Lucene search
+L

8267 matches found

osv-ubuntu
osv-ubuntu
•added 2026/01/06 7:00 a.m.•13 views

UBUNTU-CVE-2025-14819

When doing TLS related transfers with reused easy or multi handles and altering the CURLSSLOPTNOPARTIALCHAIN option, libcurl could accidentally reuse a CA store cached in memory for which the partial chain option was reversed. Contrary to the user's wishes and expectations. This could make libcur...

5.3CVSS6.7AI score0.00756EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•15 views

PT-2026-5540

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s etas es58x CAN driver where a partial allocation of RX URBs could lead to a memory leak. Specifically, the es58x alloc rx urbs function, when failing ...

4CVSS5.9AI score0.00246EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•23 views

PT-2026-34086

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26 Oracle GraalVM for JDK versions 17.0.18, 21.0.10 Oracle GraalVM Enterprise Edition version 21.3.17 Description An issue in the Libraries component allo...

8.2CVSS6AI score0.00269EPSS
SaveExploits1References231
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•16 views

PT-2026-3728

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions 7.1.14 and 7.2.4 Description An easily exploitable issue exists in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. A high-privileged attacker with access to the system where Oracle VM...

4.6CVSS6.2AI score0.00137EPSS
SaveExploits0References18
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•31 views

PT-2026-34167

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.2.6 Description An issue in the Core component of Oracle VM VirtualBox allows a high privileged attacker with logon access to the infrastructure where the software executes to compromise the system. Successful...

2.3CVSS6.3AI score0.00154EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•20 views

PT-2026-3736

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions 7.1.14 and 7.2.4 Description An easily exploitable issue exists in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. A high-privileged attacker with access to the infrastructure where Orac...

8.1CVSS7.2AI score0.00212EPSS
SaveExploits0References19
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•19 views

PT-2026-34088

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26 Oracle GraalVM for JDK versions 17.0.18, 21.0.10 Oracle GraalVM Enterprise Edition version 21.3.17 Description An issue in the JSSE component allows an...

8.2CVSS6.2AI score0.00305EPSS
SaveExploits0References249
RedhatCVE
RedhatCVE
•added 2025/12/31 4:09 p.m.•39 views

CVE-2025-64528

Discourse is an open source discussion platform. Prior to versions 3.5.3, 2025.11.1, and 2025.12.0, an attacker who knows part of a username can find the user and their full name via UI or API, even when enablenames is disabled. Versions 3.5.3, 2025.11.1, and 2025.12.0 contain a fix...

6.3CVSS6.8AI score0.00287EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/31 9:12 a.m.•17 views

CVE-2025-15103

DVP-12SE11T - Authentication Bypass via Partial Password Disclosure...

9.8CVSS7.6AI score0.00344EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/12/31 12:00 a.m.•16 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993204)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993204 advisory. In the Linux kernel, the following vulnerability has been resolved: xen/gntdev: Prevent leaking grants Prior to this commit, if a grant mapping operation failed...

5.5CVSS5.9AI score0.00163EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/12/30 4:04 p.m.•16 views

EUVD-2025-205817

Discourse is an open source discussion platform. Prior to versions 3.5.3, 2025.11.1, and 2025.12.0, an attacker who knows part of a username can find the user and their full name via UI or API, even when enablenames is disabled. Versions 3.5.3, 2025.11.1, and 2025.12.0 contain a fix...

6.3CVSS6.3AI score0.00287EPSS
SaveExploits0References4
CVE
CVE
•added 2025/12/30 4:04 p.m.•41 views

CVE-2025-64528

CVE-2025-64528 affects Discourse prior to versions 3.5.3, 2025.11.1, and 2025.12.0. An attacker who knows part of a username can discover the user and their full name via UI or API, even when enable_names is disabled. The issue is confirmed across multiple sources (NVD, Red Hat, OSV, OpenVAS, etc...

6.3CVSS5.8AI score0.00287EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2025/12/30 9:15 a.m.•17 views

CVE-2025-15103

DVP-12SE11T - Authentication Bypass via Partial Password Disclosure...

9.8CVSS5.8AI score0.00344EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/30 9:15 a.m.•19 views

CVE-2025-15103

DVP-12SE11T - Authentication Bypass via Partial Password Disclosure...

9.8CVSS0.00344EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/30 8:55 a.m.•29 views

CVE-2025-15103

CVE-2025-15103 affects Delta Electronics DVP-12SE11T PLC. Vulnerability: authentication bypass via partial password disclosure (root cause: partial/password disclosure enables bypass). Impact: high confidentiality, integrity, and availability risks; network-based. Remediation: firmware updates re...

9.8CVSS7.6AI score0.00344EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2025/12/30 8:55 a.m.•21 views

EUVD-2025-205696

DVP-12SE11T - Authentication Bypass via Partial Password Disclosure...

8.1CVSS6.4AI score0.00344EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/12/30 8:55 a.m.•10 views

CVE-2025-15103 DVP-12SE11T - Authentication Bypass via Partial Password Disclosure

DVP-12SE11T - Authentication Bypass via Partial Password Disclosure...

8.1CVSS7.6AI score0.00344EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/30 8:55 a.m.•46 views

CVE-2025-15103 DVP-12SE11T - Authentication Bypass via Partial Password Disclosure

DVP-12SE11T - Authentication Bypass via Partial Password Disclosure...

8.1CVSS0.00344EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/30 12:00 a.m.•22 views

PT-2025-53857

Name of the Vulnerable Software and Affected Versions DVP-12SE11T affected versions not specified Description The DVP-12SE11T device suffers from an authentication bypass issue due to partial password disclosure. This allows unauthorized access. Recommendations At the moment, there is no...

8.1CVSS6.6AI score0.00344EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/30 12:00 a.m.•6 views

CVE-2025-15103: Exposure of Sensitive Information to an Unauthorized Actor

DVP-12SE11T - Authentication Bypass via Partial Password Disclosure...

9.8CVSS7.6AI score0.00344EPSS
SaveExploits0References3
Rows per page
Query Builder