Lucene search
+L

11983 matches found

Fedora
Fedora
added 2025/05/03 1:11 a.m.26 views

[SECURITY] Fedora 41 Update: valkey-8.0.3-1.fc41

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...

7.5CVSS7.4AI score0.00853EPSS
SaveExploits0
Fedora
Fedora
added 2025/05/03 1:11 a.m.15 views

[SECURITY] Fedora 40 Update: valkey-8.0.3-1.fc40

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...

7.5CVSS7.4AI score0.00853EPSS
SaveExploits0
Fedora
Fedora
added 2025/05/03 1:11 a.m.21 views

[SECURITY] Fedora 40 Update: redis-7.2.8-1.fc40

Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...

7.5CVSS7.4AI score0.00853EPSS
SaveExploits0
HackRead
HackRead
added 2025/05/02 4:11 p.m.16 views

UK Luxury Retailer Harrods Hit by Cyber Attack After M&S, Co-op

Luxury retailer Harrods confirms a cyber attack attempt, restricting internet access but keeping its online store running. Learn…...

7.3AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2025/05/02 12:00 a.m.26 views

Active Sybil Attack and Efficient Defense Strategy in IPFS DHT

The InterPlanetary File System IPFS is a decentralized peer-to-peer P2P storage that relies on Kademlia, a Distributed Hash Table DHT structure commonly used in P2P systems for its proved scalability. However, DHTs are known to be vulnerable to Sybil attacks, in which a single entity controls...

6.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/01 1:13 p.m.15 views

CVE-2025-4061

A vulnerability, which was classified as critical, was found in code-projects Clothing Store Management System up to 1.0. Affected is the function additem. The manipulation of the argument st.productname leads to stack-based buffer overflow. Attacking locally is a requirement. The exploit has bee...

7.8CVSS7.1AI score0.00334EPSS
SaveExploits1References1
OSV
OSV
added 2025/05/01 4:16 a.m.10 views

CVE-2025-2168

The Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.4.1. This is due to missing or incorrect non...

4.3CVSS7.2AI score0.00191EPSS
SaveExploits0References4
NVD
NVD
added 2025/05/01 4:16 a.m.26 views

CVE-2025-2168

The Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.4.1. This is due to missing or incorrect non...

4.3CVSS0.00191EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/05/01 3:23 a.m.38 views

CVE-2025-2168 Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 2.4.1 - Cross-Site Request Forgery to Limited User Meta Update

The Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.4.1. This is due to missing or incorrect non...

4.3CVSS0.00191EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/05/01 3:23 a.m.13 views

CVE-2025-2168 Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 2.4.1 - Cross-Site Request Forgery to Limited User Meta Update

The Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.4.1. This is due to missing or incorrect non...

4.3CVSS4.5AI score0.00191EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/05/01 12:00 a.m.10 views

WordPress plugin Ultimate Store Kit 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

4.3CVSS6AI score0.00191EPSS
SaveExploits0References4
OSV
OSV
added 2025/04/30 5:24 p.m.9 views

GHSA-HW58-3793-42GG Keycloak hostname verification

A flaw was found in Keycloak. By setting a verification policy to 'ANY', the trust store certificate verification is skipped, which is unintended...

8.2CVSS6.2AI score0.00439EPSS
SaveExploits0References10
Snyk
Snyk
added 2025/04/30 5:24 p.m.3 views

Improper Validation of Certificate with Host Mismatch

Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Improper Validation of Certificate with Host Mismatch when setting the verification policy to 'ALL'. This is...

8.8CVSS6.7AI score0.00439EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2025/04/30 5:24 p.m.31 views

Keycloak hostname verification

A flaw was found in Keycloak. By setting a verification policy to 'ANY', the trust store certificate verification is skipped, which is unintended...

8.2CVSS8AI score0.00439EPSS
SaveExploits0References10Affected Software1
RedhatCVE
RedhatCVE
added 2025/04/30 12:06 a.m.23 views

CVE-2015-4582

The TheCartPress boot-store aka Boot Store theme 1.6.4 for WordPress allows header.php tcpregistererror XSS. NOTE: CVE-2015-4582 is not assigned to any Oracle product...

7.2CVSS6.8AI score0.0026EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:00 a.m.20 views

The vulnerability of the Linux operating system’s kernel PCI component, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s kernel PCI component is related to a memory leak in the resetmethodstore function. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00212EPSS
SaveExploits0References17Affected Software8
RedHat Linux
RedHat Linux
added 2025/04/29 10:53 p.m.26 views

org.keycloak.protocol.services: Keycloak hostname verification

A flaw was found in Keycloak. By setting a verification policy to 'ALL', the trust store certificate verification is skipped, which is unintended...

8.2CVSS5.7AI score0.00439EPSS
SaveExploits0References6
OSV
OSV
added 2025/04/29 9:31 p.m.6 views

GHSA-R934-W73G-V4P8 Duplicate Advisory: Keycloak hostname verification

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-hw58-3793-42gg. This link is maintained to preserve external references. Original Description A flaw was found in Keycloak. By setting a verification policy to 'ALL', the trust store certificate verification is...

8.2CVSS5.7AI score
SaveExploits0References8
Github Security Blog
Github Security Blog
added 2025/04/29 9:31 p.m.18 views

Duplicate Advisory: Keycloak hostname verification

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-hw58-3793-42gg. This link is maintained to preserve external references. Original Description A flaw was found in Keycloak. By setting a verification policy to 'ALL', the trust store certificate verification is...

8.2CVSS6.9AI score0.00439EPSS
SaveExploits0References8Affected Software1
NVD
NVD
added 2025/04/29 9:15 p.m.26 views

CVE-2025-3501

A flaw was found in Keycloak. By setting a verification policy to 'ALL', the trust store certificate verification is skipped, which is unintended...

8.2CVSS0.00439EPSS
SaveExploits0References8
Rows per page
Query Builder