Lucene search
+L

38610 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2021-31051

Malicious code in bioql PyPI...

6.1CVSS5.4AI score0.00581EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•23 views

EUVD-2023-57720

Malicious code in bioql PyPI...

5.9CVSS5.9AI score0.00404EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•25 views

EUVD-2023-58012

Malicious code in bioql PyPI...

4.3CVSS6.2AI score0.00603EPSS
SaveExploits0References4
NVD
NVD
•added 2025/10/03 12:15 p.m.•19 views

CVE-2025-9895

The Notification Bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2. This is due to missing or incorrect nonce validation on the 'subscriber-list-empty.php' file. This makes it possible for unauthenticated attackers to empty the subscrib...

4.3CVSS0.00133EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/10/03 11:17 a.m.•30 views

CVE-2025-9895 Notification Bar <= 2.2 - Cross-Site Request Forgery

The Notification Bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2. This is due to missing or incorrect nonce validation on the 'subscriber-list-empty.php' file. This makes it possible for unauthenticated attackers to empty the subscrib...

4.3CVSS0.00133EPSS
SaveExploits0References2
CVE
CVE
•added 2025/10/03 11:17 a.m.•36 views

CVE-2025-9895

CVE-2025-9895 : The WordPress plugin Notification Bar (versions

4.3CVSS5.6AI score0.00133EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/03 12:00 a.m.•6 views

CVE-2025-9895: Cross-Site Request Forgery (CSRF)

The Notification Bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2. This is due to missing or incorrect nonce validation on the 'subscriber-list-empty.php' file. This makes it possible for unauthenticated attackers to empty the subscrib...

4.3CVSS5.6AI score0.00133EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/10/03 12:00 a.m.•21 views

PT-2025-40508

Name of the Vulnerable Software and Affected Versions Notification Bar plugin for WordPress versions prior to 2.3 Description The Notification Bar plugin for WordPress is susceptible to Cross-Site Request Forgery CSRF. This is caused by insufficient or incorrect nonce validation within the...

4.3CVSS6.2AI score0.00133EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/10/03 12:00 a.m.•22 views

WordPress Plugin Notification Bar: Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

4.3CVSS6.4AI score0.00133EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
•added 2025/10/02 1:07 a.m.•11 views

can: j1939: implement NETDEV_UNREGISTER notification handler

...

5.5CVSS6.1AI score0.00147EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2025/10/01 11:22 p.m.•9 views

SUSE CVE-2025-39925

In the Linux kernel, the following vulnerability has been resolved: can: j1939: implement NETDEVUNREGISTER notification handler syzbot is reporting unregisternetdevice: waiting for vcan0 to become free. Usage count = 2 problem, for j1939 protocol did not have NETDEVUNREGISTER notification handler...

5.5CVSS5.9AI score0.00147EPSS
SaveExploits0References23
osv_ubuntu
osv_ubuntu
•added 2025/10/01 8:15 a.m.•25 views

UBUNTU-CVE-2025-39925

In the Linux kernel, the following vulnerability has been resolved: can: j1939: implement NETDEVUNREGISTER notification handler syzbot is reporting unregisternetdevice: waiting for vcan0 to become free. Usage count = 2 problem, for j1939 protocol did not have NETDEVUNREGISTER notification handler...

5.5CVSS5.9AI score0.00147EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/10/01 8:07 a.m.•3 views

CVE-2025-39925 can: j1939: implement NETDEV_UNREGISTER notification handler

In the Linux kernel, the following vulnerability has been resolved: can: j1939: implement NETDEVUNREGISTER notification handler syzbot is reporting unregisternetdevice: waiting for vcan0 to become free. Usage count = 2 problem, for j1939 protocol did not have NETDEVUNREGISTER notification handler...

5.9AI score0.00147EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2025/10/01 12:00 a.m.•15 views

Fedora 42 : bird (2025-f6b553e67d)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-f6b553e67d advisory. BIRD 3.1.4 2025-09-22 BGP: Fixed crash on Notification with a message, CVE-2025-59688 BGP: Fixed invalid memory access in pending TX flush BGP: Fixed a rare...

5.5AI score
SaveExploits0References2
CNVD
CNVD
•added 2025/10/01 12:00 a.m.•26 views

VMware vCenter SMTP Header Injection Vulnerability

VMware vCenter is a virtualization management software from VMware. An SMTP header injection vulnerability exists in VMware vCenter, which can be exploited by an attacker to manipulate notification emails for scheduled tasks...

8.5CVSS7.8AI score0.00655EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/09/30 6:41 p.m.•23 views

CVE-2025-41250

VMware vCenter contains an SMTP header injection vulnerability. A malicious actor with non-administrative privileges on vCenter who has permission to create scheduled tasks may be able to manipulate the notification emails sent for scheduled tasks...

8.5CVSS7.2AI score0.00655EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/09/30 12:00 a.m.•15 views

Fedora 43 : bird (2025-182c305561)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-182c305561 advisory. BIRD 3.1.4 2025-09-22 BGP: Fixed crash on Notification with a message, CVE-2025-59688 BGP: Fixed invalid memory access in pending TX flush BGP: Fixed a rare...

5.5AI score
SaveExploits0References2
NVD
NVD
•added 2025/09/29 6:15 p.m.•19 views

CVE-2025-41250

VMware vCenter contains an SMTP header injection vulnerability. A malicious actor with non-administrative privileges on vCenter who has permission to create scheduled tasks may be able to manipulate the notification emails sent for scheduled tasks...

8.5CVSS0.00655EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/29 5:44 p.m.•15 views

CVE-2025-41250 Header injection vulnerability

VMware vCenter contains an SMTP header injection vulnerability. A malicious actor with non-administrative privileges on vCenter who has permission to create scheduled tasks may be able to manipulate the notification emails sent for scheduled tasks...

8.5CVSS7.8AI score0.00655EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/29 5:44 p.m.•125 views

CVE-2025-41250

CVE-2025-41250 describes an SMTP header injection vulnerability in VMware vCenter. A malicious actor with non-administrative privileges and permission to create scheduled tasks can manipulate the notification emails sent for these tasks. The cited sources (NVD/VMware advisories) assign CVSSv3.1 b...

8.5CVSS7.8AI score0.00655EPSS
SaveExploits0References1
Rows per page
Query Builder