Lucene search
+L

662 matches found

CNVD
CNVD
added 2025/04/25 12:0 a.m.5 views

Google Chrome OS Information Disclosure Vulnerability (CNVD-2025-09152)

Google Chrome OS is a lightweight, open source, web-based operating system from Google. Google Chrome OS suffers from an information disclosure vulnerability that stems from a failure to properly tunnel DNS traffic during VPN state transitions, for which no detailed vulnerability details are...

7.5CVSS6.1AI score0.00192EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/16 11:6 p.m.80 views

CVE-2025-1566

CVE-2025-1566 affects Google ChromeOS, specifically the Native System VPN in the Dev Channel. The root cause is a failure to properly tunnel DNS traffic during VPN state transitions, enabling network observers to expose plaintext DNS queries. Reported in ChromeOS/Kubernetes-related advisories, wi...

7.5CVSS7.5AI score0.00192EPSS
SaveExploits0References2Affected Software1
Akamai Blog
Akamai Blog
added 2025/04/11 1:0 p.m.12 views

Cloud Migration Strategy: The Step-By-Step Framework and Benefits

...

7.3AI score
SaveExploits0
Citrix
Citrix
added 2025/04/08 12:0 a.m.12 views

OnPrem | CVAD 1912 upgrade throws an error "The license server doesn't support the hosting network"

During CVAD upgrade from 1912 version to 2203 CU3 version, we receive the error "The license server doesn't support the hosting network" and upgrade fails...

7.1AI score
SaveExploits0
OSV
OSV
added 2025/03/27 3:15 p.m.10 views

DEBIAN-CVE-2025-21892

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix the recovery flow of the UMR QP This patch addresses an issue in the recovery flow of the UMR QP, ensuring tasks do not get stuck, as highlighted by the call trace 1. During recovery, before transitioning the QP to...

4.7CVSS5.5AI score0.00127EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/03/26 2:33 p.m.8 views

CVE-2025-30606

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Logan Carlile Easy Page Transition easy-page-transition allows Stored XSS.This issue affects Easy Page Transition: from n/a through = 1.0.1...

5.9CVSS7.2AI score0.00266EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/24 2:15 p.m.19 views

CVE-2025-30606

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Logan Carlile Easy Page Transition easy-page-transition allows Stored XSS.This issue affects Easy Page Transition: from n/a through = 1.0.1...

5.9CVSS0.00266EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/03/24 1:51 p.m.7 views

WordPress Easy Page Transition plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nabil Irawan in WordPress Plugin Easy Page Transition versions = 1.0.1...

5.9CVSS5.8AI score0.00266EPSS
SaveExploits0Affected Software1
Cvelist
Cvelist
added 2025/03/24 1:47 p.m.22 views

CVE-2025-30606 WordPress Easy Page Transition plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Logan Carlile Easy Page Transition easy-page-transition allows Stored XSS.This issue affects Easy Page Transition: from n/a through = 1.0.1...

5.9CVSS0.00266EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/24 1:47 p.m.8 views

CVE-2025-30606 WordPress Easy Page Transition plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Logan Carlile Easy Page Transition easy-page-transition allows Stored XSS.This issue affects Easy Page Transition: from n/a through = 1.0.1...

5.9CVSS7.3AI score0.00266EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/24 1:47 p.m.64 views

CVE-2025-30606

CVE-2025-30606 affects the WordPress plugin Easy Page Transition (v1.0.1 and earlier). The vulnerability is an authenticated, stored Cross-Site Scripting issue (Stored XSS) due to improper handling in page generation. It is currently Unpatched per the Wordfence vulnerability listing, with CVSS 4....

5.9CVSS7.2AI score0.00266EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/24 12:0 a.m.6 views

WordPress plugin Easy Page Transition 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS7.8AI score0.00266EPSS
SaveExploits0References2
NVD
NVD
added 2025/03/04 2:15 p.m.11 views

CVE-2025-1939

Android apps can load web pages using the Custom Tabs feature. This feature supports a transition animation that could have been used to trick a user into granting sensitive permissions by hiding what the user was actually clicking. This vulnerability was fixed in Firefox 136...

3.9CVSS0.00175EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
added 2025/03/04 2:15 p.m.9 views

CVE-2025-1939

Android apps can load web pages using the Custom Tabs feature. This feature supports a transition animation that could have been used to trick a user into granting sensitive permissions by hiding what the user was actually clicking. This vulnerability affects Firefox 136...

3.9CVSS6AI score0.00175EPSS
SaveExploits0References3
CVE
CVE
added 2025/03/04 1:31 p.m.96 views

CVE-2025-1939

CVE-2025-1939 is an Android/Firefox-related issue where the Custom Tabs transition animation could be leveraged to mislead users into granting sensitive permissions by obscuring what they click. The vulnerability explicitly affects Mozilla Firefox versions older than 136.0. Impact concerns includ...

3.9CVSS7.2AI score0.00175EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2025/03/03 12:0 a.m.6 views

PT-2025-18426

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock vulnerability has been identified in the Linux kernel, specifically in the hibernate compressor param set function. This issue arises when attempting to acquire the system...

5.5CVSS6.6AI score0.00128EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2025/02/27 3:10 a.m.4 views

SUSE CVE-2022-49219

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: fix memory leak during D3hot to D0 transition If 'vfiopcicoredevice::needspmrestore' is set PCI device does not have NoSoftReset bit set in its PMCSR config register, then the current PCI state will be saved locally in...

5.5CVSS6.6AI score0.00253EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2025/02/27 3:6 a.m.4 views

SUSE CVE-2022-49446

In the Linux kernel, the following vulnerability has been resolved: nvdimm: Fix firmware activation deadlock scenarios Lockdep reports the following deadlock scenarios for CXL root device power-management, deviceprepare, operations, and deviceshutdown operations for 'ndregion' devices: Chain exis...

5.5CVSS7.8AI score0.00191EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2025/02/27 3:5 a.m.5 views

SUSE CVE-2022-49543

In the Linux kernel, the following vulnerability has been resolved: ath11k: fix the warning of devwake in mhipmdisabletransition When test device recovery with below command, it has warning in message as below. echo assert /sys/kernel/debug/ath11k/wcn6855\ hw2.0/simulatefwcrash echo assert...

5.5CVSS6.8AI score0.00245EPSS
SaveExploits0References5
OSV
OSV
added 2025/02/26 7:1 a.m.7 views

UBUNTU-CVE-2022-49446

In the Linux kernel, the following vulnerability has been resolved: nvdimm: Fix firmware activation deadlock scenarios Lockdep reports the following deadlock scenarios for CXL root device power-management, deviceprepare, operations, and deviceshutdown operations for 'ndregion' devices: Chain exis...

5.5CVSS6.2AI score0.00191EPSS
SaveExploits0References8
Rows per page
Query Builder