Lucene search
+L

84097 matches found

CNNVD
CNNVD
added 2025/11/18 12:0 a.m.8 views

WordPress plugin WP Admin Microblog 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

4.3CVSS6.5AI score0.00122EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/11/18 12:0 a.m.11 views

PT-2025-47241

Incorrect Usage of Seeds in Pseudo-Random Number Generator CWE- 335 vulnerability in the High Sec ELM may allow a sophisticated attacker with physical access, to compromise internal device communications. This issue affects Command Centre Server: 9.30 prior to vCR9.30.251028a distributed in...

5.7CVSS6.7AI score0.00142EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/11/18 12:0 a.m.11 views

Gallagher HBUS Devices 安全漏洞

Gallagher HBUS Devices is a family of access control and alarm peripheral devices from Gallagher New Zealand. A security vulnerability exists in Gallagher HBUS Devices that stems from improper use of seeds in the pseudo-random number generator, which could result in corrupting internal device...

5.7CVSS6.7AI score0.00142EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/11/18 12:0 a.m.12 views

WordPress plugin Coil Web Monetization 跨站请求伪造漏洞

The WordPress Coil Web Monetization plugin is a WordPress plugin that allows websites to monetize content through the WebMonetizationAPI, which allows users to pay content creators directly through a browser extension. The WordPress Coil Web Monetization plugin suffers from a cross-site request...

4.3CVSS6.4AI score0.00152EPSS
SaveExploits0References4
RustSec
RustSec
added 2025/11/17 12:0 p.m.7 views

rand_os crate is unmaintained

The randos crate is deprecated and no longer actively maintained, as OsRng is now part of randcore. If you are using this crate, consider upgrading to randcore 0.5.1 or higher...

7AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2025/11/17 12:0 a.m.5 views

Average Hardness of SIVP for Module Lattices of Fixed Rank

The problem of finding short vectors in Euclidean lattices is a central hard problem in complexity theory. The case of module lattices i.e., lattices which are also modules over a number ring is of particular interest for cryptography and computational number theory. The hardness of finding short...

6.5AI score
SaveExploits0
OSV
OSV
added 2025/11/14 3:56 p.m.4 views

SUSE-SU-2025:4110-1 Security update for bind

This update for bind fixes the following issues: - CVE-2025-8677: DNSSEC validation fails if matching but invalid DNSKEY is found bsc1252378. - CVE-2025-40778: Address various spoofing attacks bsc1252379. - CVE-2025-40780: Cache-poisoning due to weak pseudo-random number generator bsc1252380...

8.6CVSS5.6AI score0.11203EPSS
SaveExploits1References7
SUSE Linux
SUSE Linux
added 2025/11/14 3:56 p.m.5 views

Security update for bind

This update for bind fixes the following issues: CVE-2025-40778: Address various spoofing attacks bsc1252379. CVE-2025-40780: Cache-poisoning due to weak pseudo-random number generator bsc1252380. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like...

9.2CVSS6.9AI score0.00665EPSS
SaveExploits1References8
OSV
OSV
added 2025/11/14 3:56 p.m.3 views

SUSE-SU-2025:4109-1 Security update for bind

This update for bind fixes the following issues: - CVE-2025-40778: Address various spoofing attacks bsc1252379. - CVE-2025-40780: Cache-poisoning due to weak pseudo-random number generator bsc1252380...

8.6CVSS5.6AI score0.00665EPSS
SaveExploits1References5
SUSE Linux
SUSE Linux
added 2025/11/14 3:55 p.m.4 views

Security update for bind

This update for bind fixes the following issues: CVE-2025-40778: Address various spoofing attacks bsc1252379. CVE-2025-40780: Cache-poisoning due to weak pseudo-random number generator bsc1252380. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like...

9.2CVSS6.8AI score0.00665EPSS
SaveExploits1References8
OSV
OSV
added 2025/11/14 3:55 p.m.3 views

SUSE-SU-2025:4108-1 Security update for bind

This update for bind fixes the following issues: - CVE-2025-40778: Address various spoofing attacks bsc1252379. - CVE-2025-40780: Cache-poisoning due to weak pseudo-random number generator bsc1252380...

8.6CVSS5.6AI score0.00665EPSS
SaveExploits1References5
IBM Security Bulletins
IBM Security Bulletins
added 2025/11/14 2:6 p.m.19 views

Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images

Summary Multiple vulnerabilities were addressed in IBM MQ Operator and Queue manager container images Vulnerability Details CVEID:CVE-2025-36047 DESCRIPTION: IBM WebSphere Application Server Liberty 18.0.0.2 through 25.0.0.8 is vulnerable to a denial of service, caused by sending a...

7.5CVSS6.6AI score0.64718EPSS
SaveExploits2Affected Software1
RedhatCVE
RedhatCVE
added 2025/11/13 5:3 p.m.5 views

CVE-2025-40127

In the Linux kernel, the following vulnerability has been resolved: hwrng: ks-sa - fix division by zero in kssarnginit Fix division by zero in kssarnginit caused by missing clock pointer initialization. The clkgetrate call is performed on an uninitialized clk pointer, resulting in division by zer...

5.9AI score0.00202EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/11/13 7:24 a.m.6 views

CVE-2025-64429

A vulnerability was found in DuckDB’s database encryption design. In certain situations, DuckDB could generate encryption keys using a weak random number generator, fail to reliably wipe keys from memory, accept manipulated database headers that disable integrity protection, or miss detecting...

6.9CVSS6.6AI score0.00109EPSS
SaveExploits0References7
OSV
OSV
added 2025/11/13 3:23 a.m.4 views

MAL-2025-190097 Malicious code in upsilon-socket-cluster-static-eta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99c4127e8b9df2359bf4f313e20808bc22f8a6248af19bb410a6350869034d86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/13 3:23 a.m.10 views

Malicious code in book-sanitize-cat-cold-class (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62948a3099c031b544e79f768e8afc9967412595d8f9b895397d21f52fb7404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/13 3:23 a.m.8 views

Malicious code in telesto-publish-oberon-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de6837a499af3bd764db78016d59ed3b3b1fe3f57a03f81847910a466b622002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
OSV
OSV
added 2025/11/13 3:23 a.m.4 views

MAL-2025-187382 Malicious code in hugo-build-configstore-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9153c124f5d5e6316c12ad12d229ee3d86fb12c8b46821aa50e1b4c2d6c78a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
SaveExploits0
OSV
OSV
added 2025/11/13 3:23 a.m.2 views

MAL-2025-189219 Malicious code in restart-apex-loopback-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ee23013fa3827d0680b480bf208efea7b8f2b19d350a6479f7efbdf498a4c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
SaveExploits0
OSV
OSV
added 2025/11/13 3:23 a.m.3 views

MAL-2025-188936 Malicious code in public-eclipse-wavefunction-entanglement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ced94b4a1f127cb891036fa56d9ebde3bdfaf8aaab19aa745eef548a9208c41d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
SaveExploits0
Rows per page
Query Builder