Lucene search
K

170 matches found

Vulnrichment
Vulnrichment
added 2025/09/25 12:0 a.m.1 views

CVE-2025-55553

A syntax error in the component proxytensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service DoS...

6.4AI score0.00068EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/09/25 12:0 a.m.1 views

PT-2025-39412

Name of the Vulnerable Software and Affected Versions pytorch version 2.7.0 Description A syntax error in the proxy tensor.py component can lead to a Denial of Service DoS. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

7.5CVSS6.4AI score0.00068EPSS
Exploits0References16
CVE
CVE
added 2025/09/25 12:0 a.m.17 views

CVE-2025-55553

CVE-2025-55553 is described across sources as a DoS vulnerability in PyTorch v2.7.0 caused by a syntax error in the proxy_tensor.py component. The linked documents (NVD/NIST entry and IBM watsonx bulletin listing this CVE among PyTorch-related issues) confirm the affected product and the basic fl...

7.5CVSS6.4AI score0.00068EPSS
Exploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2014-7192

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Eval injection vulnerability in index.js in the syntax-error package before 1.1.1 for Node.js 0.10.x, as used in IBM Rational Application Developer and other...

10CVSS6AI score0.42574EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/08/01 1:16 a.m.6 views

CVE-2025-8217

The Amazon Q Developer Visual Studio Code VS Code extension v1.84.0 contains inert, injected code designed to call the Q Developer CLI. The code executes when the extension is launched within the VS Code environment; however the injected code contains a syntax error which prevents it from making ...

5.1CVSS7.4AI score0.0003EPSS
Exploits1References1
OSV
OSV
added 2025/07/30 1:15 a.m.0 views

CVE-2025-8217

The Amazon Q Developer Visual Studio Code VS Code extension v1.84.0 contains inert, injected code designed to call the Q Developer CLI. The code executes when the extension is launched within the VS Code environment; however the injected code contains a syntax error which prevents it from making ...

5.1CVSS5.8AI score0.0003EPSS
Exploits1References3
NVD
NVD
added 2025/07/30 1:15 a.m.8 views

CVE-2025-8217

The Amazon Q Developer Visual Studio Code VS Code extension v1.84.0 contains inert, injected code designed to call the Q Developer CLI. The code executes when the extension is launched within the VS Code environment; however the injected code contains a syntax error which prevents it from making ...

5.1CVSS0.0003EPSS
Exploits1References3
Cvelist
Cvelist
added 2025/07/30 12:34 a.m.13 views

CVE-2025-8217 Inert Malicious script injected into Amazon Q Developer Visual Studio Code (VS Code) Extension

The Amazon Q Developer Visual Studio Code VS Code extension v1.84.0 contains inert, injected code designed to call the Q Developer CLI. The code executes when the extension is launched within the VS Code environment; however the injected code contains a syntax error which prevents it from making ...

5.1CVSS0.0003EPSS
Exploits1References3
CVE
CVE
added 2025/07/30 12:34 a.m.22 views

CVE-2025-8217

CVE-2025-8217 documents describe a vulnerability in the Amazon Q Developer VS Code extension. The v1.84.0 extension contains inert, injected code intended to call the Q Developer CLI, which executes when the extension is launched in VS Code, but the injected code has a syntax error that prevents ...

5.1CVSS6.8AI score0.0003EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2025/07/30 12:0 a.m.8 views

PT-2025-31362

Name of the Vulnerable Software and Affected Versions Amazon Q Developer Visual Studio Code VS Code extension version 1.84.0 Description The Amazon Q Developer Visual Studio Code VS Code extension v1.84.0 contains injected code intended to call the Q Developer CLI. This code executes upon extensi...

5.1CVSS6.9AI score0.0003EPSS
Exploits1References8
RedhatCVE
RedhatCVE
added 2025/06/15 10:14 p.m.3 views

CVE-2025-6083

In ExtremeCloud Universal ZTNA, a syntax error in the 'searchKeyword' condition caused queries to bypass the ownerid filter. This issue may allow users to search data across the entire table instead of being restricted to their specific ownerid...

5.2CVSS6.4AI score0.00183EPSS
Exploits0References1
NVD
NVD
added 2025/06/13 9:15 p.m.8 views

CVE-2025-6083

In ExtremeCloud Universal ZTNA, a syntax error in the 'searchKeyword' condition caused queries to bypass the ownerid filter. This issue may allow users to search data across the entire table instead of being restricted to their specific ownerid...

5.2CVSS0.00183EPSS
Exploits0References1
CVE
CVE
added 2025/06/13 9:6 p.m.38 views

CVE-2025-6083

CVE-2025-6083 affects ExtremeCloud Universal ZTNA. A syntax error in the searchKeyword condition allows queries to bypass the owner_id filter, potentially letting a user search data across the entire table instead of constraints tied to their owner_id. The available connected sources consistently...

5.2CVSS6.5AI score0.00183EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/06/13 9:6 p.m.11 views

CVE-2025-6083 ExtremeCloud Universal ZTNA Improper Authorization

In ExtremeCloud Universal ZTNA, a syntax error in the 'searchKeyword' condition caused queries to bypass the ownerid filter. This issue may allow users to search data across the entire table instead of being restricted to their specific ownerid...

5.2CVSS0.00183EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/06/13 12:0 a.m.2 views

PT-2025-25448

Name of the Vulnerable Software and Affected Versions ExtremeCloud Universal ZTNA affected versions not specified Description A syntax error in the searchKeyword condition allows queries to bypass the owner id filter. This issue may enable users to search data across the entire table, rather than...

5.2CVSS6.3AI score0.00183EPSS
Exploits0References8
CNNVD
CNNVD
added 2025/06/13 12:0 a.m.1 views

Extreme Universal ZTNA 授权问题漏洞

Extreme Universal ZTNA is a complete network access solution from Extreme, Inc. An authorization issue vulnerability exists in Extreme Universal ZTNA that stems from a searchKeyword conditional syntax error that could lead to bypassing the ownerid filter...

5.2CVSS6.6AI score0.00183EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/15 12:10 a.m.5 views

CVE-2024-56526

An issue was discovered in OXID eShop before 7. CMS pages in combination with Smarty may display user information if a CMS page contains a Smarty syntax error...

7.5CVSS6.5AI score0.00333EPSS
Exploits0References1
OSV
OSV
added 2025/05/13 6:30 p.m.4 views

GHSA-QQCR-9JFC-35C4 OXID eShop May Display User Information

An issue was discovered in OXID eShop before 7. CMS pages in combination with Smarty may display user information if a CMS page contains a Smarty syntax error...

7.5CVSS6.4AI score0.00333EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/05/13 12:0 a.m.3 views

CVE-2024-56526

An issue was discovered in OXID eShop before 7. CMS pages in combination with Smarty may display user information if a CMS page contains a Smarty syntax error...

7.4AI score0.00333EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/05/13 12:0 a.m.3 views

PT-2025-20917

Name of the Vulnerable Software and Affected Versions: OXID eShop versions prior to 7 Description: An issue in OXID eShop allows CMS pages, when used in combination with Smarty, to potentially display user information if a CMS page contains a Smarty syntax error. Recommendations: For versions pri...

7.5CVSS5.8AI score0.00333EPSS
Exploits0References6
Rows per page
Query Builder