Lucene search
+L

5073 matches found

Oracle linux
Oracle linux
added 2025/02/21 12:0 a.m.25 views

libpq security update

13.20-1 - Update to 13.20...

8.1CVSS8.4AI score0.9003EPSS
SaveExploits10
SUSE Linux
SUSE Linux
added 2025/02/20 4:21 p.m.5 views

Security update for postgresql13

This update for postgresql13 fixes the following issues: Upgrade to 13.20: CVE-2025-1094: Harden PQescapeString and allied functions against invalidly-encoded input strings bsc1237093. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

8.8CVSS7.3AI score0.9003EPSS
SaveExploits10References4
Oracle linux
Oracle linux
added 2025/02/20 12:0 a.m.28 views

libpq security update

13.20-1 - Update to 13.20...

8.1CVSS9.3AI score0.9003EPSS
SaveExploits10
CNNVD
CNNVD
added 2025/02/19 12:0 a.m.8 views

ChurchCRM 安全漏洞

ChurchCRM is an open source CRM system built for churches by ChurchCRM Open Source. A security vulnerability exists in ChurchCRM version 5.13.0 that stems from vulnerability to a reflective cross-site scripting attack that allows session credentials to be stolen...

8.4CVSS5.9AI score0.0028EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/02/19 12:0 a.m.7 views

ChurchCRM 安全漏洞

ChurchCRM is an open source CRM system built for churches by ChurchCRM Open Source. A security vulnerability exists in ChurchCRM 5.13.0 and earlier versions, which stems from the EID parameter being directly connected to a SQL query without proper cleanup, which is susceptible to SQL injection...

9.3CVSS9.3AI score0.00608EPSS
SaveExploits1References1
OSV
OSV
added 2025/02/13 7:15 a.m.5 views

CVE-2024-13346

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 7.11.13. This is due to the software allowing users to execute an action that does not properly validate a value before running...

9.8CVSS7.6AI score0.02258EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/02/13 12:0 a.m.20 views

PT-2025-6949

Name of the Vulnerable Software and Affected Versions: Dell SupportAssist OS Recovery versions prior to 5.5.13.1 Description: The issue concerns a symbolic link attack vulnerability. A low-privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary fil...

7.8CVSS6.2AI score0.00174EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/02/13 12:0 a.m.7 views

WordPress plugin Avada | Website Builder For WordPress & WooCommerce 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code injection vulnerability exists in...

9.8CVSS9.2AI score0.02258EPSS
SaveExploits1References2
Patchstack
Patchstack
added 2025/02/12 9:17 p.m.8 views

WordPress Avada theme <= 7.11.13 - Unauthenticated Arbitrary Shortcode Execution vulnerability

Unauthenticated Arbitrary Shortcode Execution vulnerability discovered by mikemyers in WordPress Theme Avada versions = 7.11.13...

9.8CVSS7.1AI score0.02258EPSS
SaveExploits1References1Affected Software1
AstraLinux
AstraLinux
added 2025/02/06 4:28 p.m.4 views

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: powerpc/code-patching: Disable KASAN report during patching via temporary mm Erhard reports the following KASAN hit on Talos II power9 with kernel 6.13: 12.028126 ==================================================================...

6.4AI score0.00188EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/02/06 2:33 a.m.16 views

CVE-2025-24587

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Nks Email Subscription Popup email-subscribe allows Blind SQL Injection.This issue affects Email Subscription Popup: from n/a through = 1.2.23...

7.6CVSS7.4AI score0.35773EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/02/06 12:11 a.m.8 views

CVE-2022-47600

Unauth. Reflected Cross-Site Scripting XSS vulnerability in I Thirteen Web Solution Mass Email To users plugin = 1.1.4 versions...

7.1CVSS5.8AI score0.00382EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 9:1 p.m.13 views

CVE-2022-46799

Unauth. Reflected Cross-Site Scripting XSS vulnerability in I Thirteen Web Solution Easy Testimonial Slider and Form plugin = 1.0.15 versions...

7.1CVSS5.8AI score0.00382EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 9:51 a.m.11 views

CVE-2024-30497

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in I Thirteen Web Solution WP Responsive Tabs horizontal vertical and accordion Tabs.This issue affects WP Responsive Tabs horizontal vertical and accordion Tabs: from n/a through 1.1.17...

8.8CVSS8.9AI score0.00577EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 8:35 a.m.7 views

CVE-2024-47301

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bit Apps Bit Form bit-form allows Stored XSS.This issue affects Bit Form: from n/a through = 2.13.10...

7.1CVSS5.9AI score0.00304EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 3:44 a.m.10 views

CVE-2024-27960

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in I Thirteen Web Solution Email Subscription Popup allows Stored XSS.This issue affects Email Subscription Popup: from n/a through 1.2.20...

7.1CVSS8.6AI score0.00331EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/02/04 12:0 a.m.7 views

PT-2025-4179 · Samsung +1 · Secure Folder +3

Name of the Vulnerable Software and Affected Versions: Secure Folder versions prior to 1.9.20.50 in Android 14 Secure Folder versions prior to 1.8.11.0 in Android 13 Secure Folder versions prior to 1.7.04.0 in Android 12 Description: The issue is related to improper access control in Secure Folde...

6.8CVSS6.8AI score0.00148EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/01/30 12:0 a.m.7 views

Tenda A18 安全漏洞

Tenda A18 is an AC1200 dual-band Wi-Fi repeater from China's Tenda. A buffer overflow vulnerability exists in Tenda A18 15.13.07.09 and earlier versions, which stems from the parameter wpapskcrypto5g failing to correctly validate the length and size of the input data, and can be exploited by an...

9.8CVSS8.1AI score0.01116EPSS
SaveExploits1References5
OSV
OSV
added 2025/01/29 9:15 p.m.4 views

PYSEC-2025-27

The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations. Snowflake discovered and remediated a vulnerability in the Snowflake Connector for Python. The OCSP response cache uses pickle as the...

7.8CVSS5.9AI score0.00246EPSS
SaveExploits0References2
FreeBSD
FreeBSD
added 2025/01/29 12:0 a.m.10 views

postorius -- XSS

NIST reports: Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the wild in May 2026...

7.2CVSS5.8AI score0.00237EPSS
SaveExploits0References1
Rows per page
Query Builder