Lucene search
+L

7129 matches found

CNVD
CNVD
added 2025/08/20 12:00 a.m.57 views

WellChoose Organization Portal System SQL Injection Vulnerability

WellChoose Organization Portal System is an electronic directory service system from WellChoose in Taiwan, China. The WellChoose Organization Portal System suffers from a SQL injection vulnerability that arises from the application's lack of validation of externally entered SQL statements. The...

7.5CVSS8.3AI score0.0039EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/08/20 12:00 a.m.9 views

PT-2025-34329 · Undefined · Undefined

CVE-2025-57742 - Apache HTTP Server Unvalidated User Input CVE ID : CVE-2025-57742 Published : Aug. 20, 2025, 4:16 a.m. | 3 hours, 59 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

7.2AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/08/20 12:00 a.m.11 views

PT-2025-34336 · Undefined · Undefined

CVE-2025-57745 - Cisco Router Unvalidated Input CVE ID : CVE-2025-57745 Published : Aug. 20, 2025, 4:16 a.m. | 3 hours, 58 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

7.3AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/08/20 12:00 a.m.8 views

PT-2025-34338 · Undefined · Undefined

CVE-2025-57747 - Apache HTTP Server Unvalidated User Input CVE ID : CVE-2025-57747 Published : Aug. 20, 2025, 4:16 a.m. | 3 hours, 58 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

7.2AI score
SaveExploits0References1
CNVD
CNVD
added 2025/08/20 12:00 a.m.13 views

Job Diary edit-details.php file SQL Injection Vulnerability

Job Diary is a job diary software. Job Diary suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter ID in the file /edit-details.php. An attacker can exploit this vulnerability to execute illegal SQL commands to stea...

9.8CVSS8.3AI score0.0044EPSS
SaveExploits1References1
NVD
NVD
added 2025/08/19 7:15 p.m.12 views

CVE-2025-55735

flaskBlog is a blog app built with Flask. In 2.8.0 and earlier, when creating a post, there's no validation of the content of the post stored in the variable "postContent". The vulnerability arises when displaying the content of the post using the | safe filter, that tells the engine to not escap...

5.4CVSS0.00211EPSS
SaveExploits1References1
CVE
CVE
added 2025/08/19 6:56 p.m.38 views

CVE-2025-55735

CVE-2025-55735 affects flaskBlog (Python/Flask) up to version 2.8.0. The stored XSS vulnerability arises from unvalidated postContent content rendered with the Jinja2 | safe filter in template/routes.html, which disables escaping. Impact is stored XSS within post content. Remediation: upgrade fla...

5.4CVSS6.2AI score0.00211EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/08/19 12:00 a.m.12 views

PT-2025-33829 · Undefined · Undefined

CVE-2025-57717 - Apache HTTP Server Unvalidated User Input CVE ID : CVE-2025-57717 Published : Aug. 19, 2025, 3:15 a.m. | 57 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

7.2AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/08/19 12:00 a.m.15 views

PT-2025-33831 · Undefined · Undefined

CVE-2025-57719 - Apache HTTP Server Unvalidated User Input CVE ID : CVE-2025-57719 Published : Aug. 19, 2025, 3:15 a.m. | 57 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

7.2AI score
SaveExploits0References1
CNNVD
CNNVD
added 2025/08/19 12:00 a.m.10 views

FlaskBlog 安全漏洞

FlaskBlog is a simple blogging application built using Flask by Doğukan Ürker Personal Developer. A security vulnerability exists in FlaskBlog 2.8.0 and earlier versions, which stems from unvalidated post content that could lead to stored cross-site scripting...

5.4CVSS6.2AI score0.00211EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/08/19 12:00 a.m.11 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an unvalidated feature-report field count that could lead to a null pointer dereference...

5.5CVSS6.4AI score0.0016EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/08/19 12:00 a.m.25 views

PT-2025-33832 · Undefined · Undefined

CVE-2025-57720 - Apache HTTP Server Unvalidated User Input CVE ID : CVE-2025-57720 Published : Aug. 19, 2025, 3:15 a.m. | 57 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

7.2AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/18 11:27 a.m.12 views

CVE-2025-8105

The The Soledad theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 8.6.7. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possible for...

7.3CVSS7.9AI score0.00341EPSS
SaveExploits0References1
Veracode
Veracode
added 2025/08/18 8:34 a.m.12 views

Denial Of Service (DoS)

OpenEXR is vulnerable to denial of service DoS. The vulnerability is due to improper input validation due to trusting unvalidated dataWindow size values from file headers, leading to excessive memory allocation and performance degradation...

5.5CVSS5.9AI score0.00259EPSS
SaveExploits1References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2019-14863

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a vulnerability in all angular versions before 1.5.0-beta.0, where after escaping the context of the web application, the web application delivers data...

7.1CVSS6.7AI score0.01382EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2019-20425

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds access and panic due to the lack of validation for specific fields of packets se...

7.8CVSS7.1AI score0.01896EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/08/17 11:11 p.m.21 views

CVE-2025-52621

HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning. The BigFix SaaS's HTTP responses were observed to include the Origin header. Its presence alongside an unvalidated reflection of the Origin header value introduces a potential for cache poisoning...

5.3CVSS7.2AI score0.00154EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/08/16 12:00 a.m.13 views

PT-2025-33590 · WordPress · Soledad Wordpress Theme

Name of the Vulnerable Software and Affected Versions: Soledad WordPress Theme versions prior to 8.6.8 Description: The Soledad theme for WordPress is susceptible to arbitrary shortcode execution. This occurs because the software does not properly validate a value before running do shortcode,...

7.3CVSS7.4AI score0.00341EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/08/16 12:00 a.m.13 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an unvalidated receive buffer size that could result in a buffer error...

7.8CVSS8.3AI score0.00166EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2025/08/16 12:00 a.m.10 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unvalidated command request size that could lead to out-of-bounds reads...

5.5CVSS6.4AI score0.00299EPSS
SaveExploits0References5
Rows per page
Query Builder