Lucene search
+L

10234 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/15 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2024-38390

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails Calling a6xxdestroy...

5.5CVSS5AI score0.00222EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:00 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-38429

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bus: mhi: ep: Update read pointer only after buffer is written Inside mhiepringaddelement, the read pointer rdoffset is updated before the buffer is written,...

10CVSS6.5AI score0.00389EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2022-49079

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: traverse devices under chunkmutex in btrfscanactivatezone btrfscanactivatezon...

5.5CVSS5.3AI score0.00181EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:00 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-21929

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix use-after-free issue in hidishtpclremove During the rmmod operation...

7.8CVSS5.8AI score0.00206EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2025-38231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: nfsd: Initialize ssc before laundromatwork to prevent NULL dereference In nfs4statestartnet,...

5.5CVSS5.8AI score0.00159EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:00 a.m.6 views

CBL Mariner 2.0 Security Update: sqlite (CVE-2025-7458)

The version of sqlite installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-7458 advisory. - An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through 3.41.1 allow...

9.1CVSS7AI score0.00237EPSS
SaveExploits0References2
NVD
NVD
added 2025/08/14 7:15 p.m.10 views

CVE-2025-54715

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Dmitry V. CEO of "UKR Solution" Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders allows Path Traversal.This issue affects Barcode Scanner wi...

4.9CVSS0.00403EPSS
SaveExploits0References1
OSV
OSV
added 2025/08/14 6:52 p.m.6 views

MAL-2025-28484 Malicious code in order-management-system (npm)

The package order-management-system was found to contain malicious code...

7.2AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.6 views

Malicious code in order-management-system (npm)

The package order-management-system was found to contain malicious code...

7AI score
SaveExploits0
Cvelist
Cvelist
added 2025/08/14 6:21 p.m.25 views

CVE-2025-54715 WordPress Barcode Scanner with Inventory & Order Manager Plugin <= 1.9.0 - Arbitrary File Download Vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Dmitry V. CEO of "UKR Solution" Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders allows Path Traversal.This issue affects Barcode Scanner wi...

4.9CVSS0.00403EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/14 6:21 p.m.4 views

CVE-2025-54715 WordPress Barcode Scanner with Inventory & Order Manager Plugin <= 1.9.0 - Arbitrary File Download Vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Dmitry V. CEO of "UKR Solution" Barcode Scanner with Inventory & Order Manager allows Path Traversal. This issue affects Barcode Scanner with Inventory & Order Manager: from n/a through 1.9.0...

4.9CVSS7AI score0.00403EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/14 6:21 p.m.29 views

CVE-2025-54715

CVE-2025-54715 concerns the WordPress plugin Barcode Scanner with Inventory & Order Manager (Barcode Scanner

4.9CVSS5.9AI score0.00403EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/08/14 2:52 p.m.15 views

WordPress Barcode Scanner with Inventory & Order Manager Plugin <= 1.9.0 - Arbitrary File Download Vulnerability

Arbitrary File Download Vulnerability discovered by domiee13 in WordPress Plugin Barcode Scanner with Inventory & Order Manager versions = 1.9.0...

4.9CVSS6.6AI score0.00403EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2025/08/14 12:00 a.m.17 views

PT-2025-33383 · Unknown · Barcode Scanner With Inventory & Order Manager

Name of the Vulnerable Software and Affected Versions: Barcode Scanner with Inventory & Order Manager versions through 1.9.0 Description: The software contains a Path Traversal issue due to improper limitation of a pathname to a restricted directory. This allows attackers to traverse directory...

4.9CVSS6.4AI score0.00403EPSS
SaveExploits0References3
Veracode
Veracode
added 2025/08/13 10:32 a.m.9 views

Denial Of Service (DoS)

ruby-saml is vulnerable to Denial Of Service DoS. The vulnerability is due to improper order of validation checks due to the SAML response being validated for Base64 format before checking the configured message size, allowing potential resource exhaustion...

6.9CVSS7.1AI score0.00387EPSS
SaveExploits0References8Affected Software1
NVD
NVD
added 2025/08/13 7:15 a.m.12 views

CVE-2025-6184

The Tutor LMS Pro – eLearning and online course solution plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter used in the getsubmittedassignments function in all versions up to, and including, 3.7.0 due to insufficient escaping on the user supplied parameter an...

8.8CVSS0.00358EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/08/13 6:39 a.m.4 views

CVE-2025-6184 Tutor LMS Pro – eLearning and online course solution <= 3.7.0 - Authenticated (Tutor Instructor+) SQL Injection

The Tutor LMS Pro – eLearning and online course solution plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter used in the getsubmittedassignments function in all versions up to, and including, 3.7.0 due to insufficient escaping on the user supplied parameter an...

8.8CVSS7.5AI score0.00358EPSS
SaveExploits0References3
CVE
CVE
added 2025/08/13 6:39 a.m.52 views

CVE-2025-6184

CVE-2025-6184 : Tutor LMS Pro (WordPress)

8.8CVSS7.5AI score0.00358EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/08/13 6:39 a.m.14 views

CVE-2025-6184 Tutor LMS Pro – eLearning and online course solution <= 3.7.0 - Authenticated (Tutor Instructor+) SQL Injection

The Tutor LMS Pro – eLearning and online course solution plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter used in the getsubmittedassignments function in all versions up to, and including, 3.7.0 due to insufficient escaping on the user supplied parameter an...

8.8CVSS0.00358EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/08/13 12:00 a.m.12 views

PT-2025-32967 · WordPress · Tutor Lms Pro

Name of the Vulnerable Software and Affected Versions: Tutor LMS Pro versions prior to 3.7.1 Description: The Tutor LMS Pro plugin for WordPress is susceptible to a time-based SQL Injection issue. This occurs due to insufficient input validation and query preparation when handling the order...

8.8CVSS7.4AI score0.00358EPSS
SaveExploits0References9
Rows per page
Query Builder