Lucene search
+L

7137 matches found

BDU FSTEC
BDU FSTEC
added 2025/08/25 12:00 a.m.8 views

The vulnerability of the blk_mq_alloc_request_hctx() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the blkmqallocrequesthctx function in the Linux operating system is related to unvalidated array indexing. Exploitation of this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS6.7AI score0.00297EPSS
SaveExploits0References10Affected Software8
CNNVD
CNNVD
added 2025/08/25 12:00 a.m.8 views

PHPGurukul Hospital Management System 安全漏洞

Hospital Management System is a PHP and MySQL based hospital management system. Hospital Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the docname parameter of add-doctor.php. No details of the...

9.8CVSS8AI score0.00433EPSS
SaveExploits0References3
Talos
Talos
added 2025/08/25 12:00 a.m.15 views

The Biosig Project libbiosig MFER unvalidated length stack-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2025-2234 The Biosig Project libbiosig MFER unvalidated length stack-based buffer overflow vulnerability August 25, 2025 CVE Number...

9.8CVSS6.3AI score0.00706EPSS
SaveExploits4
RedhatCVE
RedhatCVE
added 2025/08/24 12:13 a.m.12 views

CVE-2025-51092

The LogIn-SignUp project by VishnuSivadasVS is vulnerable to SQL Injection due to unsafe construction of SQL queries in DataBase.php. The functions logIn and signUp build queries by directly concatenating user input and unvalidated table names without using prepared statements. While a prepareDat...

9.8CVSS8.7AI score0.00409EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/08/23 12:00 a.m.14 views

PT-2025-34604 · Undefined · Undefined

CVE-2025-58035 - Apache HTTP Server Unvalidated User Input CVE ID : CVE-2025-58035 Published : Aug. 23, 2025, 3:15 a.m. | 1 hour, 3 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

7.2AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/08/23 12:00 a.m.9 views

PT-2025-34594 · Undefined · Undefined

CVE-2025-24469 - Apache HTTP Server Unvalidated User Input CVE ID : CVE-2025-24469 Published : Aug. 23, 2025, 3:15 a.m. | 1 hour, 3 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

7.2AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/08/23 12:00 a.m.10 views

PT-2025-34584 · Undefined · Undefined

CVE-2025-22860 - Norton Antivirus Unvalidated Redirect to Arbitrary URL CVE ID : CVE-2025-22860 Published : Aug. 23, 2025, 3:15 a.m. | 1 hour, 3 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timelin...

7.2AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/08/23 12:00 a.m.8 views

PT-2025-34649 · Undefined · Undefined

CVE-2025-58036 - Apache HTTP Server Unvalidated User Input CVE ID : CVE-2025-58036 Published : Aug. 23, 2025, 3:15 a.m. | 1 hour, 3 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

7.2AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/08/23 12:00 a.m.7 views

PT-2025-34696 · Undefined · Undefined

CVE-2025-58043 - Apache HTTP Server Unvalidated User Input CVE ID : CVE-2025-58043 Published : Aug. 23, 2025, 3:15 a.m. | 1 hour, 3 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

7.2AI score
SaveExploits0References1
NVD
NVD
added 2025/08/22 7:15 p.m.9 views

CVE-2025-51092

The LogIn-SignUp project by VishnuSivadasVS is vulnerable to SQL Injection due to unsafe construction of SQL queries in DataBase.php. The functions logIn and signUp build queries by directly concatenating user input and unvalidated table names without using prepared statements. While a prepareDat...

9.8CVSS0.00409EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/22 3:18 p.m.5 views

CVE-2025-53363 Dpanel has an arbitrary file read vulnerability

dpanel is an open source server management panel written in Go. In versions 1.2.0 through 1.7.2, dpanel allows authenticated users to read arbitrary files from the server via the /api/app/compose/get-from-uri API endpoint. The vulnerability exists in the GetFromUri function in...

6.1CVSS6.4AI score0.00465EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/08/22 12:00 a.m.9 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an unvalidated file type that could result in a file system error...

5.5CVSS8AI score0.00174EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
added 2025/08/22 12:00 a.m.5 views

CVE-2025-51092

The LogIn-SignUp project by VishnuSivadasVS is vulnerable to SQL Injection due to unsafe construction of SQL queries in DataBase.php. The functions logIn and signUp build queries by directly concatenating user input and unvalidated table names without using prepared statements. While a prepareDat...

8.6AI score0.00409EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/22 12:00 a.m.42 views

CVE-2025-51092

The CVE-2025-51092 entry concerns the LogIn-SignUp project by VishnuSivadasVS. The underlying issue is SQL Injection due to unsafe SQL query construction in DataBase.php: logIn() and signUp() concatenate user input and unvalidated table names instead of using prepared statements. Although a prepa...

9.8CVSS8.3AI score0.00409EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/08/22 12:00 a.m.23 views

CVE-2025-51092

The LogIn-SignUp project by VishnuSivadasVS is vulnerable to SQL Injection due to unsafe construction of SQL queries in DataBase.php. The functions logIn and signUp build queries by directly concatenating user input and unvalidated table names without using prepared statements. While a prepareDat...

0.00409EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/21 8:15 p.m.20 views

CVE-2010-20119

CommuniCrypt Mail versions up to and including 1.16 contains a stack-based buffer overflow vulnerability in its ANSMTP.dll and AOSMTP.dll ActiveX controls, specifically within the AddAttachments method. This method fails to properly validate the length of input strings, allowing data to exceed th...

8.6CVSS0.0113EPSS
SaveExploits1References6
OSV
OSV
added 2025/08/21 8:11 p.m.9 views

GHSA-9GJJ-6GJ7-C4WJ Denial-of-Service attack in pyLoad CNL Blueprint using dukpy.evaljs

Dear Maintainers, I am writing to you on behalf of the Tencent AI Sec. We have identified a potential vulnerability in one of your products and would like to report it to you for further investigation and mitigation. Summary The jk parameter is received in pyLoad CNL Blueprint. Due to the lack of...

8.7CVSS7.1AI score0.00325EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2025/08/21 6:31 p.m.16 views

Mattermost has Potential Server Crash due to Unvalidated Import Data

Mattermost versions 10.8.x = 10.8.3, 10.5.x = 10.5.8, 9.11.x = 9.11.17, 10.10.x = 10.10.0, 10.9.x = 10.9.3 fail to validate import data which allows a system admin to crash the server via the bulk import feature...

4.9CVSS7AI score0.00321EPSS
SaveExploits0References4Affected Software4
Positive Technologies
Positive Technologies
added 2025/08/21 12:00 a.m.10 views

PT-2025-34538 · Undefined · Undefined

CVE-2025-57832 - Apache HTTP Server Unvalidated User Input CVE ID : CVE-2025-57832 Published : Aug. 21, 2025, 4:16 a.m. | 3 hours, 59 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

7.2AI score
SaveExploits0References1
CNNVD
CNNVD
added 2025/08/21 12:00 a.m.14 views

CommuniCrypt Mail 安全漏洞

CommuniCrypt Mail is an encrypted email client from CommuniCrypt. A security vulnerability exists in CommuniCrypt Mail 1.16 and earlier versions, which stems from an unvalidated input length in the AddAttachments method of the ANSMTP.dll and AOSMTP.dll ActiveX controls, which may result in a stac...

8.6CVSS7AI score0.0113EPSS
SaveExploits1References7
Rows per page
Query Builder