Lucene search
+L

38308 matches found

Cvelist
Cvelist
•added 2026/01/14 12:00 a.m.•38 views

CVE-2025-67835

Paessler PRTG Network Monitor before 25.4.114 allows Denial-of-Service DoS by an authenticated attacker via the Notification Contacts functionality...

0.00411EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/14 12:00 a.m.•7 views

CVE-2025-67835: Uncontrolled Resource Consumption

Paessler PRTG Network Monitor before 25.4.114 allows Denial-of-Service DoS by an authenticated attacker via the Notification Contacts functionality...

6.5CVSS5.8AI score0.00411EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/14 12:00 a.m.•13 views

CVE-2025-67835

Paessler PRTG Network Monitor before 25.4.114 allows Denial-of-Service DoS by an authenticated attacker via the Notification Contacts functionality...

6.5CVSS5.4AI score0.00411EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/01/14 12:00 a.m.•33 views

PT-2026-2923

Name of the Vulnerable Software and Affected Versions Paessler PRTG Network Monitor versions prior to 25.4.114 Description An authenticated attacker can cause a Denial-of-Service DoS condition through the Notification Contacts functionality. Recommendations Update to version 25.4.114 or later...

6.5CVSS6.5AI score0.00411EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/01/14 12:00 a.m.•20 views

EUVD-2026-2425

Paessler PRTG Network Monitor before 25.4.114 allows Denial-of-Service DoS by an authenticated attacker via the Notification Contacts functionality...

6.5CVSS6.3AI score0.00411EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/01/13 10:53 p.m.•24 views

CVE-2025-15496

A vulnerability was determined in guchengwuyue yshopmall up to 1.9.1. Affected is the function getPage of the file /api/jobs. This manipulation of the argument sort causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The project...

9.8CVSS6.2AI score0.00387EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/13 10:53 p.m.•17 views

CVE-2025-14948

The miniOrange OTP Verification and SMS Notification for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enablewcsmsnotification AJAX action in all versions up to, and including, 4.3.8. This makes it possible for...

5.3CVSS5.3AI score0.0027EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2026/01/13 4:16 p.m.•34 views

AZL-74330 CVE-2025-71089 affecting package kernel for versions less than 6.6.121.1-1

In the Linux kernel, the following vulnerability has been resolved: iommu: disable SVA when CONFIGX86 is set Patch series "Fix stale IOTLB entries for kernel address space", v7. This proposes a fix for a security vulnerability related to IOMMU Shared Virtual Addressing SVA. In an SVA context, an...

7.8CVSS6.8AI score0.00162EPSS
SaveExploits0References1
AstraLinux
AstraLinux
•added 2026/01/13 2:01 p.m.•7 views

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: iouring/zctx: Check chained notification contexts. Send zc only when there are links available for requests coming from the same context. There are some ambiguous reports related to syz, so let’s examine the assumption regardi...

7.8CVSS6AI score0.00142EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2026/01/12 5:08 a.m.•19 views

kernel: audit: fix out-of-bounds read in audit_compare_dname_path()

An out of bounds read exists in the linux kernel such that when a watch on dir=/ is combined with an fsnotify event for a single-character name directly under root an out-of-bounds read can occur in auditcomparednamepath...

7.1CVSS6.4AI score0.00154EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/01/10 7:03 a.m.•11 views

CVE-2025-14948 miniOrange OTP Verification and SMS Notification for WooCommerce <= 4.3.8 - Missing Authorization to Unauthenticated Notification Settings Modification

The miniOrange OTP Verification and SMS Notification for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enablewcsmsnotification AJAX action in all versions up to, and including, 4.3.8. This makes it possible for...

5.3CVSS5.8AI score0.0027EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/01/10 12:00 a.m.•26 views

PT-2026-1760

Name of the Vulnerable Software and Affected Versions miniOrange OTP Verification and SMS Notification for WooCommerce plugin for WordPress versions through 4.3.8 Description The miniOrange OTP Verification and SMS Notification for WooCommerce plugin for WordPress is subject to unauthorized data...

5.3CVSS6.2AI score0.0027EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/10 12:00 a.m.•8 views

CVE-2025-14948: Missing Authorization

The miniOrange OTP Verification and SMS Notification for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enablewcsmsnotification AJAX action in all versions up to, and including, 4.3.8. This makes it possible for...

5.3CVSS5.8AI score0.0027EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/01/09 10:11 p.m.•21 views

WordPress miniOrange OTP Verification and SMS Notification for WooCommerce plugin <= 4.3.8 - Missing Authorization to Unauthenticated Notification Settings Modification vulnerability

Missing Authorization to Unauthenticated Notification Settings Modification vulnerability discovered by Abdualrhman Muzamil - 0bytes in WordPress Plugin miniOrange OTP Verification and SMS Notification for WooCommerce versions = 4.3.8...

5.3CVSS7AI score0.0027EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2026/01/09 12:41 p.m.•23 views

CVE-2023-25748

By displaying a prompt with a long description, the fullscreen notification could have been hidden, resulting in potential user confusion or spoofing attacks. This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 111...

4.3CVSS6.5AI score0.00348EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 12:40 p.m.•22 views

CVE-2023-43999

An issue in COLORFULlaundry mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

5.4CVSS6.9AI score0.00394EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/09 12:40 p.m.•19 views

CVE-2023-43996

An issue in Q co ltd mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

5.4CVSS6.9AI score0.00394EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/09 12:38 p.m.•24 views

CVE-2023-29534

Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android. These could have led to potential user confusion and spoofing attacks. This bug only affects Firefox and Focus for Android. Other versions of Firefox are unaffected. This vulnerability affects...

9.1CVSS8AI score0.00706EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 12:36 p.m.•29 views

CVE-2023-49098

Discourse-reactions is a plugin that allows user to add their reactions to the post. Data about a user's reaction notifications could be exposed. This vulnerability was patched in commit 2c26939...

3.5CVSS5.6AI score0.00307EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 12:34 p.m.•24 views

CVE-2023-45561

An issue in A-WORLD OIRASE BEERwaiting Line v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...

5.3CVSS6.9AI score0.00376EPSS
SaveExploits0References1
Rows per page
Query Builder