Lucene search
+L

4748 matches found

CVE
CVE
added 2025/06/02 3:58 p.m.65 views

CVE-2025-48941

CVE-2025-48941 (MyBB) : Affected software: MyBB versions prior to 1.8.39. Issue: the internal search does not properly validate thread visibility, allowing a user with search access to infer the existence of hidden threads (draft, unapproved, or soft-deleted) by title. The visible flag (mybb_thre...

5.3CVSS5.3AI score0.00296EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2025/06/02 3:58 p.m.47 views

CVE-2025-48941 MyBB may disclosure unviewable threads' titles in searches

MyBB is free and open source forum software. Prior to version 1.8.39, the search component does not validate permissions correctly, which allows attackers to determine the existence of hidden draft, unapproved, or soft-deleted threads containing specified text in the title. The visibility state...

5.3CVSS0.00296EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/06/02 12:0 a.m.9 views

PT-2025-23536 · Mybb · Mybb

Name of the Vulnerable Software and Affected Versions: MyBB versions prior to 1.8.39 Description: The search component in MyBB does not validate permissions correctly, allowing attackers to determine the existence of hidden threads, including draft, unapproved, or soft-deleted threads, by analyzi...

5.3CVSS6.2AI score0.00296EPSS
SaveExploits0References8
GithubExploit
GithubExploit
added 2025/05/31 3:23 p.m.334 views

Exploit for Improper Protection of Alternate Path in Vbulletin

Description: RCE for Vbullettin versions between 5.0.0 - 5...

10CVSS9.6AI score0.77374EPSS
SaveExploits4
Packet Storm News
Packet Storm News
added 2025/05/31 12:0 a.m.15 views

Adaptive and Efficient Dynamic Memory Management for Hardware Enclaves

The second version of Intel Software Guard Extensions Intel SGX, or SGX2, adds dynamic management of enclave memory and threads. The first version required the address space and thread counts to be fixed before execution. The Enclave Dynamic Memory Management EDMM feature of SGX2 has the potentia...

7.4AI score
SaveExploits0
OSV
OSV
added 2025/05/30 1:15 p.m.5 views

DEBIAN-CVE-2025-40909

Perl threads have a working directory race condition where file operations may target unintended paths. If a directory handle is open at thread creation, the process-wide current working directory is temporarily changed in order to clone that handle for the new thread, which is visible from any...

5.9CVSS7AI score0.00375EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/30 1:15 p.m.7 views

AZL-62069 CVE-2025-40909 affecting package perl for versions less than 5.38.2-509

Perl threads have a working directory race condition where file operations may target unintended paths. If a directory handle is open at thread creation, the process-wide current working directory is temporarily changed in order to clone that handle for the new thread, which is visible from any...

5.9CVSS7.2AI score0.00375EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/30 1:15 p.m.6 views

AZL-62067 CVE-2025-40909 affecting package perl for versions less than 5.34.1-491

Perl threads have a working directory race condition where file operations may target unintended paths. If a directory handle is open at thread creation, the process-wide current working directory is temporarily changed in order to clone that handle for the new thread, which is visible from any...

5.9CVSS6.9AI score0.00375EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/30 1:15 p.m.4 views

UBUNTU-CVE-2025-40909

Perl threads have a working directory race condition where file operations may target unintended paths. If a directory handle is open at thread creation, the process-wide current working directory is temporarily changed in order to clone that handle for the new thread, which is visible from any...

5.9CVSS7AI score0.00375EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2025/05/30 12:20 p.m.28 views

CVE-2025-40909

Perl threads have a working directory race condition where file operations may target unintended paths. If a directory handle is open at thread creation, the process-wide current working directory is temporarily changed in order to clone that handle for the new thread, which is visible from any...

5.9CVSS7AI score0.00375EPSS
SaveExploits0
OSV
OSV
added 2025/05/23 1:59 p.m.5 views

OESA-2025-1533 nodejs security update

Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices...

7.5CVSS6.9AI score0.00763EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 10:49 a.m.23 views

CVE-2024-25393

A stack buffer overflow occurs in net/at/src/atserver.c in RT-Thread through 5.0.2...

9.8CVSS7.4AI score0.0107EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 10:39 a.m.8 views

CVE-2024-23379

Memory corruption while unmapping the fastrpc map when two threads can free the same map in concurrent scenario...

6.7CVSS7.2AI score0.0011EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 10:35 a.m.19 views

CVE-2024-38268

An improper restriction of operations within the bounds of a memory buffer in the MAC address parser of the Zyxel VMG8825-T50K firmware versions through 5.50ABOM.8C0 could allow an authenticated attacker with administrator privileges to cause potential memory corruptions, resulting in a thread...

4.9CVSS7AI score0.00431EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/23 10:3 a.m.13 views

CVE-2024-25390

A heap buffer overflow occurs in finsh/mshfile.c and finsh/msh.c in RT-Thread through 5.0.2...

8.4CVSS7.5AI score0.00323EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 10:3 a.m.9 views

CVE-2024-24334

A heap buffer overflow occurs in dfsv2 dfsfile in RT-Thread through 5.0.2...

8.4CVSS7.5AI score0.00404EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 10:3 a.m.9 views

CVE-2024-24335

A heap buffer overflow occurs in the dfsv2 romfs filesystem RT-Thread through 5.0.2...

8.4CVSS7.4AI score0.00404EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 10:3 a.m.11 views

CVE-2024-25391

A stack buffer overflow occurs in libc/posix/ipc/mqueue.c in RT-Thread through 5.0.2...

8.4CVSS7.5AI score0.00323EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:46 a.m.12 views

CVE-2024-28034

Cross-site scripting vulnerability exists in Mini Thread Version 3.33βi. An arbitrary script may be executed on the web browser of the user accessing the website that uses the product. Note that the developer was unreachable, therefore, users should consider stop using Mini Thread Version 3.33βi...

5.4CVSS6.6AI score0.00293EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:45 a.m.10 views

CVE-2024-25388

drivers/wlan/wlanmgmt,c in RT-Thread through 5.0.2 has an integer signedness error and resultant buffer overflow...

8.4CVSS8.5AI score0.00323EPSS
SaveExploits0References1
Rows per page
Query Builder