Lucene search
+L

3161 matches found

NVD
NVD
added 2025/04/01 9:15 p.m.10 views

CVE-2025-31455

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ralxz Limit Max IPs Per User limit-max-ips-per-user allows DOM-Based XSS.This issue affects Limit Max IPs Per User: from n/a through = 1.5...

7.1CVSS0.00363EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/01 8:58 p.m.6 views

CVE-2025-31455 WordPress Limit Max IPs Per User plugin <= 1.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Limit Max IPs Per User allows DOM-Based XSS. This issue affects Limit Max IPs Per User: from n/a through 1.5...

7.1CVSS7.2AI score0.00363EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/01 8:58 p.m.26 views

CVE-2025-31455 WordPress Limit Max IPs Per User plugin <= 1.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ralxz Limit Max IPs Per User limit-max-ips-per-user allows DOM-Based XSS.This issue affects Limit Max IPs Per User: from n/a through = 1.5...

7.1CVSS0.00363EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2025/04/01 1:43 a.m.11 views

SUSE CVE-2025-2953

A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0+cu124. Affected by this issue is the function torch.mkldnnmaxpool2d. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be...

5.5CVSS3.9AI score0.00243EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/04/01 12:0 a.m.7 views

WordPress plugin Limit Max IPs Per User 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

7.1CVSS6.7AI score0.00363EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/04/01 12:0 a.m.12 views

PT-2025-14414 · Unknown · Limit Max Ips Per User

Name of the Vulnerable Software and Affected Versions: Limit Max IPs Per User versions 1.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This enables potential attackers...

7.1CVSS7.2AI score0.00363EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2025/03/30 6:30 p.m.18 views

PyTorch susceptible to local Denial of Service

A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0+cu124. Affected by this issue is the function torch.mkldnnmaxpool2d. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be...

5.5CVSS6.5AI score0.00243EPSS
SaveExploits1References9Affected Software1
OSV
OSV
added 2025/03/30 4:15 p.m.12 views

PYSEC-2025-191

A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0+cu124. Affected by this issue is the function torch.mkldnnmaxpool2d. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be...

5.5CVSS4.7AI score0.00243EPSS
SaveExploits1References7
OSV
OSV
added 2025/03/30 4:15 p.m.13 views

AZL-60931 CVE-2025-2953 affecting package pytorch for versions less than 2.0.0-9

A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0+cu124. Affected by this issue is the function torch.mkldnnmaxpool2d. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be...

5.5CVSS5.9AI score0.00243EPSS
SaveExploits1References1
PyPA
PyPA
added 2025/03/30 4:15 p.m.18 views

PYSEC-2025-191

A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0+cu124. Affected by this issue is the function torch.mkldnnmaxpool2d. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be...

5.5CVSS4.7AI score0.00243EPSS
SaveExploits1References7Affected Software1
OSV
OSV
added 2025/03/30 4:15 p.m.3 views

DEBIAN-CVE-2025-2953

A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0+cu124. Affected by this issue is the function torch.mkldnnmaxpool2d. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be...

5.5CVSS3.7AI score0.00243EPSS
SaveExploits1References1
OSV
OSV
added 2025/03/30 4:15 p.m.12 views

UBUNTU-CVE-2025-2953

A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0+cu124. Affected by this issue is the function torch.mkldnnmaxpool2d. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be...

5.5CVSS5.3AI score0.00243EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2025/03/30 12:0 a.m.5 views

PyTorch 安全漏洞

PyTorch is a Python package open-sourced by PyTorch. PyTorch suffers from a denial of service vulnerability caused by a floating point exception in the function torch.mkldnnmaxpool2d. An attacker can exploit this vulnerability to cause a denial of service...

5.5CVSS6.7AI score0.00243EPSS
SaveExploits1References6
OSV
OSV
added 2025/03/28 3:15 p.m.10 views

AZL-59350 CVE-2025-30211 affecting package erlang for versions less than 25.3.2.20-1

Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.1, 26.2.5.10, and 25.3.2.19, a maliciously formed KEX init message can result with high memory usage. Implementation does not verify RFC specified limits on algorithm names 64 characters provided in K...

7.5CVSS5.7AI score0.00436EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/28 3:15 p.m.10 views

UBUNTU-CVE-2025-30211

Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.1, 26.2.5.10, and 25.3.2.19, a maliciously formed KEX init message can result with high memory usage. Implementation does not verify RFC specified limits on algorithm names 64 characters provided in K...

7.5CVSS5.8AI score0.00436EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
added 2025/03/28 3:1 a.m.8 views

SUSE CVE-2025-21868

In the Linux kernel, the following vulnerability has been resolved: net: allow small head cache usage with large MAXSKBFRAGS values Sabrina reported the following splat: WARNING: CPU: 0 PID: 1 at net/core/dev.c:6935 netifnapiaddweightlocked+0x8f2/0xba0 Modules linked in: CPU: 0 UID: 0 PID: 1 Comm...

5.5CVSS7.7AI score0.00354EPSS
SaveExploits0References13
Cvelist
Cvelist
added 2025/03/27 1:38 p.m.24 views

CVE-2025-21868 net: allow small head cache usage with large MAX_SKB_FRAGS values

In the Linux kernel, the following vulnerability has been resolved: net: allow small head cache usage with large MAXSKBFRAGS values Sabrina reported the following splat: WARNING: CPU: 0 PID: 1 at net/core/dev.c:6935 netifnapiaddweightlocked+0x8f2/0xba0 Modules linked in: CPU: 0 UID: 0 PID: 1 Comm...

7.5CVSS0.00354EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/03/27 12:0 a.m.7 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from allowing small header caches to be used with large MAXSKBFRAGS values, which may result in a warning...

5.5CVSS6.5AI score0.00354EPSS
SaveExploits0References5
Packet Storm
Packet Storm
added 2025/03/24 12:0 a.m.210 views

TeamPass 3.0.0.21 SQL Injection

TeamPass version 3.0.0.21 suffers from a remote SQL injection vulnerability. Exploit Title: TeamPass SQL Injection Google Dork: intitle:"Teampass" + inurl:index.php?page=items Date: 02/23/2025 Exploit Author: Max Meyer - Rivendell Vendor Homepage: http://www.teampass.net Software Link:...

7.5CVSS8.5AI score0.08354EPSS
SaveExploits6
Exploit DB
Exploit DB
added 2025/03/22 12:0 a.m.477 views

TeamPass 3.0.0.21 - SQL Injection

Exploit Title: TeamPass SQL Injection Google Dork: intitle:"Teampass" + inurl:index.php?page=items Date: 02/23/2025 Exploit Author: Max Meyer - Rivendell Vendor Homepage: http://www.teampass.net Software Link: https://github.com/nilsteampassnet/TeamPass Version: 2.1.24 and prior Tested on:...

7.5CVSS7.2AI score0.08354EPSS
SaveExploits6
Rows per page
Query Builder