Lucene search
+L

1267 matches found

OSV
OSV
added 2025/10/14 1:15 p.m.4 views

CVE-2025-11708

Use-after-free in MediaTrackGraphImpl::GetInstance This vulnerability affects Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4...

9.8CVSS5.8AI score
SaveExploits0References7
CVE
CVE
added 2025/10/14 12:27 p.m.27 views

CVE-2025-11708

CVE-2025-11708 is a use-after-free in MediaTrackGraphImpl::GetInstance() affecting Firefox before version 144, Firefox ESR before 140.4, Thunderbird before 144, and Thunderbird before 140.4. Connected advisories corroborate multiple vendors and distributions addressing these Firefox/Thunderbird m...

9.8CVSS7.2AI score0.00471EPSS
SaveExploits0References7Affected Software2
Cvelist
Cvelist
added 2025/10/14 12:27 p.m.19 views

CVE-2025-11708 Use-after-free in MediaTrackGraphImpl::GetInstance()

Use-after-free in MediaTrackGraphImpl::GetInstance. This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4...

0.00471EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2025/10/14 12:27 p.m.5 views

CVE-2025-11708

Use-after-free in MediaTrackGraphImpl::GetInstance. This vulnerability was fixed in Firefox 144, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4...

9.8CVSS8.4AI score0.00471EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/10/14 12:0 a.m.7 views

PT-2025-41896

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 144 Firefox ESR versions prior to 140.4 Thunderbird versions prior to 144 Thunderbird versions prior to 140.4 Description A use-after-free issue exists in the MediaTrackGraphImpl::GetInstance function. This can occur...

10CVSS8.9AI score0.09348EPSS
SaveExploits2References311
CNVD
CNVD
added 2025/10/13 12:0 a.m.5 views

AndSoft e-TMS Cross-Site Scripting Vulnerability (CNVD-2025-23568)

AndSoft e-TMS is a logistics management software from AndSoft Spain. A cross-site scripting vulnerability exists in AndSoft e-TMS, which originates from a lack of effective filtering and escaping of user-supplied data in parameter l of the /clt/TRACKREQUEST.ASP file, which can be exploited by an...

6.9CVSS6.5AI score0.00221EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/10/13 12:0 a.m.8 views

AndSoft e-TMS SQL Injection Vulnerability (CNVD-2025-23569)

AndSoft e-TMS is a logistics management software from AndSoft Spain. AndSoft e-TMS suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter USRMAIL in the file /inc/login/TRACKREQUESTFRMSQL.ASP. An attacker can...

9.8CVSS8AI score0.00329EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/08 8:19 p.m.13 views

CVE-2025-61776

Dependency-Track is a component analysis platform that allows organizations to identify and reduce risk in the software supply chain. Prior to version 4.13.5, Dependency-Track may send credentials meant for a private NuGet repository to api.nuget.org via the HTTP Authorization header, and may...

4.7CVSS6.9AI score0.0026EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/07 7:15 p.m.7 views

CVE-2025-61776

Dependency-Track is a component analysis platform that allows organizations to identify and reduce risk in the software supply chain. Prior to version 4.13.5, Dependency-Track may send credentials meant for a private NuGet repository to api.nuget.org via the HTTP Authorization header, and may...

4.7CVSS0.0026EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 6:57 p.m.5 views

EUVD-2025-32901

Dependency-Track is a component analysis platform that allows organizations to identify and reduce risk in the software supply chain. Prior to version 4.13.5, Dependency-Track may send credentials meant for a private NuGet repository to api.nuget.org via the HTTP Authorization header, and may...

4.7CVSS6.5AI score0.0026EPSS
SaveExploits0References2
CVE
CVE
added 2025/10/07 6:57 p.m.16 views

CVE-2025-61776

Dependency-Track prior to version 4.13.5 is affected by a credential leakage vulnerability where credentials intended for a private NuGet repository can be sent to api.nuget.org via the HTTP Authorization header, and names/versions of internal components can be disclosed to api.nuget.org. This sc...

4.7CVSS6.6AI score0.0026EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/07 6:57 p.m.6 views

CVE-2025-61776 Dependency-Track possibly discloses private NuGet repository credentials to api.nuget.org

Dependency-Track is a component analysis platform that allows organizations to identify and reduce risk in the software supply chain. Prior to version 4.13.5, Dependency-Track may send credentials meant for a private NuGet repository to api.nuget.org via the HTTP Authorization header, and may...

4.7CVSS6.9AI score0.0026EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/10/07 6:57 p.m.12 views

CVE-2025-61776 Dependency-Track possibly discloses private NuGet repository credentials to api.nuget.org

Dependency-Track is a component analysis platform that allows organizations to identify and reduce risk in the software supply chain. Prior to version 4.13.5, Dependency-Track may send credentials meant for a private NuGet repository to api.nuget.org via the HTTP Authorization header, and may...

4.7CVSS0.0026EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2007-2811

Malware in sbrugna...

4.3CVSS6.4AI score0.01169EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2018-9237

Malware in sbrugna...

7.1CVSS5.9AI score0.00309EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2010-1535

Malware in sbrugna...

9.3CVSS6.1AI score0.05539EPSS
SaveExploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2019-2394

Malware in sbrugna...

10CVSS9.2AI score0.00907EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2015-1396

Malware in sbrugna...

6.8CVSS9.3AI score0.01452EPSS
SaveExploits0References15
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2015-5605

Malware in sbrugna...

5.8CVSS6.4AI score0.00593EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2021-1823

Malware in sbrugna...

6.5CVSS5.5AI score0.02587EPSS
SaveExploits1References16
Rows per page
Query Builder