Lucene search
+L

5940 matches found

EUVD
EUVD
added 2025/12/12 3:20 a.m.8 views

EUVD-2025-202970

The Zenost Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' and 'target' parameters in the button shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

6.4CVSS4.7AI score0.00189EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/12/12 12:0 a.m.8 views

PT-2025-50828

The Zenost Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' and 'target' parameters in the button shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

6.4CVSS5.1AI score0.00189EPSS
SaveExploits0References4
NVD
NVD
added 2025/12/11 9:15 p.m.8 views

CVE-2025-13663

Under certain circumstances, the Quartus Prime Pro Installer for Windows does not check the permissions of the Quartus target installation directory if the target installation directory already exists...

6.7CVSS0.00085EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/11 9:15 p.m.4 views

CVE-2025-13663

Under certain circumstances, the Quartus Prime Pro Installer for Windows does not check the permissions of the Quartus target installation directory if the target installation directory already exists...

5.4CVSS5.8AI score0.00085EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/11 8:35 p.m.8 views

CVE-2025-13663 Quartus Prime Pro Edition Installer Advisory

Under certain circumstances, the Quartus Prime Pro Installer for Windows does not check the permissions of the Quartus target installation directory if the target installation directory already exists...

6.7CVSS6.5AI score0.00085EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/11 8:35 p.m.32 views

CVE-2025-13663 Quartus Prime Pro Edition Installer Advisory

Under certain circumstances, the Quartus Prime Pro Installer for Windows does not check the permissions of the Quartus target installation directory if the target installation directory already exists...

6.7CVSS0.00085EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/11 8:35 p.m.29 views

CVE-2025-13663

CVE-2025-13663 concerns the Quartus Prime Pro Installer for Windows, where, under certain circumstances, the installer does not check the permissions of the target Quartus installation directory if the directory already exists. The issue is documented across multiple sources (NVD, Red Hat, CVE re...

6.7CVSS6.5AI score0.00085EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2025/12/11 8:35 p.m.6 views

EUVD-2025-202852

Under certain circumstances, the Quartus Prime Pro Installer for Windows does not check the permissions of the Quartus target installation directory if the target installation directory already exists...

6.7CVSS6.4AI score0.00085EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2025/12/11 8:15 p.m.222 views

Exploit for CVE-2020-1938

Ghostcat Scanner - CVE-2020-1938 A powerful Python exploit to...

9.8CVSS7AI score0.9927EPSS
SaveExploits48
Snyk
Snyk
added 2025/12/11 3:30 p.m.6 views

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the checkConnectivity function in the Network Request Handler component when processing the targetIp or targetPort arguments. An attacker can access internal resources or perform unauthorized network...

9.8CVSS6.8AI score0.0033EPSS
SaveExploits3References2
Github Security Blog
Github Security Blog
added 2025/12/11 3:30 p.m.16 views

PowerJob has a server-side request forgery vulnerability in PingPongUtils.java

A vulnerability was identified in PowerJob up to 5.1.2. This vulnerability affects the function checkConnectivity of the file src/main/java/tech/powerjob/common/utils/net/PingPongUtils.java of the component Network Request Handler. The manipulation of the argument targetIp/targetPort leads to...

9.8CVSS6.3AI score0.0033EPSS
SaveExploits3References7Affected Software1
NVD
NVD
added 2025/12/11 3:15 p.m.10 views

CVE-2025-14518

A vulnerability was identified in PowerJob up to 5.1.2. This vulnerability affects the function checkConnectivity of the file src/main/java/tech/powerjob/common/utils/net/PingPongUtils.java of the component Network Request Handler. The manipulation of the argument targetIp/targetPort leads to...

9.8CVSS0.0033EPSS
SaveExploits3References6
CVE
CVE
added 2025/12/11 3:2 p.m.30 views

CVE-2025-14518

PowerJob

9.8CVSS6.5AI score0.0033EPSS
SaveExploits3References6Affected Software1
Cvelist
Cvelist
added 2025/12/11 3:2 p.m.47 views

CVE-2025-14518 PowerJob Network Request PingPongUtils.java checkConnectivity server-side request forgery

A vulnerability was identified in PowerJob up to 5.1.2. This vulnerability affects the function checkConnectivity of the file src/main/java/tech/powerjob/common/utils/net/PingPongUtils.java of the component Network Request Handler. The manipulation of the argument targetIp/targetPort leads to...

6.5CVSS0.0033EPSS
SaveExploits3References6
Positive Technologies
Positive Technologies
added 2025/12/11 12:0 a.m.16 views

PT-2025-50725

Under certain circumstances, the Quartus Prime Pro Installer for Windows does not check the permissions of the Quartus target installation directory if the target installation directory already exists...

6.7CVSS6.9AI score0.00085EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/11 12:0 a.m.11 views

PowerJob 安全漏洞

PowerJob is an open source distributed computing and job scheduling framework from PowerJob Open Source that allows developers to easily schedule tasks in their applications. A security vulnerability exists in PowerJob 5.1.2 and earlier versions, which originates in the function in the file...

9.8CVSS6.3AI score0.0033EPSS
SaveExploits3References6
Tenable Nessus
Tenable Nessus
added 2025/12/11 12:0 a.m.18 views

EulerOS 2.0 SP13 : kernel (EulerOS-SA-2025-2522)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : x86/mce: Work around an erratum on fast string copy instructionsCVE-2022-49124 net: preserve skbendoffset in skbunclonekeeptruesizeCVE-2022-49142...

8.8CVSS7.5AI score0.00305EPSS
SaveExploits3References126
Vulnrichment
Vulnrichment
added 2025/12/09 4:1 p.m.4 views

CVE-2025-13661

Path traversal in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote authenticated attacker to write arbitrary files outside of the intended directory. User interaction is required...

7.1CVSS6.5AI score0.01197EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/09 3:31 a.m.6 views

EUVD-2022-55700

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Clear nfctarget before being used Fix a slab-out-of-bounds read that occurs in nlaput called from nfcgenlsendtarget when target-sensbreslen, which is duplicated from an nfctarget in pn533, is too large as the nfctarge...

5.9AI score0.00207EPSS
SaveExploits0References10
NVD
NVD
added 2025/12/09 1:16 a.m.10 views

CVE-2022-50656

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Clear nfctarget before being used Fix a slab-out-of-bounds read that occurs in nlaput called from nfcgenlsendtarget when target-sensbreslen, which is duplicated from an nfctarget in pn533, is too large as the nfctarge...

0.00207EPSS
SaveExploits0References9
Rows per page
Query Builder