Lucene search
+L

7737 matches found

Positive Technologies
Positive Technologies
added 2025/10/07 12:00 a.m.16 views

PT-2025-44001

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 8.5.0 through 8.5.100 Apache Tomcat versions 9.0.0.M1 through 9.0.109 Apache Tomcat versions 10.1.0-M1 through 10.1.46 Apache Tomcat versions 11.0.0-M1 through 11.0.11 Description An improper resource shutdown or release...

5.3CVSS9.4AI score0.01165EPSS
SaveExploits0References148
Positive Technologies
Positive Technologies
added 2025/10/07 12:00 a.m.7 views

PT-2025-41128

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the handling of xfrm algorithms and encap templates when copying data to user-space. Padding within structures may contain random or sensitiv...

5.5CVSS5.4AI score0.00145EPSS
SaveExploits0References21
OSV
OSV
added 2025/10/06 8:16 p.m.17 views

GHSA-GPRP-H92G-GC2H XWiki Platform is vulnerable to HQL injection via wiki and space search REST API

Impact The REST search URL is vulnerable to HQL injection via the orderField parameter. The specified value is added twice in the query, though, once in the field list for the select and once in the order clause, so it's not that easy to exploit. The part of the query between the two fields can b...

9.3CVSS7.4AI score0.02365EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2025/10/06 8:16 p.m.17 views

XWiki Platform is vulnerable to HQL injection via wiki and space search REST API

Impact The REST search URL is vulnerable to HQL injection via the orderField parameter. The specified value is added twice in the query, though, once in the field list for the select and once in the order clause, so it's not that easy to exploit. The part of the query between the two fields can b...

9.3CVSS7.4AI score0.02365EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2025/10/06 2:53 p.m.30 views

CVE-2025-52472 XWiki Platform vulnerable to HQL injection via wiki and space search REST API

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 4.3-milestone-1 and prior to versions 16.10.9, 17.4.2, and 17.5.0, the REST search URL is vulnerable to HQL injection via the orderField parameter. The specified value is...

9.3CVSS0.02365EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/10/06 12:00 a.m.6 views

RockyLinux 10 : thunderbird (RLSA-2025:10195)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:10195 advisory. thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links CVE-2025-5986 Tenable has extracted the...

6.4AI score0.03618EPSS
SaveExploits0References11
OSV
OSV
added 2025/10/04 4:15 p.m.15 views

AZL-77435 CVE-2023-53561 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix NULL pointer dereference when removing device In suspend and resume cycle, the removal and rescan of device ends up in NULL pointer dereference. During driver initialization, if the ipcimemwwanchannelinit fai...

5.5CVSS5.6AI score0.00143EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/04 4:15 p.m.13 views

UBUNTU-CVE-2023-53561

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix NULL pointer dereference when removing device In suspend and resume cycle, the removal and rescan of device ends up in NULL pointer dereference. During driver initialization, if the ipcimemwwanchannelinit fai...

5.5CVSS5.7AI score0.00143EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2025/10/04 3:17 p.m.18 views

CVE-2023-53561 net: wwan: iosm: fix NULL pointer dereference when removing device

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix NULL pointer dereference when removing device In suspend and resume cycle, the removal and rescan of device ends up in NULL pointer dereference. During driver initialization, if the ipcimemwwanchannelinit fai...

0.00143EPSS
SaveExploits0References3
OSV
OSV
added 2025/10/04 12:11 a.m.10 views

RLSA-2025:10196 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links CVE-2025-5986 For more details about the security issues, including the impact, a CVSS score, acknowledgments,...

7.5CVSS6.2AI score0.03618EPSS
SaveExploits0References6
Rockylinux
Rockylinux
added 2025/10/04 12:11 a.m.11 views

thunderbird security update

An update is available for thunderbird. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Thunderbird is a standalone mail and newsgroup client. Security...

6.4AI score0.03618EPSS
SaveExploits0
EUVD
EUVD
added 2025/10/03 8:07 p.m.8 views

EUVD-2023-47184

Malicious code in bioql PyPI...

5.5CVSS7.2AI score0.00278EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/03 8:07 p.m.14 views

EUVD-2023-51260

Malicious code in bioql PyPI...

7.3CVSS7.4AI score0.00247EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2023-37211

Malicious code in bioql PyPI...

8.4CVSS7.6AI score0.00159EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2023-50686

Malicious code in bioql PyPI...

5.4CVSS5.8AI score0.00603EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.9 views

EUVD-2024-19276

Malicious code in bioql PyPI...

9.8CVSS9.1AI score0.01657EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.9 views

EUVD-2022-34731

Malicious code in bioql PyPI...

7.6CVSS5.8AI score0.00294EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2022-6662

Malicious code in bioql PyPI...

6.5CVSS6.4AI score0.00946EPSS
SaveExploits0References8
EUVD
EUVD
added 2025/10/03 8:07 p.m.15 views

EUVD-2022-25243

Malicious code in bioql PyPI...

5.5CVSS6.5AI score0.00239EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/03 8:07 p.m.12 views

EUVD-2025-16532

Malicious code in bioql PyPI...

5.3CVSS6.6AI score0.00152EPSS
SaveExploits0References2
Rows per page
Query Builder