Lucene search
+L

8273 matches found

RedhatCVE
RedhatCVE
added 2025/10/23 9:13 a.m.20 views

CVE-2025-11866

The Photographers galleries plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple shortcode attributes w, h, rawcss, look, etc. in all versions up to, and including, 1.1.8. This is due to the plugin not properly sanitizing user input or escaping output when inserting thes...

6.4CVSS5.1AI score0.0018EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2025/10/23 12:10 a.m.5 views

SUSE CVE-2022-50571

In the Linux kernel, the following vulnerability has been resolved: btrfs: call btrfsremovefreespacecachelocked on cache load failure Now that lockdep is staying enabled through our entire CI runs I started seeing the following stack in generic/475 ------------ cut here ------------ WARNING: CPU:...

4.7CVSS6.3AI score0.00185EPSS
SaveExploits0References4
OSV
OSV
added 2025/10/22 8:15 p.m.3 views

DEBIAN-CVE-2025-62611

aiomysql is a library for accessing a MySQL database from the asyncio. Prior to version 0.3.0, the client-side settings are not checked before sending local files to MySQL server, which allows obtaining arbitrary files from the client using a rogue server. It is possible to create a rogue MySQL...

8.2CVSS5.5AI score0.00362EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/22 8:15 p.m.7 views

UBUNTU-CVE-2025-62611

aiomysql is a library for accessing a MySQL database from the asyncio. Prior to version 0.3.0, the client-side settings are not checked before sending local files to MySQL server, which allows obtaining arbitrary files from the client using a rogue server. It is possible to create a rogue MySQL...

8.2CVSS5.9AI score0.00362EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/10/22 7:29 p.m.3 views

CVE-2025-62611 aiomysql allows arbitrary access to client files through vulnerability of a malicious MySQL server

aiomysql is a library for accessing a MySQL database from the asyncio. Prior to version 0.3.0, the client-side settings are not checked before sending local files to MySQL server, which allows obtaining arbitrary files from the client using a rogue server. It is possible to create a rogue MySQL...

8.2CVSS6.3AI score0.00362EPSS
SaveExploits0References3
CVE
CVE
added 2025/10/22 7:29 p.m.37 views

CVE-2025-62611

Summary: CVE-2025-62611 affects the aiomysql Python library used to access MySQL from asyncio. Prior to version 0.3.0, client-side settings are not validated before sending local files to the server, enabling a rogue MySQL server to request arbitrary client files via a LOAD_LOCAL packet. This vul...

8.2CVSS6.3AI score0.00362EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2025/10/22 7:29 p.m.95 views

CVE-2025-62611

aiomysql is a library for accessing a MySQL database from the asyncio. Prior to version 0.3.0, the client-side settings are not checked before sending local files to MySQL server, which allows obtaining arbitrary files from the client using a rogue server. It is possible to create a rogue MySQL...

8.2CVSS5.5AI score0.00362EPSS
SaveExploits0
EUVD
EUVD
added 2025/10/22 6:30 p.m.9 views

EUVD-2025-35613

Software which sets SOREUSEPORTLB on a socket and then connects it to a host will not directly observe any problems. However, due to its membership in a load-balancing group, that socket will receive packets originating from any host. This breaks the contract of the connect2 and implied connect v...

5.4CVSS6.2AI score0.00202EPSS
SaveExploits0References2
NVD
NVD
added 2025/10/22 6:15 p.m.12 views

CVE-2025-24934

Software which sets SOREUSEPORTLB on a socket and then connects it to a host will not directly observe any problems. However, due to its membership in a load-balancing group, that socket will receive packets originating from any host. This breaks the contract of the connect2 and implied connect v...

5.4CVSS0.00202EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/10/22 5:43 p.m.5 views

CVE-2025-24934 SO_REUSEPORT_LB breaks connect(2) for UDP sockets

Software which sets SOREUSEPORTLB on a socket and then connects it to a host will not directly observe any problems. However, due to its membership in a load-balancing group, that socket will receive packets originating from any host. This breaks the contract of the connect2 and implied connect v...

