Lucene search
+L

9947 matches found

OSV
OSV
•added 2025/11/11 4:25 a.m.•9 views

MAL-2025-82872 Malicious code in ade-gado-gado35-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0283196457a9b7e61c150b6f336fbd13ddaada0e84681ce77430b07ceb827852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
SaveExploits0
CNNVD
CNNVD
•added 2025/11/11 12:00 a.m.•17 views

Rockwell Automation DataMosaix Private Cloud 安全漏洞

Rockwell Automation DataMosaix Private Cloud is an industrial DataOps solution from Rockwell Automation, Inc. It is used to simplify and control access to relevant, reliable and contextualized data. A security vulnerability exists in Rockwell Automation DataMosaix Private Cloud that can be...

7.6CVSS5.8AI score0.00148EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/11/10 9:30 p.m.•19 views

EUVD-2025-50810

In Open5GS 2.7.6, AMF crashes when receiving an abnormal NGSetupRequest message, resulting in denial of service...

6.3AI score0.0034EPSS
SaveExploits0References3
NVD
NVD
•added 2025/11/10 7:15 p.m.•20 views

CVE-2025-63288

In Open5GS 2.7.6, AMF crashes when receiving an abnormal NGSetupRequest message, resulting in denial of service...

7.5CVSS0.0034EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/11/10 3:31 p.m.•25 views

EUVD-2025-44062

Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after setup is complete...

9.1CVSS6.3AI score0.95748EPSS
SaveExploits1References5
NVD
NVD
•added 2025/11/10 3:15 p.m.•19 views

CVE-2025-12480

Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after setup is complete...

9.1CVSS0.95748EPSS
SaveExploits1References5
OSV
OSV
•added 2025/11/10 3:15 p.m.•22 views

CVE-2025-12480

Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after setup is complete...

9.1CVSS5.8AI score0.95748EPSS
SaveExploits1References5
CVE
CVE
•added 2025/11/10 2:20 p.m.•532 views

CVE-2025-12480

The connected nuclei template confirms an improper access control vulnerability in Gladinet Triofox and CentreStack. Before versions 12.91.1126.65588 (Triofox) and 12.10.595.65696 (CentreStack), unauthenticated users can reach the /management/admindatabase.aspx endpoint, exposing sensitive databa...

9.1CVSS8.2AI score0.95748EPSS
SaveIn wildExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/11/10 2:20 p.m.•534 views

CVE-2025-12480

Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after setup is complete...

9.1CVSS0.95748EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/11/10 2:20 p.m.•10 views

CVE-2025-12480

Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after setup is complete...

9.1CVSS8.2AI score0.95748EPSS
SaveExploits1References4
VulnCheck KEV
VulnCheck KEV
•added 2025/11/10 12:00 a.m.•10 views

VulnCheck KEV: CVE-2025-12480

Gladinet Triofox contains an improper access control vulnerability that allows access to initial setup pages even after setup is complete...

9.1CVSS8.2AI score0.95748EPSS
SaveIn wildExploits1References202
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/10 12:00 a.m.•3 views

CVE-2025-12480: Improper Access Control

Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after setup is complete...

9.1CVSS8.4AI score0.95748EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2025/11/10 12:00 a.m.•30 views

CVE-2025-63288

In Open5GS 2.7.6, AMF crashes when receiving an abnormal NGSetupRequest message, resulting in denial of service...

0.0034EPSS
SaveExploits0References2
CVE
CVE
•added 2025/11/10 12:00 a.m.•37 views

CVE-2025-63288

In Open5GS version 2.7.6 , the AMF component is vulnerable to a denial of service (DoS) condition. This occurs when the system receives an abnormal NGSetupRequest message, which triggers a crash of the AMF component. The vulnerability is characterized by uncontrolled resource consumption (CWE-400...

7.5CVSS5.8AI score0.0034EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/11/10 12:00 a.m.•21 views

PT-2025-46186

Name of the Vulnerable Software and Affected Versions Open5GS version 2.7.6 Description The software may experience a denial of service when receiving an abnormal NGSetupRequest message, causing the AMF component to crash. Recommendations At the moment, there is no information about a newer versi...

6.4AI score0.0034EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/11/10 12:00 a.m.•7 views

CVE-2025-63288

In Open5GS 2.7.6, AMF crashes when receiving an abnormal NGSetupRequest message, resulting in denial of service...

5.8AI score0.0034EPSS
SaveExploits0References2
OSV
OSV
•added 2025/11/10 12:00 a.m.•19 views

CVE-2025-63288

In Open5GS 2.7.6, AMF crashes when receiving an abnormal NGSetupRequest message, resulting in denial of service...

7.5CVSS6.7AI score
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/11/08 8:59 a.m.•36 views

CVE-2025-46413

Use of password hash with insufficient computational effort issue exists in BUFFALO Wi-Fi router 'WSR-1800AX4 series'. When WPS is enabled, PIN code and/or Wi-Fi password may be obtained by an attacker...

5.3CVSS7.2AI score0.0013EPSS
SaveExploits0References1
Fedora
Fedora
•added 2025/11/08 1:11 a.m.•21 views

[SECURITY] Fedora 43 Update: luksmeta-10-1.fc43

LUKSMeta is a command line utility for storing small portions of metadata in the LUKSv1 header for use before unlocking the volume...

4.4CVSS5.9AI score0.00102EPSS
SaveExploits0
NVD
NVD
•added 2025/11/07 9:15 a.m.•29 views

CVE-2025-46413

Use of password hash with insufficient computational effort issue exists in BUFFALO Wi-Fi router 'WSR-1800AX4 series'. When WPS is enabled, PIN code and/or Wi-Fi password may be obtained by an attacker...

5.3CVSS0.0013EPSS
SaveExploits0References2
Rows per page
Query Builder