Lucene search
+L

6472 matches found

Positive Technologies
Positive Technologies
added 2025/08/19 12:00 a.m.17 views

PT-2025-46745

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's pwm subsystem, specifically within the berlin driver. An incorrect register was being used during suspend and resume operations. The driver was...

4.6CVSS7.3AI score0.0021EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-38414

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix GCCGCCPCIEHOTRST definition for WCN7850 GCCGCCPCIEHOTRST is wrongly define...

5.5CVSS5.8AI score0.00158EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/08/19 12:00 a.m.23 views

PT-2025-33709

Name of the Vulnerable Software and Affected Versions: Real Spaces - WordPress Properties Directory Theme versions prior to 3.7 Description: The Real Spaces - WordPress Properties Directory Theme for WordPress is susceptible to privilege escalation through the imic agent register function. This...

9.8CVSS6.5AI score0.00377EPSS
SaveExploits3References10
Positive Technologies
Positive Technologies
added 2025/08/19 12:00 a.m.21 views

PT-2025-33805 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains an issue where the BPF JSET conditional jump is not correctly handled during control flow graph CFG computation. This can lead to incorrect live register and...

6.8AI score0.00151EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2025/08/18 9:38 p.m.18 views

WordPress Real Spaces - WordPress Properties Directory Theme plugin <= 3.6 - Unauthenticated Privilege Escalation to Administrator via 'imic_agent_register' vulnerability

WordPress Real Spaces - WordPress Properties Directory Theme plugin = 3.6 - Unauthenticated Privilege Escalation to Administrator via 'imicagentregister' vulnerability discovered by Alyudin Nafiie in WordPress Theme Real Spaces versions = 3.6...

9.8CVSS7AI score0.00377EPSS
SaveExploits3References1Affected Software1
RedHat Linux
RedHat Linux
added 2025/08/18 12:14 p.m.17 views

kernel: nfsd: don't ignore the return code of svc_proc_register()

In the Linux kernel, the following vulnerability has been resolved: nfsd: don't ignore the return code of svcprocregister Currently, nfsdprocstatinit ignores the return value of svcprocregister. If the procfile creation fails, then the kernel will WARN when it tries to remove the entry later. Fix...

5.5CVSS6.8AI score0.00196EPSS
SaveExploits0References5
CNVD
CNVD
added 2025/08/18 12:00 a.m.18 views

Huawei HarmonyOS DMA Module Register Configuration Out-of-Bounds Read Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An out-of-bounds read vulnerability exists in the Huawei HarmonyOS DMA module register configuration, which can be exploited by an attacker to compromise...

6.7CVSS6.8AI score0.00099EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/17 3:28 a.m.27 views

CVE-2025-8342

The WooCommerce OTP Login With Phone Number, OTP Verification plugin for WordPress is vulnerable to authentication bypass due to insufficient empty value checking in the lwpajaxregister function in all versions up to, and including, 1.8.47. This makes it possible for unauthenticated attackers to...

8.1CVSS7.7AI score0.00636EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/17 3:28 a.m.25 views

CVE-2025-9005

A vulnerability was determined in mtons mblog up to 3.5.0. Affected is an unknown function of the file /register. The manipulation leads to information exposure through error message. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is...

6.3CVSS6.9AI score0.00593EPSS
SaveExploits1References1
OSV
OSV
added 2025/08/15 3:15 a.m.20 views

CVE-2025-9005

A vulnerability was determined in mtons mblog up to 3.5.0. Affected is an unknown function of the file /register. The manipulation leads to information exposure through error message. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is...

3.7CVSS4.8AI score0.00593EPSS
SaveExploits1References4
NVD
NVD
added 2025/08/15 3:15 a.m.11 views

CVE-2025-9005

A vulnerability was determined in mtons mblog up to 3.5.0. Affected is an unknown function of the file /register. The manipulation leads to information exposure through error message. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is...

6.3CVSS0.00593EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/08/15 3:02 a.m.7 views

CVE-2025-9005 mtons mblog register information exposure

A vulnerability was determined in mtons mblog up to 3.5.0. Affected is an unknown function of the file /register. The manipulation leads to information exposure through error message. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is...

6.3CVSS6.8AI score0.00593EPSS
SaveExploits1References4
CVE
CVE
added 2025/08/15 3:02 a.m.30 views

CVE-2025-9005

The vulnerability CVE-2025-9005 affects mtons mblog up to version 3.5.0, where an unknown function in the /register endpoint can trigger information exposure via an error message. It can be exploited remotely; attack complexity is high and exploitation is not trivial. Public disclosure exists, wi...

6.3CVSS6.8AI score0.00593EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2025/08/15 3:02 a.m.22 views

CVE-2025-9005 mtons mblog register information exposure

A vulnerability was determined in mtons mblog up to 3.5.0. Affected is an unknown function of the file /register. The manipulation leads to information exposure through error message. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is...

6.3CVSS0.00593EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/08/15 2:24 a.m.28 views

CVE-2025-8342 WooCommerce OTP Login With Phone Number, OTP Verification <= 1.8.47 - Authentication Bypass

The WooCommerce OTP Login With Phone Number, OTP Verification plugin for WordPress is vulnerable to authentication bypass due to insufficient empty value checking in the lwpajaxregister function in all versions up to, and including, 1.8.47. This makes it possible for unauthenticated attackers to...

8.1CVSS0.00636EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/08/15 2:24 a.m.11 views

CVE-2025-8342 WooCommerce OTP Login With Phone Number, OTP Verification <= 1.8.47 - Authentication Bypass

The WooCommerce OTP Login With Phone Number, OTP Verification plugin for WordPress is vulnerable to authentication bypass due to insufficient empty value checking in the lwpajaxregister function in all versions up to, and including, 1.8.47. This makes it possible for unauthenticated attackers to...

8.1CVSS7.6AI score0.00636EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2025-23134

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Don't take registermutex with copyfrom/touser The infamous mmaplock taken in...

5.5CVSS5.6AI score0.00141EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-22026

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: don't ignore the return code of svcprocregister Currently, nfsdprocstatinit ignores the return value of svcprocregister. If the procfile creation fails,...

5.5CVSS6.5AI score0.00196EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/08/15 12:00 a.m.11 views

PT-2025-33436 · Mtons · Mtons Mblog

Name of the Vulnerable Software and Affected Versions: mtons mblog versions prior to 3.5.1 Description: A vulnerability exists in mtons mblog up to version 3.5.0. The issue affects an unknown function within the /register endpoint and leads to information exposure through error messages. The atta...

6.3CVSS4.3AI score0.00593EPSS
SaveExploits1References9
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:00 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2022-50063

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: dsa: felix: suppress non-changes to the tagging protocol The way in which...

5.5CVSS5.6AI score0.0014EPSS
SaveExploits0References2
Rows per page
Query Builder