6.3AI score0.00202EPSS
SaveExploits0References2
CVE
CVE
added 2025/10/22 5:43 p.m.23 views

CVE-2025-24934

CVE-2025-24934 affects FreeBSD kernels. When SO_REUSEPORT_LB is used and a socket is connected, the kernel can place it into a load-balancing group and may deliver incoming packets to sockets that are connected to a different host, breaking the contract that connected sockets only receive packets...

5.4CVSS6.3AI score0.00202EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/10/22 5:43 p.m.16 views

CVE-2025-24934 SO_REUSEPORT_LB breaks connect(2) for UDP sockets

Software which sets SOREUSEPORTLB on a socket and then connects it to a host will not directly observe any problems. However, due to its membership in a load-balancing group, that socket will receive packets originating from any host. This breaks the contract of the connect2 and implied connect v...

0.00202EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/10/22 4:47 p.m.4 views

External Control of File Name or Path

Overview aiomysql is a MySQL driver for asyncio. Affected versions of this package are vulnerable to External Control of File Name or Path via the LOADLOCAL instruction packet. An attacker can obtain arbitrary files from the client system by setting up a malicious MySQL server that sends crafted...

8.2CVSS6.9AI score0.00362EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2025/10/22 4:47 p.m.17 views

aiomysql allows arbitrary access to client files through vulnerability of a malicious MySQL server

Summary The client-side settings are not checked before sending local files to MySQL server, which allows obtaining arbitrary files from the client using a rogue server. Details It is possible to create a rogue MySQL server that emulates authorization, ignores client flags and requests arbitrary...

8.2CVSS6.5AI score0.00362EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2025/10/22 4:45 p.m.5 views

GHSA-CQ46-M9X9-J8W2 Scapy Session Loading Vulnerable to Arbitrary Code Execution via Untrusted Pickle Deserialization

Summary An unsafe deserialization vulnerability in Scapy Internally, this triggers: python main.py SESSION = pickle.loadgzip.opensessionname, "rb" Since no validation or restriction is performed on the deserialized object, any code embedded via reduce will be executed immediately. This makes it...

5.4CVSS6.2AI score
SaveExploits0References3
NVD
NVD
added 2025/10/22 2:15 p.m.7 views

CVE-2022-50571

In the Linux kernel, the following vulnerability has been resolved: btrfs: call btrfsremovefreespacecachelocked on cache load failure Now that lockdep is staying enabled through our entire CI runs I started seeing the following stack in generic/475 ------------ cut here ------------ WARNING: CPU:...

0.00185EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/22 2:15 p.m.7 views

UBUNTU-CVE-2022-50571

In the Linux kernel, the following vulnerability has been resolved: btrfs: call btrfsremovefreespacecachelocked on cache load failure Now that lockdep is staying enabled through our entire CI runs I started seeing the following stack in generic/475 ------------ cut here ------------ WARNING: CPU:...

5.7AI score0.00185EPSS
SaveExploits0References5
CVE
CVE
added 2025/10/22 1:23 p.m.20 views

CVE-2022-50571

CVE-2022-50571 involves the Linux kernel Btrfs path. The issue arises when loading the free-space cache: a temporary free_space_ctl is used during the load to avoid allocations, but on error cleaning up could touch discardable stats without holding the correct lock. The remediation is to invoke _...

5.9AI score0.00185EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/22 1:23 p.m.7 views

CVE-2022-50571 btrfs: call __btrfs_remove_free_space_cache_locked on cache load failure

In the Linux kernel, the following vulnerability has been resolved: btrfs: call btrfsremovefreespacecachelocked on cache load failure Now that lockdep is staying enabled through our entire CI runs I started seeing the following stack in generic/475 ------------ cut here ------------ WARNING: CPU:...

6.3AI score0.00185EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2025/10/22 1:23 p.m.14 views

CVE-2022-50571 btrfs: call __btrfs_remove_free_space_cache_locked on cache load failure

In the Linux kernel, the following vulnerability has been resolved: btrfs: call btrfsremovefreespacecachelocked on cache load failure Now that lockdep is staying enabled through our entire CI runs I started seeing the following stack in generic/475 ------------ cut here ------------ WARNING: CPU:...

0.00185EPSS
SaveExploits0References2
Rows per page
Query Builder