Lucene search
+L

7030 matches found

CNNVD
CNNVD
added 2025/05/10 12:00 a.m.12 views

Discord 代码问题漏洞

Discord is a free chat service from Discord Inc. A code issue vulnerability exists in Discord version 1.0.9188, which stems from an uncontrolled search path in the library WINSTA.dll...

7.8CVSS7AI score0.0032EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2025/05/09 12:31 p.m.21 views

Apache Commons Configuration Uncontrolled Resource Consumption

Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x. There are a number of issues in Apache Commons Configuration 1.x that allow excessive resource consumption when loading untrusted configurations or using unexpected usage patterns. The Apache Commons Configuratio...

6.5CVSS6.8AI score0.01975EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2025/05/09 3:15 a.m.14 views

CVE-2025-4455

A vulnerability was found in Patch My PC Home Updater up to 5.1.3.0. It has been rated as critical. This issue affects some unknown processing in the library...

7.3CVSS0.0027EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/05/09 2:31 a.m.12 views

CVE-2025-4455 Patch My PC Home Updater System.IO uncontrolled search path

A vulnerability was found in Patch My PC Home Updater up to 5.1.3.0. It has been rated as critical. This issue affects some unknown processing in the library...

7.3CVSS6.8AI score0.0027EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/05/09 2:31 a.m.57 views

CVE-2025-4455 Patch My PC Home Updater System.IO uncontrolled search path

A vulnerability was found in Patch My PC Home Updater up to 5.1.3.0. It has been rated as critical. This issue affects some unknown processing in the library...

7.3CVSS0.0027EPSS
SaveExploits0References4
CVE
CVE
added 2025/05/09 2:31 a.m.77 views

CVE-2025-4455

CVE-2025-4455 affects Patch My PC Home Updater (versions up to 5.1.3.0). The issue is an uncontrolled search path (DLL search path manipulation) impacting multiple system DLLs (advapi32.dll, BCrypt.dll, comctl32.dll, crypt32.dll, dwmapi.dll, gdi32.dll, gdiplus.dll, imm32.dll, iphlpapi.dll, kernel...

7.3CVSS6.5AI score0.0027EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/05/09 12:00 a.m.17 views

PT-2025-20458 · Microsoft +2 · Comctl32.Dll +21

Name of the Vulnerable Software and Affected Versions: Patch My PC Home Updater versions up to 5.1.3.0 Description: A critical issue affects some unknown processing in various system libraries, including advapi32.dll, BCrypt.dll, comctl32.dll, crypt32.dll, dwmapi.dll, gdi32.dll, gdiplus.dll,...

7.3CVSS6.7AI score0.0027EPSS
SaveExploits0References13
Ubuntu
Ubuntu
added 2025/05/07 3:51 p.m.24 views

USN-7502-1: Horde Css Parser vulnerability

It was discovered that Horde Css Parser did not correctly handle parsing uncontrolled CSS data. An attacker could possibly use this issue to perform remote code execution. CVE-2020-13756...

9.8CVSS8.8AI score0.49797EPSS
SaveExploits4
OSV
OSV
added 2025/05/07 3:51 p.m.23 views

USN-7502-1 php-horde-css-parser vulnerability

It was discovered that Horde Css Parser did not correctly handle parsing uncontrolled CSS data. An attacker could possibly use this issue to perform remote code execution. CVE-2020-13756...

9.8CVSS6.1AI score0.49797EPSS
SaveExploits4References2
BDU FSTEC
BDU FSTEC
added 2025/05/06 12:00 a.m.22 views

The vulnerability of the server of the Zabbix universal monitoring system allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Zabbix universal monitoring system relates to the use of uncontrolled format strings in processing HttpRequest objects. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

9.1CVSS7.7AI score0.00945EPSS
SaveExploits0References9Affected Software3
NVD
NVD
added 2025/05/05 11:15 a.m.23 views

CVE-2025-4272

A vulnerability was found in Mechrevo Control Console 1.0.2.70. It has been rated as critical. Affected by this issue is some unknown functionality in the library C:\Program Files\OEM\MECHREVO Control Center\UniwillService\MyControlCenter\csCAPI.dll of the component GCUService. The manipulation...

