Lucene search
+L

22723 matches found

EUVD
EUVD
added 2026/01/28 4:35 p.m.12 views

EUVD-2025-206455

Symantec Endpoint Protection, prior to 14.3 RU10 Patch 1, RU9 Patch 2, and RU8 Patch 3, may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are...

6.7CVSS5.8AI score0.00153EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/28 1:28 p.m.6 views

SUSE-SU-2026:0314-1 Security update for python311

This update for python311 fixes the following issues: - CVE-2025-12084: prevent quadratic behavior in node ID cache clearing bsc1254997. - CVE-2025-13836: prevent reading an HTTP response from a server, if no read amount is specified, with using Content-Length per default as the length bsc1254400...

7.5CVSS5.8AI score0.01631EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/01/28 12:28 p.m.16 views

EUVD-2026-4908

The Snow Monkey Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'generateuserdirpath' function in all versions up to, and including, 12.0.3. This makes it possible for unauthenticated attackers to delete arbitrary files on the...

9.8CVSS6.5AI score0.12473EPSS
SaveExploits1References5
EUVD
EUVD
added 2026/01/28 11:23 a.m.17 views

EUVD-2026-4892

The Frontend File Manager Plugin for WordPress is vulnerable to unauthorized file sharing due to a missing capability check on the 'wpfmsendfileinemail' AJAX action in all versions up to, and including, 23.5. This makes it possible for unauthenticated attackers to share arbitrary uploaded files v...

7.5CVSS5.8AI score0.00303EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/01/28 11:23 a.m.10 views

CVE-2026-1280 Frontend File Manager Plugin <= 23.5 - Missing Authorization to Unauthenticated Arbitrary File Sharing via 'file_id' Parameter

The Frontend File Manager Plugin for WordPress is vulnerable to unauthorized file sharing due to a missing capability check on the 'wpfmsendfileinemail' AJAX action in all versions up to, and including, 23.5. This makes it possible for unauthenticated attackers to share arbitrary uploaded files v...

7.5CVSS5.8AI score0.00303EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2026/01/28 11:11 a.m.191 views

sqlmap-CTT-v3.0-SQL-Injection-Engine-Full-33-layer-fractal-temporal-resonance-implementation-in-C

sqlmap-CTT-v3.0-SQL-Injection-Engine-Full-33-layer-fractal-tem...

5.9AI score
SaveExploits0
OSV
OSV
added 2026/01/28 10:13 a.m.8 views

RHSA-2026:1410 Red Hat Security Advisory: python3.11 security update

Bulletin has no description...

7.5CVSS5.8AI score0.01631EPSS
SaveExploits0References15
OSV
OSV
added 2026/01/28 10:13 a.m.8 views

RHSA-2026:1374 Red Hat Security Advisory: python3.11 security update

Bulletin has no description...

7.5CVSS5.8AI score0.01631EPSS
SaveExploits0References15
OSV
OSV
added 2026/01/28 9:37 a.m.10 views

SUSE-SU-2026:0312-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: - CVE-2025-15467: Stack buffer overflow in CMS AuthEnvelopedData parsing bsc1256830. - CVE-2025-68160: Heap out-of-bounds write in BIOflinebuffer on short writes bsc1256834. - CVE-2025-69418: Unauthenticated/unencrypted trailing bytes with...

9.8CVSS6.1AI score0.48211EPSS
SaveExploits8References17
OSV
OSV
added 2026/01/28 9:37 a.m.8 views

SUSE-SU-2026:0311-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: - CVE-2025-15467: Stack buffer overflow in CMS AuthEnvelopedData parsing bsc1256830. - CVE-2025-68160: Heap out-of-bounds write in BIOflinebuffer on short writes bsc1256834. - CVE-2025-69418: Unauthenticated/unencrypted trailing bytes with...

9.8CVSS6.1AI score0.48211EPSS
SaveExploits8References17
SUSE Linux
SUSE Linux
added 2026/01/28 9:36 a.m.11 views

Security update for openssl-3

This update for openssl-3 fixes the following issues: CVE-2025-15467: Stack buffer overflow in CMS AuthEnvelopedData parsing bsc1256830. CVE-2025-68160: Heap out-of-bounds write in BIOflinebuffer on short writes bsc1256834. CVE-2025-69418: Unauthenticated/unencrypted trailing bytes with low-level...

9.8CVSS6AI score0.48211EPSS
SaveExploits8References32
RedhatCVE
RedhatCVE
added 2026/01/28 9:17 a.m.24 views

CVE-2026-24801

Vulnerability in Ralim IronOS source/Core/BSP/Pinecilv2/blmcusdk/components/ble/blestack/common/tinycrypt/source modules. This vulnerability is associated with program files eccdsa.C. This issue affects IronOS: before v2.23-rc3...

6.9CVSS5.9AI score0.00185EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/28 9:07 a.m.19 views

RLSA-2026:1429 Important: php:8.3 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: heap-based buffer overflow in arraymerge CVE-2025-14178 php: PHP: Information disclosure via getimagesize function when reading multi-chunk images CVE-2025-14177 php: PHP: Denial of Service...

7.5CVSS6.1AI score0.00707EPSS
SaveExploits4References4
OSV
OSV
added 2026/01/28 9:07 a.m.15 views

RLSA-2026:1410 Moderate: python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

7.5CVSS5.9AI score0.01631EPSS
SaveExploits0References3
Rockylinux
Rockylinux
added 2026/01/28 9:07 a.m.21 views

python3.11 security update

An update is available for python3.11. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming languag...

7.5CVSS5.9AI score0.01631EPSS
SaveExploits0
Rockylinux
Rockylinux
added 2026/01/28 9:07 a.m.15 views

python3.12 security update

An update is available for python3.12. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming languag...

7.5CVSS5.9AI score0.01631EPSS
SaveExploits0
OSV
OSV
added 2026/01/28 9:05 a.m.14 views

RLSA-2026:1374 Moderate: python3.11 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

7.5CVSS5.9AI score0.01631EPSS
SaveExploits0References3
Fedora
Fedora
added 2026/01/28 12:53 a.m.9 views

[SECURITY] Fedora 43 Update: gimp-3.0.8-4.fc43

GIMP GNU Image Manipulation Program is a powerful image composition and editing program, which can be extremely useful for creating logos and other graphics for web pages. GIMP has many of the tools and filters you would expe ct to find in similar commercial offerings, and some interesting extras...

5.9AI score
SaveExploits0
CNNVD
CNNVD
added 2026/01/28 12:00 a.m.17 views

Tendenci security vulnerabilities

Tendenci is a membership management software developed by Tendenci Inc. in the United States, primarily used by non-profit organizations and associations. This software supports functions such as member management, content management, event management, and online donation management. Version 12.3...

9.8CVSS6AI score0.10866EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2026/01/28 12:00 a.m.8 views

PT-2026-5054

billboard.js before 3.18.0 allows an attacker to execute malicious JavaScript due to improper sanitization during chart option binding...

6AI score0.00174EPSS
SaveExploits0References2
Rows per page
Query Builder