Lucene search
+L

31672 matches found

RedhatCVE
RedhatCVE
added 2025/08/24 12:34 p.m.9 views

CVE-2025-57893

Cross-Site Request Forgery CSRF vulnerability in Epsiloncool WP Fast Total Search fulltext-search allows Cross Site Request Forgery.This issue affects WP Fast Total Search: from n/a through = 1.79.270...

4.3CVSS5.9AI score0.0014EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/24 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2018-17231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Telegram Desktop aka tdesktop 1.3.14 might allow attackers to cause a denial of service assertion failure and application exit via an Edit color palette search...

7.5CVSS7AI score0.01511EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/24 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2017-5944

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The dashboard subscription interface in Request Tracker RT 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 might allow remote authenticated users...

8.8CVSS8AI score0.02784EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/24 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2014-3248

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera...

6.2CVSS6.7AI score0.00537EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/24 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2019-10065

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Open Ticket Request System OTRS 7.0 through 7.0.6. An attacker who is logged into OTRS as a customer user can use the search result...

4.3CVSS5AI score0.0077EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2025/08/23 6:30 a.m.8 views

Liferay Portal ReDoS with Role Name search in KaleoDesignerPortlet

Self-ReDoS Regular expression Denial of Service exists with Role Name search field of Kaleo Designer portlet JavaScript in Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.1, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.20...

6.9CVSS6AI score0.0031EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2025/08/23 6:30 a.m.10 views

GHSA-23W4-RPC6-WPCC Liferay Portal ReDoS with Role Name search in KaleoDesignerPortlet

Self-ReDoS Regular expression Denial of Service exists with Role Name search field of Kaleo Designer portlet JavaScript in Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.1, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.20...

6.9CVSS6.8AI score0.0031EPSS
SaveExploits0References5
NVD
NVD
added 2025/08/23 5:15 a.m.13 views

CVE-2025-43764

Self-ReDoS Regular expression Denial of Service exists with Role Name search field of Kaleo Designer portlet JavaScript in Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.1, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.20...

6.9CVSS0.0031EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/23 4:49 a.m.29 views

CVE-2025-43764

CVE-2025-43764 describes a Self-ReDoS issue in Liferay Portal/DXP where the Role Name search field in Kaleo Designer Web portlet can be abused by an authenticated user with update permissions to submit a pathological regular expression, causing the browser to hang. Affected are Liferay Portal 7.4...

6.9CVSS6.9AI score0.0031EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2025/08/23 4:49 a.m.16 views

CVE-2025-43764

Self-ReDoS Regular expression Denial of Service exists with Role Name search field of Kaleo Designer portlet JavaScript in Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.1, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.20...

6.9CVSS0.0031EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/23 4:49 a.m.3 views

CVE-2025-43764

Self-ReDoS Regular expression Denial of Service exists with Role Name search field of Kaleo Designer portlet JavaScript in Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.1, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.20...

6.9CVSS6.9AI score0.0031EPSS
SaveExploits0References1
Malwarebytes
Malwarebytes
added 2025/08/22 3:43 p.m.14 views

Grok chats show up in Google searches

I’m starting to feel like a broken record, but I feel you should know that yet another AI has been found sharing private conversations so that Google was able to index them, and now they can be found in search results. It’s déjà vu in the world of AI: another day, another exposé about chatbot...

6.7AI score
SaveExploits0
Patchstack
Patchstack
added 2025/08/22 1:55 p.m.10 views

WordPress WP Fast Total Search Plugin <= 1.79.270 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nabil Irawan in WordPress Plugin WP Fast Total Search versions = 1.79.270...

4.3CVSS6.6AI score0.0014EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/08/22 12:15 p.m.11 views

CVE-2025-57893

Cross-Site Request Forgery CSRF vulnerability in Epsiloncool WP Fast Total Search fulltext-search allows Cross Site Request Forgery.This issue affects WP Fast Total Search: from n/a through = 1.79.270...

4.3CVSS0.0014EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/22 11:59 a.m.24 views

CVE-2025-57893

CVE-2025-57893 refers to a CSRF vulnerability in WordPress plugin WP Fast Total Search (affected versions up to 1.79.270). The issue is categorized as CSRF with a CVSS v3.1 base score of 4.3 (Medium) and a network attack vector with user interaction required. Connected sources indicate the vulner...

4.3CVSS5.9AI score0.0014EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/22 11:59 a.m.18 views

CVE-2025-57893 WordPress WP Fast Total Search Plugin <= 1.79.270 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Epsiloncool WP Fast Total Search fulltext-search allows Cross Site Request Forgery.This issue affects WP Fast Total Search: from n/a through = 1.79.270...

4.3CVSS0.0014EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/22 11:59 a.m.3 views

CVE-2025-57893 WordPress WP Fast Total Search Plugin <= 1.79.270 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Epsiloncool WP Fast Total Search fulltext-search allows Cross Site Request Forgery.This issue affects WP Fast Total Search: from n/a through = 1.79.270...

4.3CVSS5.9AI score0.0014EPSS
SaveExploits0References1
Redos
Redos
added 2025/08/22 12:00 a.m.8 views

ROS-20250822-01

A vulnerability in the Kea open source DHCP server is related to the use of an unreliable search path. Exploitation of the vulnerability could allow an attacker to escalate privileges on the system...

7.8CVSS6.3AI score0.0024EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/08/22 12:00 a.m.12 views

PT-2025-34357 · WordPress · Wp Fast Total Search

Name of the Vulnerable Software and Affected Versions: WP Fast Total Search versions through 1.79.270 Description: The plugin suffers from a Cross-Site Request Forgery CSRF issue, allowing attackers to potentially perform actions on behalf of authenticated users. Recommendations: Versions prior t...

4.3CVSS6.9AI score0.0014EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/08/22 12:00 a.m.7 views

WordPress plugin WP Fast Total Search 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

4.3CVSS6.5AI score0.0014EPSS
SaveExploits0References3
Rows per page
Query Builder