7.3CVSS0.00192EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2025/05/05 11:00 a.m.42 views

CVE-2025-4272 Mechrevo Control Console GCUService csCAPI.dll uncontrolled search path

A vulnerability was found in Mechrevo Control Console 1.0.2.70. It has been rated as critical. Affected by this issue is some unknown functionality in the library C:\Program Files\OEM\MECHREVO Control Center\UniwillService\MyControlCenter\csCAPI.dll of the component GCUService. The manipulation...

7.3CVSS0.00192EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/05/05 11:00 a.m.26 views

CVE-2025-4272 Mechrevo Control Console GCUService csCAPI.dll uncontrolled search path

A vulnerability was found in Mechrevo Control Console 1.0.2.70. It has been rated as critical. Affected by this issue is some unknown functionality in the library C:\Program Files\OEM\MECHREVO Control Center\UniwillService\MyControlCenter\csCAPI.dll of the component GCUService. The manipulation...

7.3CVSS6.9AI score0.00192EPSS
SaveExploits0References5
CVE
CVE
added 2025/05/05 11:00 a.m.79 views

CVE-2025-4272

CVE-2025-4272 affects Mechrevo Control Console 1.0.2.70; vulnerable component is the library csCAPI.dll under GCUService. Reported issue: uncontrolled search path leading to local exploitation. Documents consistently describe local attack requirements with high impact per CVSS vectors (local acce...

7.3CVSS6.9AI score0.00192EPSS
SaveExploits0References5
SUSE Linux
SUSE Linux
added 2025/05/05 7:43 a.m.5 views

Security update for libva

This update for libva fixes the following issues: Update to libva version 2.20.0, which includes security fix for: uncontrolled search path may allow an authenticated user to escalate privilege via local access CVE-2023-39929, bsc1224413, jscPED-11066 This includes latest version of one of the...

6.7CVSS7AI score0.00243EPSS
SaveExploits0References14
NVD
NVD
added 2025/05/05 3:15 a.m.33 views

CVE-2025-4259

A vulnerability has been found in newbee-mall 1.0 and classified as critical. Affected by this vulnerability is the function Upload of the file ltd/newbee/mall/controller/common/UploadController.java. The manipulation of the argument File leads to unrestricted upload. The attack can be launched...

9.8CVSS0.00488EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2025/05/05 12:00 a.m.12 views

The vulnerability of the multimedia platform GPAC, related to uncontrolled resource consumption, allows a violator to trigger a service failure.

The vulnerability of the multimedia platform GPAC is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a hacker to cause a service failure...

7.8CVSS6.6AI score0.00318EPSS
SaveExploits0References5Affected Software4
CNNVD
CNNVD
added 2025/05/05 12:00 a.m.11 views

Mechrevo Control Console 代码问题漏洞

Mechrevo Control Console is a computer console software from the Chinese company Mechrevo. A code issue vulnerability exists in Mechrevo Control Console version 1.0.2.70, which stems from an uncontrolled search path vulnerability in the library file csCAPI.dll...

7.3CVSS7AI score0.00192EPSS
SaveExploits0References6
OSV
OSV
added 2025/05/03 5:41 a.m.29 views

BIT-ELASTICSEARCH-2024-52979 Elasticsearch Uncontrolled Resource Consumption vulnerability

Uncontrolled Resource Consumption in Elasticsearch while evaluating specifically crafted search templates with Mustache functions can lead to Denial of Service by causing the Elasticsearch node to crash...

7.5CVSS6.3AI score0.00621EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2025/05/01 8:02 p.m.12 views

Security Bulletin: IBM Watson Speech Services Cartridge v4.8.8 is vulnerable to an uncontrolled resource consumption in Apache Commons IO [CVE-2024-47554]

Summary IBM Watson Speech Services Cartridge is vulnerable to an uncontrolled resource consumption in Apache Commons IO, due to a flaw in the org.apache.commons.io.input.XmlStreamReader class that may allow maliciously crafted input to excessively consume CPU resources while processing...

4.3CVSS6.3AI score0.01315EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder