.1.x and Docker version 2024.12.8.1 are vulnerable to Cross Site Scripting XSS. The vulnerability exists in the /ip.php endpoint, which processes and displays the X-Forwarded-For HTTP header without proper sanitization or output encoding. This allows a...

0.0032EPSS
SaveExploits0References3
CVE
CVE
added 2025/09/02 12:00 a.m.23 views

CVE-2025-55473

CVE-2025-55473 affects Asian Arts Talents Foundation (AATF) Website v5.1.x and its Docker image 2024.12.8.1. The vulnerability is a Cross-Site Scripting (XSS) in the /ip.php endpoint, where the X-Forwarded-For HTTP header is parsed and displayed without proper sanitization or output encoding. Thi...

6.1CVSS6.3AI score0.0032EPSS
SaveExploits0References3
NVD
NVD
added 2025/09/01 1:15 p.m.14 views

CVE-2025-9780

A flaw has been found in TOTOLINK A702R 4.0.0-B20211108.1423. Affected by this issue is the function sub419BE0 of the file /boafrm/formIpQoS. This manipulation of the argument mac causes buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used...

9CVSS0.00649EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2025/08/31 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-38588

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent infinite loop in rt6nlmsgsize While testing prior patch, I was able to trigge...

5.5CVSS5.9AI score0.0016EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/08/30 6:20 p.m.10 views

CVE-2024-46412

Incorrect access control in the prehandle function of Rebuild v3.7.7 allows attackers to bypass authentication via a crafted GET request sent to /commons/ip-location...

6.5CVSS7AI score0.00432EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/30 6:19 p.m.16 views

CVE-2025-57814

request-filtering-agent is an https.Agent implementation that blocks requests to Private/Reserved IP addresses. Versions 1.x.x and earlier contain a vulnerability where HTTPS requests to 127.0.0.1 bypass IP address filtering, while HTTP requests are correctly blocked. This allows attackers to...

6.9CVSS6.7AI score0.00458EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/30 6:18 p.m.12 views

CVE-2025-9525

A flaw has been found in Linksys E1700 1.0.0.4.003. Affected by this vulnerability is the function setWan of the file /goform/setWan. This manipulation of the argument DeviceName/lanIp causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been published and may...

9CVSS8.9AI score0.01386EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/08/30 6:17 p.m.7 views

CVE-2025-8424

Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway when an attacker can get access to the appliance NSIP, Cluster Management IP or local GSLB Site IP or SNIP with Management Access...

8.7CVSS6.5AI score0.02824EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2023-2856

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file CVE-2023-2856 Note that Nessu...

6.5CVSS6.8AI score0.01787EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2022-2228

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information exposure in GitLab EE affecting all versions from 12.0 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 allows an attacker with the...

6.5CVSS6.4AI score0.0074EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2020-8554

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.externalIPs field, to intercept traffic to th...

6.3CVSS6.6AI score0.09274EPSS
SaveExploits3References2
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2022-2533

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab affecting all versions starting from 12.10 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions...

7.4CVSS7.2AI score0.00714EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2021-29424

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which in some...

7.5CVSS7AI score0.01797EPSS
SaveExploits1References2
Rows per page
Query Builder