Lucene search
+L

3855 matches found

Citrix
Citrix
added 2025/04/21 12:0 a.m.15 views

Citrix Virtual Apps and Desktops: Issues with Monitor Service after upgrade to 2402 CU2

Environment has been upgraded to 2402 CU2 version. When admin invokes a cmdlet: Get-MonitorConfiguration, the error is displayed: A database operation failed and could not be recovered : Reason ? Not all Delivery Controllers are affected and cmdlet returns actual configuration on some of the...

6.6AI score
SaveExploits0
SUSE CVE
SUSE CVE
added 2025/04/18 11:18 p.m.14 views

SUSE CVE-2025-40325

In the Linux kernel, the following vulnerability has been resolved: md/raid10: wait barrier before returning discard request with REQNOWAIT raid10handlediscard should wait barrier before returning a discard bio which has REQNOWAIT. And there is no need to print warning calltrace if a discard bio...

5.5CVSS6.5AI score0.0023EPSS
SaveExploits0References16
BDU FSTEC
BDU FSTEC
added 2025/04/17 12:0 a.m.11 views

The vulnerability of the `prepare_uprobe_buffer()` function in the kernel/trace/trace_uprobe.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the prepareuprobebuffer function in the kernel/trace/traceuprobe.c module of the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

7.8CVSS7.2AI score0.00235EPSS
SaveExploits0References19Affected Software7
Positive Technologies
Positive Technologies
added 2025/04/17 12:0 a.m.6 views

PT-2025-18721 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical vulnerability was found in the component TRACE Command Handler of PCMan FTP Server. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit ha...

9.8CVSS7.3AI score0.00707EPSS
SaveExploits1References14
OSV
OSV
added 2025/04/16 6:16 p.m.6 views

CVE-2025-32863

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'UnlockTraceLevelSettings' method. This could allow an authenticated remote attacker to bypass authorization controls, to read...

8.7CVSS5.8AI score0.00595EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/16 3:15 p.m.2 views

DEBIAN-CVE-2025-22035

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free in printgraphfunctionflags during tracer switching Kairui reported a UAF issue in printgraphfunctionflags during ftrace stress testing 1. This issue can be reproduced if puting a 'mdelay10' after...

7.8CVSS5.8AI score0.00263EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/16 3:15 p.m.7 views

UBUNTU-CVE-2025-22035

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free in printgraphfunctionflags during tracer switching Kairui reported a UAF issue in printgraphfunctionflags during ftrace stress testing 1. This issue can be reproduced if puting a 'mdelay10' after...

7.8CVSS6.2AI score0.00263EPSS
SaveExploits0References50
CNNVD
CNNVD
added 2025/04/16 12:0 a.m.7 views

Siemens TeleControl Server Basic SQL注入漏洞

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the UpdateTraceLevelSettings method, which can be exploited by an attacker to bypass...

8.8CVSS8.4AI score0.00595EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/04/16 12:0 a.m.18 views

Siemens TeleControl Server Basic SQL注入漏洞

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an SQL injection in the UnlockTraceLevelSettings method, which can be exploited by an attacker to bypass...

8.8CVSS8.4AI score0.00595EPSS
SaveExploits0References2
Packet Storm News
Packet Storm News
added 2025/04/16 12:0 a.m.10 views

ZkFuzz: Foundation and Framework for Effective Fuzzing of Zero-Knowledge Circuits

Zero-knowledge ZK circuits enable privacy-preserving computations and are central to many cryptographic protocols. Systems like Circom simplify ZK development by combining witness computation and circuit constraints in one program. However, even small errors can compromise security of ZK programs...

7.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2025/04/14 12:0 a.m.14 views

The vulnerability of the `timerlat_fd_open()` function in the kernel/trace/trace_osnoise.c module, which supports Linux operating system tracing, allows a hacker to cause a service failure.

The vulnerability of the timerlatfdopen function in the kernel/trace/traceosnoise.c module, which supports Linux operating system tracing, is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.1AI score0.00225EPSS
SaveExploits0References15Affected Software2
CNNVD
CNNVD
added 2025/04/08 12:0 a.m.6 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly saving host FPSIMD/SVE/SME state, which could lead to a QEMU crash or ptrace ABI change...

5.5CVSS6.4AI score0.00197EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/04/02 1:37 p.m.12 views

CVE-2025-31609

Missing Authorization vulnerability in Arni Cinco WPCargo Track & Trace wpcargo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPCargo Track & Trace: from n/a through = 8.0.2...

4.3CVSS7.2AI score0.00233EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/02 12:0 a.m.14 views

PT-2025-22199

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the trace event verifier. The verifier checks the formats of trace events to ensure they do not point to memory that is...

5.5CVSS6.6AI score0.00181EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2025/04/01 12:0 a.m.10 views

The vulnerability of the traceprobe_parse_event_name() function in the kernel/trace/trace_probe.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the traceprobeparseeventname function in the kernel/trace/traceprobe.c file of the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker t...

7.8CVSS6.9AI score0.00247EPSS
SaveExploits0References26Affected Software8
Patchstack
Patchstack
added 2025/03/31 2:7 p.m.7 views

WordPress WPCargo Track & Trace plugin <= 8.0.2 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by hunter85 in WordPress Plugin WPCargo Track & Trace versions = 8.0.2...

4.3CVSS7AI score0.00233EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/03/31 1:15 p.m.13 views

CVE-2025-31609

Missing Authorization vulnerability in Arni Cinco WPCargo Track & Trace wpcargo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPCargo Track & Trace: from n/a through = 8.0.2...

4.3CVSS0.00233EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/31 12:55 p.m.6 views

CVE-2025-31609 WordPress WPCargo Track & Trace plugin <= 7.0.6 - Insecure Direct Object References (IDOR) vulnerability

Missing Authorization vulnerability in Arni Cinco WPCargo Track & Trace allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WPCargo Track & Trace: from n/a through 7.0.6...

4.3CVSS6.9AI score0.00233EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/31 12:55 p.m.24 views

CVE-2025-31609 WordPress WPCargo Track & Trace plugin <= 8.0.2 - Insecure Direct Object References (IDOR) vulnerability

Missing Authorization vulnerability in Arni Cinco WPCargo Track & Trace wpcargo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPCargo Track & Trace: from n/a through = 8.0.2...

4.3CVSS0.00233EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/31 12:55 p.m.59 views

CVE-2025-31609

Technical details about CVE-2025-31609 are not provided in the supplied documents. Please monitor for updates from the vendor/NVD; no product versions, impact, or fixes are disclosed here.

4.3CVSS7.2AI score0.00233EPSS
SaveExploits0References1
Rows per page
Query Builder