Lucene search
+L

12814 matches found

Tenable Nessus
Tenable Nessus
added 2025/09/03 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2025-9649

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in appneta tcpreplay 4.5.1. Impacted is the function calcsleeptime of the file sendpackets.c. Such manipulation leads...

5.5CVSS5.3AI score0.0025EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/09/02 12:00 a.m.17 views

PT-2025-35554

Name of the Vulnerable Software and Affected Versions: E3 Site Supervisor Control versions prior to 2.31F01 Description: The RCI service in E3 Site Supervisor Control contains an API call that allows reading user information, including all usernames and password hashes for application services...

7.7CVSS6.4AI score0.00258EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/09/01 12:00 a.m.19 views

PT-2025-38557

Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.17.0-rc2-virtme-g2a89cb21162c through 6.17.0-rc2-virtmne-g6ee90cb26014 Description A null pointer dereference NPD issue was identified in the vxlan module when using nexthop objects with the "proxy" option enabled. This...

6CVSS5.9AI score0.00144EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2025/08/29 2:29 p.m.16 views

Security Bulletin: Use of Java's default temporary directory for file creation in `FileBackedOutputStream` allows other users and apps to be able to access the files created by the class, which affects IBM watsonx.data

Summary Use of Java's default temporary directory for file creation in FileBackedOutputStream in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the...

7.1CVSS8AI score0.00248EPSS
SaveExploits0Affected Software1
Snyk
Snyk
added 2025/08/28 4:46 p.m.10 views

Incorrect Authorization

Overview contao/core-bundle is an Open Source PHP Content Management System for people who want a professional website that is easy to maintain. Affected versions of this package are vulnerable to Incorrect Authorization due to table access voter improper verification of a user permissions to...

5.3CVSS6.9AI score0.00247EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2025/08/27 2:49 a.m.10 views

Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in spring-context-6.2.5.jar

Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of spring-context-6.2.5.jar Vulnerability Details CVEID:CVE-2025-22233 DESCRIPTION: CVE-2024-38820 ensured Locale-independent, lowercase conversion for both the configured disallowedFields patterns and for request parameter...

5.3CVSS8.4AI score0.00617EPSS
SaveExploits1Affected Software1
Positive Technologies
Positive Technologies
added 2025/08/27 12:00 a.m.15 views

PT-2025-34825 · Unknown · Mibuthu Link View

Name of the Vulnerable Software and Affected Versions: mibuthu Link View versions through 0.8.0 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting XSS. Recommendations: Update mibuthu Link View to a...

5.9CVSS6.7AI score0.00182EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/08/27 12:00 a.m.15 views

PT-2025-34925 · WordPress · Wp Thumbtack Review Slider

Name of the Vulnerable Software and Affected Versions: jgwhite33 WP Thumbtack Review Slider versions through 2.6 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting XSS. Recommendations: Update...

5.9CVSS6.1AI score0.00177EPSS
SaveExploits0References4
Debian
Debian
added 2025/08/25 1:00 p.m.15 views

[SECURITY] [DLA 4282-1] firebird3.0 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4282-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk August 25, 2025 https://wiki.debian.org/LTS -...

7.5CVSS6.8AI score0.00551EPSS
SaveExploits0
NVD
NVD
added 2025/08/24 10:15 a.m.13 views

CVE-2025-9384

A vulnerability was detected in appneta tcpreplay up to 4.5.1. Impacted is the function tcpeditpostargs of the file /src/tcpedit/parseargs.c. The manipulation results in null pointer dereference. The attack is only possible with local access. The exploit is now public and may be used. Upgrading t...

5.5CVSS0.00248EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/08/24 12:00 a.m.14 views

PT-2025-34548 · WordPress · Spexo Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Spexo Addons for Elementor plugin for WordPress versions up to and including 1.0.23 Description: The Spexo Addons for Elementor plugin for WordPress is susceptible to Stored Cross-Site Scripting via the Countdown widget. Insufficient input...

6.4CVSS5.8AI score0.00244EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2025/08/23 12:00 a.m.10 views

PT-2025-34514 · WordPress · Shortcodehub

Name of the Vulnerable Software and Affected Versions: ShortcodeHub plugin for WordPress versions up to and including 1.7.1 Description: The ShortcodeHub plugin for WordPress is susceptible to Stored Cross-Site Scripting via the author link target parameter due to insufficient input sanitization...

6.4CVSS5.8AI score0.00244EPSS
SaveExploits0References7
Snyk
Snyk
added 2025/08/22 8:43 p.m.6 views

Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature due to missing scalar checks in the Verify and prepareVerification functions. An attacker can produce multiple valid signatures for the same message by manipulating the S value in EdDSA a...

9.1CVSS7AI score0.00213EPSS
SaveExploits1References2
Snyk
Snyk
added 2025/08/22 9:43 a.m.6 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the AESNativeCBC class due to the use of a private instance class, rather than a private static class. An attacker can cause heap exhaustion by triggering excessive memory allocati...

7.1CVSS6.9AI score0.0016EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/08/22 12:00 a.m.17 views

PT-2025-34340 · WordPress · Spacious

Name of the Vulnerable Software and Affected Versions: Spacious theme for WordPress versions prior to 1.9.12 Description: The Spacious theme for WordPress is susceptible to unauthorized data modification due to the absence of a capability check within the welcome notice import handler function...

4.3CVSS7.2AI score0.00311EPSS
SaveExploits0References7
Microsoft KB
Microsoft KB
added 2025/08/21 7:00 a.m.42 views

July 8, 2025—KB5062597 (Monthly Rollup)

None None...

9.8CVSS6.8AI score0.32552EPSS
SaveExploits10
Microsoft KB
Microsoft KB
added 2025/08/21 7:00 a.m.27 views

July 8, 2025—KB5062618 (Security-only update)

None None...

8.8CVSS6.8AI score0.01904EPSS
SaveExploits3
Microsoft KB
Microsoft KB
added 2025/08/21 7:00 a.m.46 views

July 8, 2025—KB5062632 (Monthly Rollup)

None None...

9.8CVSS6.8AI score0.32552EPSS
SaveExploits9
Positive Technologies
Positive Technologies
added 2025/08/21 12:00 a.m.19 views

PT-2025-34281 · Esri · Esri Portal For Arcgis Enterprise Sites

Name of the Vulnerable Software and Affected Versions: Esri Portal for ArcGIS Enterprise Sites versions 10.9.1 through 11.4 Description: A stored Cross-site Scripting issue exists that may allow a remote, authenticated attacker to inject a malicious file containing an XSS script. When loaded, thi...

4.8CVSS6.2AI score0.00222EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/08/20 12:00 a.m.16 views

PT-2025-33904 · Unknown +1 · Woocommerce +1

Name of the Vulnerable Software and Affected Versions: WPC Smart Quick View for WooCommerce plugin versions up to and including 4.2.1 Description: The WPC Smart Quick View for WooCommerce plugin for WordPress is susceptible to Stored Cross-Site Scripting through the woosq btn shortcode...

6.4CVSS5.8AI score0.00237EPSS
SaveExploits0References8
Rows per page
Query Builder