Lucene search
+L

6589 matches found

NVD
NVD
added 2025/09/08 12:15 p.m.16 views

CVE-2025-10092

A vulnerability was found in Jinher OA up to 1.2. This impacts an unknown function of the file /c6/Jhsoft.Web.projectmanage/TaskManage/AddTask.aspx/?Type=add of the component XML Handler. The manipulation results in xml external entity reference. The attack can be executed remotely. The exploit h...

9.8CVSS0.00549EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/09/08 11:32 a.m.36 views

CVE-2025-10092 Jinher OA XML Type xml external entity reference

A vulnerability was found in Jinher OA up to 1.2. This impacts an unknown function of the file /c6/Jhsoft.Web.projectmanage/TaskManage/AddTask.aspx/?Type=add of the component XML Handler. The manipulation results in xml external entity reference. The attack can be executed remotely. The exploit h...

7.5CVSS0.00549EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/09/08 12:00 a.m.18 views

PT-2025-36456

Name of the Vulnerable Software and Affected Versions: Jinher OA versions up to 1.2 Description: A vulnerability exists in Jinher OA that allows for XML external entity reference. The issue impacts an unknown function of the file /c6/Jhsoft.Web.projectmanage/TaskManage/AddTask.aspx/?Type=add with...

7.5CVSS6AI score0.00549EPSS
SaveExploits1References9
RedhatCVE
RedhatCVE
added 2025/09/06 5:21 p.m.19 views

CVE-2025-26428

In startLockTaskMode of LockTaskController.java, there is a possible lock screen bypass due to a logic error in the code. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

3.2CVSS7AI score0.00105EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/09/06 5:21 p.m.7 views

CVE-2025-26452

In loadDrawableForCookie of ResourcesImpl.java, there is a possible way to access task snapshots of other apps due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.9AI score0.00079EPSS
SaveExploits0References1
Gitee
Gitee
added 2025/09/06 1:01 a.m.88 views

cassandra-mesos

This is a repository for the Cassandra-Mesos framework, which is a distributed database system that allows for the deployment of Apache Cassandra on Apache Mesos. The framework is designed to provide a scalable and fault-tolerant way to run Cassandra on Mesos, and it includes features such as...

6.9AI score
SaveExploits0
OSV
OSV
added 2025/09/05 5:10 p.m.7 views

MAL-2025-45566 Malicious code in plastic-task-note (npm)

The package plastic-task-note was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/09/05 5:10 p.m.6 views

Malicious code in plastic-task-note (npm)

The package plastic-task-note was found to contain malicious code...

7AI score
SaveExploits0
NVD
NVD
added 2025/09/04 6:15 p.m.16 views

CVE-2025-26452

In loadDrawableForCookie of ResourcesImpl.java, there is a possible way to access task snapshots of other apps due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS0.00079EPSS
SaveExploits0References2
OSV
OSV
added 2025/09/04 6:15 p.m.6 views

CVE-2025-26452

In loadDrawableForCookie of ResourcesImpl.java, there is a possible way to access task snapshots of other apps due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.00079EPSS
SaveExploits0References2
OSV
OSV
added 2025/09/04 6:15 p.m.11 views

CVE-2025-26428

In startLockTaskMode of LockTaskController.java, there is a possible lock screen bypass due to a logic error in the code. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

3.2CVSS5.9AI score0.00105EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/09/04 5:15 p.m.4 views

CVE-2025-26452

In loadDrawableForCookie of ResourcesImpl.java, there is a possible way to access task snapshots of other apps due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6.3AI score0.00079EPSS
SaveExploits0References2
CVE
CVE
added 2025/09/04 5:15 p.m.449 views

CVE-2025-26452

CVE-2025-26452 affects Android Framework via the ResourcesImpl.java: loadDrawableForCookie path, where a confused deputy may allow an app’s task snapshots to be accessed, enabling local elevation of privilege without extra execution privileges or user interaction. Public sources (Android bulletin...

7.8CVSS6.3AI score0.00079EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2025/09/04 5:15 p.m.6 views

CVE-2025-26452

In loadDrawableForCookie of ResourcesImpl.java, there is a possible way to access task snapshots of other apps due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.6AI score0.00079EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2025/09/04 5:15 p.m.17 views

CVE-2025-26452

In loadDrawableForCookie of ResourcesImpl.java, there is a possible way to access task snapshots of other apps due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00079EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/09/04 5:11 p.m.4 views

CVE-2025-26428

In startLockTaskMode of LockTaskController.java, there is a possible lock screen bypass due to a logic error in the code. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

6.4AI score0.00105EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/09/04 5:11 p.m.18 views

CVE-2025-26428

In startLockTaskMode of LockTaskController.java, there is a possible lock screen bypass due to a logic error in the code. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

0.00105EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2025/09/04 8:31 a.m.11 views

CVE-2024-13073

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akinsoft TaskPano allows Cross-Site Scripting XSS. This issue affects TaskPano: s1.06.04...

4.7CVSS5.8AI score0.00301EPSS
SaveExploits0References3
Microsoft CVE
Microsoft CVE
added 2025/09/04 6:23 a.m.19 views

fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats

...

5.5CVSS7AI score0.00213EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/09/04 5:12 a.m.11 views

An issue was discovered in the tokio crate before 1.8.1 for Rust. Upon a JoinHandle::abort, a Task may be dropped in the wrong thread.

...

5.9CVSS7AI score0.00836EPSS
SaveExploits1
Rows per page
Query Builder