Lucene search
+L

686 matches found

RedhatCVE
RedhatCVE
added 2025/12/18 9:34 p.m.14 views

CVE-2025-43526

This issue was addressed with improved URL validation. This issue is fixed in Safari 26.2, macOS Tahoe 26.2. On a Mac with Lockdown Mode enabled, web content opened via a file URL may be able to use Web APIs that should be restricted...

9.8CVSS5.8AI score0.00521EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/17 9:16 p.m.12 views

CVE-2025-43526

This issue was addressed with improved URL validation. This issue is fixed in Safari 26.2, macOS Tahoe 26.2. On a Mac with Lockdown Mode enabled, web content opened via a file URL may be able to use Web APIs that should be restricted...

9.8CVSS0.00521EPSS
SaveExploits0References2
OSV
OSV
added 2025/12/17 9:16 p.m.8 views

CVE-2025-43526

This issue was addressed with improved URL validation. This issue is fixed in macOS Tahoe 26.2, Safari 26.2. On a Mac with Lockdown Mode enabled, web content opened via a file URL may be able to use Web APIs that should be restricted...

9.8CVSS5.7AI score0.00521EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/12/17 8:46 p.m.4 views

CVE-2025-43526

This issue was addressed with improved URL validation. This issue is fixed in macOS Tahoe 26.2, Safari 26.2. On a Mac with Lockdown Mode enabled, web content opened via a file URL may be able to use Web APIs that should be restricted...

5.6AI score0.00521EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/17 8:46 p.m.42 views

CVE-2025-43526

CVE-2025-43526 affects Apple macOS Tahoe < 26.2 and Safari

9.8CVSS5.8AI score0.00521EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2025/12/17 8:46 p.m.38 views

CVE-2025-43526

This issue was addressed with improved URL validation. This issue is fixed in Safari 26.2, macOS Tahoe 26.2. On a Mac with Lockdown Mode enabled, web content opened via a file URL may be able to use Web APIs that should be restricted...

0.00521EPSS
SaveExploits0References2
SUSE Linux
SUSE Linux
added 2025/12/17 10:53 a.m.8 views

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues were fixed: CVE-2022-50253: bpf: make sure skb-len != 0 when redirecting to a tunneling device bsc1249912. CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in...

8.7CVSS7.1AI score0.006EPSS
SaveExploits1References278
CNNVD
CNNVD
added 2025/12/17 12:0 a.m.7 views

Apple Safari和Apple macOS 安全漏洞

Apple Safari and Apple macOS are both products of Apple Inc. Apple Safari is a web browser that is the default browser shipped with the Mac OS X and iOS operating systems. apple macOS is a specialized operating system developed specifically for Mac computers. A security vulnerability exists in...

9.8CVSS6AI score0.00521EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2025/12/16 1:39 p.m.8 views

WordPress Login Lockdown & Protection plugin <= 2.14 - IP Block Bypass vulnerability

IP Block Bypass vulnerability discovered by William Cooke - Modux in WordPress Plugin Login Lockdown versions = 2.14...

5.3CVSS6.8AI score0.00441EPSS
SaveExploits0References1Affected Software1
SUSE Linux
SUSE Linux
added 2025/12/15 11:9 a.m.12 views

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues were fixed: CVE-2022-50253: bpf: make sure skb-len != 0 when redirecting to a tunneling device bsc1249912. CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in...

8.7CVSS8.2AI score0.006EPSS
SaveExploits1References320
RedhatCVE
RedhatCVE
added 2025/12/14 5:3 a.m.12 views

CVE-2025-11707

The Login Lockdown & Protection plugin for WordPress is vulnerable to IP Block Bypass in all versions up to, and including, 2.14. This is due to $unblockkey key being insufficiently random allowing unauthenticated users, with access to an administrative user email, to generate valid unblock keys...

5.3CVSS6AI score0.00441EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/13 6:30 p.m.46 views

EUVD-2025-203209

The Login Lockdown & Protection plugin for WordPress is vulnerable to IP Block Bypass in all versions up to, and including, 2.14. This is due to $unblockkey key being insufficiently random allowing unauthenticated users, with access to an administrative user email, to generate valid unblock keys...

5.3CVSS5.5AI score0.00441EPSS
SaveExploits0References4
NVD
NVD
added 2025/12/13 4:16 p.m.8 views

CVE-2025-11707

The Login Lockdown & Protection plugin for WordPress is vulnerable to IP Block Bypass in all versions up to, and including, 2.14. This is due to $unblockkey key being insufficiently random allowing unauthenticated users, with access to an administrative user email, to generate valid unblock keys...

5.3CVSS0.00441EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/12/13 4:31 a.m.38 views

CVE-2025-11707 Login Lockdown & Protection <= 2.14 - IP Block Bypass

The Login Lockdown & Protection plugin for WordPress is vulnerable to IP Block Bypass in all versions up to, and including, 2.14. This is due to $unblockkey key being insufficiently random allowing unauthenticated users, with access to an administrative user email, to generate valid unblock keys...

5.3CVSS0.00441EPSS
SaveExploits0References3
CVE
CVE
added 2025/12/13 4:31 a.m.26 views

CVE-2025-11707

CVE-2025-11707 – Login Lockdown & Protection (WordPress) : A vulnerability in all versions up to and including 2.14 allows unauthenticated attackers who have access to an admin email to generate valid unblock keys for their IP, bypassing IP blocks after failed logins due to insufficient randomnes...

5.3CVSS5.7AI score0.00441EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/12/13 12:0 a.m.16 views

PT-2025-51054

The Login Lockdown & Protection plugin for WordPress is vulnerable to IP Block Bypass in all versions up to, and including, 2.14. This is due to $unblock key key being insufficiently random allowing unauthenticated users, with access to an administrative user email, to generate valid unblock keys...

5.3CVSS6AI score0.00441EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/13 12:0 a.m.8 views

WordPress plugin Login Lockdown & Protection 安全特征问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security feature issue...

5.3CVSS6.4AI score0.00441EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/12/12 12:0 a.m.19 views

PT-2025-51902

Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26.2 Safari versions prior to 26.2 Description A flaw exists due to improved URL validation. Specifically, on a Mac with Lockdown Mode enabled, web content opened via a file URL may be able to use Web APIs that...

9.8CVSS6.2AI score0.00521EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2025/11/20 12:0 a.m.15 views

TencentOS Server 3: kernel (TSSA-2024:1022)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:1022 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

8.1CVSS6.7AI score0.06309EPSS
SaveExploits4References15
Tenable Nessus
Tenable Nessus
added 2025/10/27 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-40021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: dynevent: Add a missing lockdown check on dynevent Since dynamicevents interface on tracefs is compatible with kprobeevents and uprobeevents, it should...

6.6AI score0.00193EPSS
SaveExploits0References3
Rows per page
Query Builder