Lucene search
+L

16064 matches found

EUVD
EUVD
added 2025/12/09 5:34 p.m.12 views

EUVD-2025-202264

Dell Encryption, versions prior to 11.12.1, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering...

6.6CVSS5.8AI score0.0009EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/09 5:34 p.m.34 views

CVE-2025-46636

Dell Encryption, versions prior to 11.12.1, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering...

6.6CVSS0.0009EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/09 5:34 p.m.4 views

CVE-2025-46636

Dell Encryption, versions prior to 11.12.1, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering...

6.6CVSS6AI score0.0009EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2025/12/09 12:28 a.m.7 views

SUSE CVE-2023-53769

In the Linux kernel, the following vulnerability has been resolved: virt/coco/sev-guest: Double-buffer messages The encryption algorithms read and write directly to shared unencrypted memory, which may leak information as well as permit the host to tamper with the message integrity. Instead, copy...

5.5CVSS6.2AI score0.00099EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.14 views

PT-2025-50110

Name of the Vulnerable Software and Affected Versions NVIDIA Merlin Transformers4Rec for Linux affected versions not specified Description The NVIDIA Merlin Transformers4Rec software contains a flaw within the Trainer component that could allow a user to trigger a deserialization issue...

8.8CVSS6.7AI score0.00643EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/12/09 12:00 a.m.10 views

NVIDIA Merlin Transformers4Rec 代码问题漏洞

NVIDIA Merlin Transformers4Rec is a software for building serialized and conversational recommender systems from NVIDIA. NVIDIA Merlin Transformers4Rec suffers from a deserialization vulnerability that originates from unsafe deserialization processing of serialized data submitted by a user when...

8.8CVSS6.1AI score0.00643EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/12/09 12:00 a.m.4 views

Unity Linux 20.1070e Security Update: aide (UTSA-2025-991101)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991101 advisory. AIDE is an advanced intrusion detection environment. Prior to version 0.19.2, there is an improper output neutralization vulnerability in AIDE. An attacker can craft...

6.2CVSS7.4AI score0.00225EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/12/09 12:00 a.m.9 views

Dell Encryption 后置链接漏洞

Dell Encryption is a suite of data protection solutions from Dell USA. The product includes features such as compliance management, authentication, disk data encryption, and port encryption. A backlink vulnerability exists in Dell Encryption versions prior to 11.12.1, which stems from improper li...

6.6CVSS6.3AI score0.0009EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/09 12:00 a.m.16 views

NVIDIA NVTabular 代码问题漏洞

NVIDIA NVTabular is a component of a deep learning recommender system framework from NVIDIA, USA. A deserialization vulnerability exists in NVIDIA NVTabular, which arises from unsafe deserialization of serialized data received from users by the Workflow component and can be exploited by an attack...

8.8CVSS6.1AI score0.00643EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.15 views

PT-2025-50111

Name of the Vulnerable Software and Affected Versions Dell Encryption versions prior to 11.12.1 Description Dell Encryption contains an Improper Link Resolution Before File Access 'Link Following' issue. A local attacker with low privileges could potentially tamper with information by exploiting...

6.6CVSS6.1AI score0.0009EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/12/08 6:30 p.m.11 views

EUVD-2025-201726

Incorrect access control in usememos memos v0.25.2 allows attackers with low-level privileges to arbitrarily modify or delete attachments made by other users...

5.4CVSS6.4AI score0.00176EPSS
SaveExploits1References5
Patchstack
Patchstack
added 2025/12/08 7:12 a.m.25 views

WordPress Fluent Forms plugin <= 6.1.7 - Unauthenticated Insecure Direct Object Reference to Payment Status Tampering via submission_id vulnerability

Unauthenticated Insecure Direct Object Reference to Payment Status Tampering via submissionid vulnerability discovered by Md. Moniruzzaman Prodhan NomanProdhan - Knight Squad in WordPress Plugin FluentForm versions = 6.1.7...

5.3CVSS6.8AI score0.00281EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2025/12/08 2:15 a.m.4 views

DEBIAN-CVE-2023-53769

In the Linux kernel, the following vulnerability has been resolved: virt/coco/sev-guest: Double-buffer messages The encryption algorithms read and write directly to shared unencrypted memory, which may leak information as well as permit the host to tamper with the message integrity. Instead, copy...

9.3CVSS5.2AI score0.00099EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/08 2:15 a.m.8 views

UBUNTU-CVE-2023-53769

In the Linux kernel, the following vulnerability has been resolved: virt/coco/sev-guest: Double-buffer messages The encryption algorithms read and write directly to shared unencrypted memory, which may leak information as well as permit the host to tamper with the message integrity. Instead, copy...

9.3CVSS5.7AI score0.00099EPSS
SaveExploits0References7
OSV
OSV
added 2025/12/08 1:19 a.m.16 views

CVE-2023-53769 virt/coco/sev-guest: Double-buffer messages

In the Linux kernel, the following vulnerability has been resolved: virt/coco/sev-guest: Double-buffer messages The encryption algorithms read and write directly to shared unencrypted memory, which may leak information as well as permit the host to tamper with the message integrity. Instead, copy...

9.3CVSS6.2AI score
SaveExploits0References7
CVE
CVE
added 2025/12/08 1:19 a.m.35 views

CVE-2023-53769

CVE-2023-53769 concerns the Linux kernel vulnerability in virt/coco/sev-guest: Double-buffer messages. The issue arises because the encryption algorithms read and write directly to shared unencrypted memory, creating risk of information leakage and potential tampering with message integrity by th...

9.3CVSS5.9AI score0.00099EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/12/08 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2023-53769

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - virt/coco/sev-guest: Double-buffer messages The encryption algorithms read and write directly to shared unencrypted memory, which may leak information as well a...

9.3CVSS5.9AI score0.00099EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/12/08 12:00 a.m.25 views

PT-2025-49499

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The encryption algorithms within the kernel’s virt/coco/sev-guest component directly read from and write to shared unencrypted memory. This practice could potentially expose information...

7.8CVSS6.8AI score0.00932EPSS
SaveExploits2References844
Vulnrichment
Vulnrichment
added 2025/12/06 6:39 a.m.7 views

CVE-2025-13748 Fluent Forms <= 6.1.7 - Unauthenticated Insecure Direct Object Reference to Payment Status Tampering via submission_id

The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.1.7 via the 'submissionid' parameter due to missing validation on a user controlled key within...

5.3CVSS5.6AI score0.00281EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/06 6:39 a.m.37 views

CVE-2025-13748 Fluent Forms <= 6.1.7 - Unauthenticated Insecure Direct Object Reference to Payment Status Tampering via submission_id

The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.1.7 via the 'submissionid' parameter due to missing validation on a user controlled key within...

5.3CVSS0.00281EPSS
SaveExploits0References2
Rows per page
Query Builder