Lucene search
K

9 matches found

Vulnrichment
Vulnrichment
added 2025/11/11 12:19 a.m.2 views

CVE-2025-42895 Code Injection vulnerability in SAP HANA JDBC Client

Due to insufficient validation of connection property values, the SAP HANA JDBC Client allows a high-privilege locally authenticated user to supply crafted parameters that lead to unauthorized code loading, resulting in low impact on confidentiality and integrity and high impact on availability o...

6.9CVSS6.3AI score0.00015EPSS
Exploits0References2
OSV
OSV
added 2025/07/29 12:49 p.m.1 views

USN-7678-1 perl vulnerability

It was discovered that Perl threads incorrectly handled certain file operations. A local attacker could possibly use this issue to load code or access files from unexpected locations...

5.9CVSS7.2AI score0.00031EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2025/07/28 2:32 a.m.0 views

perl: Perl threads have a working directory race condition where file operations may target unintended paths

A flaw was found in the Perl standard library threads component. This vulnerability can allow a local attacker to exploit a race condition in directory handling to access files or load code from unexpected locations...

5.9CVSS7.2AI score0.00031EPSS
Exploits0References11
RedHat Linux
RedHat Linux
added 2025/07/22 6:22 p.m.1 views

perl: Perl threads have a working directory race condition where file operations may target unintended paths

A flaw was found in the Perl standard library threads component. This vulnerability can allow a local attacker to exploit a race condition in directory handling to access files or load code from unexpected locations...

5.9CVSS7.2AI score0.00031EPSS
Exploits0References11
SUSE CVE
SUSE CVE
added 2025/06/05 3:14 a.m.1 views

SUSE CVE-2025-40909

Perl threads have a working directory race condition where file operations may target unintended paths. If a directory handle is open at thread creation, the process-wide current working directory is temporarily changed in order to clone that handle for the new thread, which is visible from any...

6.2CVSS7AI score0.00031EPSS
Exploits0References11
Cvelist
Cvelist
added 2025/03/25 8:29 p.m.9 views

CVE-2025-29789 OpenEMR Has Directory Traversal in Load Code feature

OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.3.0 are vulnerable to Directory Traversal in the Load Code feature. Version 7.3.0 contains a patch for the issue...

4.6CVSS0.00092EPSS
Exploits1References2
OSV
OSV
added 2025/03/25 8:29 p.m.7 views

CVE-2025-29789 OpenEMR Has Directory Traversal in Load Code feature

OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.3.0 are vulnerable to Directory Traversal in the Load Code feature. Version 7.3.0 contains a patch for the issue...

4.6CVSS7AI score0.00092EPSS
Exploits1References4
CNNVD
CNNVD
added 2025/03/25 12:0 a.m.1 views

OpenEMR 安全漏洞

OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing, and medical billing requests. A security vulnerability exists in OpenEMR versions prior to 7.3.0, which stems...

7.5CVSS6.8AI score0.00092EPSS
Exploits1References4
SUSE CVE
SUSE CVE
added 2023/02/15 5:32 a.m.3 views

SUSE CVE-2014-0107

The TransformerFactory in Apache Xalan-Java before 2.7.2 does not properly restrict access to certain properties when FEATURESECUREPROCESSING is enabled, which allows remote attackers to bypass expected restrictions and load arbitrary classes or access external resources via a crafted 1...

7.5CVSS7.1AI score0.05877EPSS
Exploits2References4
Rows per page
Query Builder