Lucene search
+L

85010 matches found

Vulnrichment
Vulnrichment
•added 2025/12/22 2:21 p.m.•10 views

CVE-2025-26379 Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG use of Cryptographically Weak Pseudo-Random Number Generator

Use of a weak pseudo-random number generator, which may allow an attacker to read or inject encrypted PowerG packets...

7.2CVSS5.8AI score0.00186EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/22 12:00 a.m.•27 views

PT-2025-52650

Name of the Vulnerable Software and Affected Versions Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG affected versions not specified Description The software utilizes a weak pseudo-random number generator. This could allow an attacker to read or inject encrypted PowerG packets...

7.2CVSS6.3AI score0.00186EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/12/21 12:00 a.m.•17 views

WordPress plugin Web to SugarCRM Lead 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

4.3CVSS6.5AI score0.00154EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/12/20 12:00 a.m.•11 views

WordPress plugin WP Hallo Welt 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin ... A cross-site reques...

6.1CVSS5.9AI score0.00147EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2025/12/20 12:00 a.m.•13 views

WordPress plugin WP DB Booster 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

4.3CVSS6.4AI score0.00151EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/12/20 12:00 a.m.•14 views

WordPress plugin Amazon affiliate lite Plugin 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

5.4CVSS6.3AI score0.00121EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/12/17 12:23 a.m.•11 views

SUSE CVE-2025-68313

In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Add RDSEED fix for Zen5 There's an issue with RDSEED's 16-bit and 32-bit register output variants on Zen5 which return a random value of 0 "at a rate inconsistent with randomness while incorrectly signaling success...

6.1CVSS6AI score0.00139EPSS
SaveExploits0References21
CNNVD
CNNVD
•added 2025/12/17 12:00 a.m.•18 views

WordPress plugin Download Plugins and Themes in ZIP from Dashboard 跨站请求伪造漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

4.3CVSS6.4AI score0.00124EPSS
SaveExploits0References2
Packet Storm News
Packet Storm News
•added 2025/12/17 12:00 a.m.•16 views

Random Coding for Long-Range Continuous-Variable QKD

Quantum Key Distribution QKD schemes are key exchange protocols based on the physical properties of quantum channels. They avoid the computational-hardness assumptions that underlie the security of classical key exchange. Continuous-Variable QKD CVQKD, in contrast to qubit-based discrete-variable...

6.5AI score
SaveExploits0
EUVD
EUVD
•added 2025/12/16 6:31 p.m.•23 views

EUVD-2025-203756

In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Add RDSEED fix for Zen5 There's an issue with RDSEED's 16-bit and 32-bit register output variants on Zen5 which return a random value of 0 "at a rate inconsistent with randomness while incorrectly signaling success...

6AI score0.00139EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/12/16 3:39 p.m.•47 views

CVE-2025-68313 x86/CPU/AMD: Add RDSEED fix for Zen5

In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Add RDSEED fix for Zen5 There's an issue with RDSEED's 16-bit and 32-bit register output variants on Zen5 which return a random value of 0 "at a rate inconsistent with randomness while incorrectly signaling success...

7.1CVSS0.00139EPSS
SaveExploits0References3
Packet Storm News
Packet Storm News
•added 2025/12/16 12:00 a.m.•15 views

Hybrid Ensemble Method for Detecting Cyber-Attacks in Water Distribution Systems Using the BATADAL Dataset

The cybersecurity of Industrial Control Systems that manage critical infrastructure such as Water Distribution Systems has become increasingly important as digital connectivity expands. BATADAL benchmark data is a good source of testing intrusion detection techniques, but it presents several...

7AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/16 12:00 a.m.•5 views

CVE-2025-68313: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Add RDSEED fix for Zen5 There's an issue with RDSEED's 16-bit and 32-bit register output variants on Zen5 which return a random value of 0 "at a rate inconsistent with randomness while incorrectly signaling success...

7.1CVSS6AI score0.00139EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/16 12:00 a.m.•11 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a problem with the implementation of the RDSEED instruction, which could lead to a random number generation...

6.4AI score0.00139EPSS
SaveExploits0References3
Packet Storm News
Packet Storm News
•added 2025/12/14 12:00 a.m.•13 views

Hyperparameter Tuning-Based Optimized Performance Analysis of Machine Learning Algorithms for Network Intrusion Detection

Network Intrusion Detection Systems NIDS are essential for securing networks by identifying and mitigating unauthorized activities indicative of cyberattacks. As cyber threats grow increasingly sophisticated, NIDS must evolve to detect both emerging threats and deviations from normal behavior. Th...

6.8AI score
SaveExploits0
Veracode
Veracode
•added 2025/12/13 4:33 a.m.•17 views

Weak Encryption

org.apache.streampark, streampark is vulnerable to weak encryption. The vulnerability is due to the use of AES encryption in ECB mode along with a weak random number generator for protecting sensitive data, which allows an attacker to potentially expose or recover sensitive authentication...

7.5CVSS6.1AI score0.0024EPSS
SaveExploits0References5Affected Software1
CNNVD
CNNVD
•added 2025/12/13 12:00 a.m.•20 views

WordPress plugin Popover Windows 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

4.3CVSS6.4AI score0.00124EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/13 12:00 a.m.•3 views

CVE-2025-11707: Use of Insufficiently Random Values

The Login Lockdown & Protection plugin for WordPress is vulnerable to IP Block Bypass in all versions up to, and including, 2.14. This is due to $unblockkey key being insufficiently random allowing unauthenticated users, with access to an administrative user email, to generate valid unblock keys...

5.3CVSS5.7AI score0.00451EPSS
SaveExploits0References1
OSV
OSV
•added 2025/12/12 3:30 p.m.•17 views

GHSA-749J-2HP6-8CXM Apache StreamPark uses a Weak Encryption Algorithm

Weak Encryption Algorithm in StreamPark, The use of an AES cipher in ECB mode and a weak random number generator for encrypting sensitive data, including JWT tokens, may have risked exposing sensitive authentication data This issue affects Apache StreamPark: from 2.0.0 before 2.1.7. Users are...

8.7CVSS7AI score0.0024EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2025/12/12 3:30 p.m.•28 views

Apache StreamPark uses a Weak Encryption Algorithm

Weak Encryption Algorithm in StreamPark, The use of an AES cipher in ECB mode and a weak random number generator for encrypting sensitive data, including JWT tokens, may have risked exposing sensitive authentication data This issue affects Apache StreamPark: from 2.0.0 before 2.1.7. Users are...

7.5CVSS5.8AI score0.0024EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder