Lucene search
+L

29251 matches found

Tenable Nessus
Tenable Nessus
added 2025/09/20 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2022-50373

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: fs: dlm: fix race in lowcomms This patch fixes a race between queuework in...

9.8CVSS4.7AI score0.00392EPSS
SaveExploits0References3
NVD
NVD
added 2025/09/19 12:15 p.m.13 views

CVE-2025-10707

A weakness has been identified in JeecgBoot up to 3.8.2. Affected is an unknown function of the file /message/sysMessageTemplate/sendMsg. Executing manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has been made available to the public and could be...

8.8CVSS0.00396EPSS
SaveExploits1References4
Snyk
Snyk
added 2025/09/19 11:47 a.m.5 views

Incorrect User Management

Overview jeecgboot-vue3 is an Agent =============== 当前最新版本: 3.8.1(预计发布时间:2025-04-21) Affected versions of this package are vulnerable to Incorrect User Management via the sendMsg function in the /message/sysMessageTemplate/sendMsg path. An attacker can gain unauthorized access to sensitive...

8.8CVSS6.6AI score0.00396EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/09/19 11:32 a.m.4 views

CVE-2025-10707 JeecgBoot sendMsg improper authorization

A weakness has been identified in JeecgBoot up to 3.8.2. Affected is an unknown function of the file /message/sysMessageTemplate/sendMsg. Executing manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has been made available to the public and could be...

6.5CVSS6.2AI score0.00396EPSS
SaveExploits1References4
OSV
OSV
added 2025/09/19 11:32 a.m.9 views

CVE-2025-10707 JeecgBoot sendMsg improper authorization

A weakness has been identified in JeecgBoot up to 3.8.2. Affected is an unknown function of the file /message/sysMessageTemplate/sendMsg. Executing manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has been made available to the public and could be...

5.3CVSS6.2AI score
SaveExploits0References6
CNNVD
CNNVD
added 2025/09/19 12:00 a.m.9 views

JeecgBoot 安全漏洞

JeecgBoot is a Java low-code platform for enterprise web applications from China National Torch Jeecg. A security vulnerability exists in JeecgBoot 3.8.2 and earlier versions, which stems from improper authorization in the file /message/sysMessageTemplate/sendMsg, which could lead to a remote...

8.8CVSS6.4AI score0.00396EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/09/19 12:00 a.m.12 views

PT-2025-38525

Name of the Vulnerable Software and Affected Versions JeecgBoot versions through 3.8.2 Description A weakness exists in JeecgBoot that may lead to improper authorization. The issue affects an unknown function within the /message/sysMessageTemplate/sendMsg file. The exploit for this issue has been...

6.5CVSS6.3AI score0.00396EPSS
SaveExploits1References8
OpenVAS
OpenVAS
added 2025/09/19 12:00 a.m.4 views

PHP Detection Consolidation

Consolidation of PHP detections. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.171722";...

7.1AI score
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2025/09/18 11:38 p.m.13 views

SUSE CVE-2023-53377

In the Linux kernel, the following vulnerability has been resolved: cifs: prevent use-after-free by freeing the cfile later In smb2compoundop we have a possible use-after-free which can cause hard to debug problems later on. This was revealed during stress testing with KASAN enabled kernel. Fixin...

5.5CVSS6.5AI score0.00148EPSS
SaveExploits0References19
RedhatCVE
RedhatCVE
added 2025/09/18 4:57 p.m.6 views

CVE-2023-53377

In the Linux kernel, the following vulnerability has been resolved: cifs: prevent use-after-free by freeing the cfile later In smb2compoundop we have a possible use-after-free which can cause hard to debug problems later on. This was revealed during stress testing with KASAN enabled kernel. Fixin...

7.1CVSS5.5AI score0.00148EPSS
SaveExploits0References4
NVD
NVD
added 2025/09/18 4:15 p.m.7 views

CVE-2023-53427

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix warning and UAF when destroy the MR list If the MR allocate failed, the MR recovery work not initialized and list not cleared. Then will be warning and UAF when release the MR: WARNING: CPU: 4 PID: 824 at...

7.8CVSS0.00149EPSS
SaveExploits0References7
OSV
OSV
added 2025/09/18 4:15 p.m.11 views

UBUNTU-CVE-2023-53427

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix warning and UAF when destroy the MR list If the MR allocate failed, the MR recovery work not initialized and list not cleared. Then will be warning and UAF when release the MR: WARNING: CPU: 4 PID: 824 at...

7.8CVSS6.1AI score0.00149EPSS
SaveExploits0References10
NVD
NVD
added 2025/09/18 2:15 p.m.11 views

CVE-2025-10668

A security vulnerability has been detected in itsourcecode Online Discussion Forum 1.0. This affects an unknown part of the file /members/composemsgadmin.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed...

9.8CVSS0.00435EPSS
SaveExploits1References5
OSV
OSV
added 2025/09/18 2:15 p.m.8 views

CVE-2025-10668

A security vulnerability has been detected in itsourcecode Online Discussion Forum 1.0. This affects an unknown part of the file /members/composemsgadmin.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed...

9.8CVSS5.7AI score0.00435EPSS
SaveExploits1References5
NVD
NVD
added 2025/09/18 2:15 p.m.32 views

CVE-2023-53399

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix NULL pointer dereference in smb2getinfofilesystem If share is , share-path is NULL and it cause NULL pointer dereference issue...

7.5CVSS0.0028EPSS
SaveExploits0References5
OSV
OSV
added 2025/09/18 2:15 p.m.3 views

DEBIAN-CVE-2023-53377

In the Linux kernel, the following vulnerability has been resolved: cifs: prevent use-after-free by freeing the cfile later In smb2compoundop we have a possible use-after-free which can cause hard to debug problems later on. This was revealed during stress testing with KASAN enabled kernel. Fixin...

7.8CVSS6.3AI score0.00148EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/18 1:32 p.m.23 views

CVE-2025-10668

The CVE concerns itsourcecode Online Discussion Forum 1.0, where manipulation of the ID parameter in /members/compose_msg_admin.php enables SQL injection. This is a network-accessible issue with potential remote exploitation, and multiple feeds (nvd, Red Hat, CVE records, and security trackers) c...

9.8CVSS7.2AI score0.00435EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/09/18 1:32 p.m.19 views

CVE-2025-10668 itsourcecode Online Discussion Forum compose_msg_admin.php sql injection

A security vulnerability has been detected in itsourcecode Online Discussion Forum 1.0. This affects an unknown part of the file /members/composemsgadmin.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed...

7.5CVSS0.00435EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/09/18 1:02 p.m.5 views

CVE-2025-10667 itsourcecode Online Discussion Forum compose_msg.php sql injection

A weakness has been identified in itsourcecode Online Discussion Forum 1.0. Affected by this issue is some unknown functionality of the file /members/composemsg.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been...

7.5CVSS7.3AI score0.00525EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/09/18 1:02 p.m.25 views

CVE-2025-10667 itsourcecode Online Discussion Forum compose_msg.php sql injection

A weakness has been identified in itsourcecode Online Discussion Forum 1.0. Affected by this issue is some unknown functionality of the file /members/composemsg.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been...

7.5CVSS0.00525EPSS
SaveExploits1References5
Rows per page
Query Builder