Lucene search
+L

6532 matches found

Positive Technologies
Positive Technologies
added 2025/08/29 12:0 a.m.8 views

PT-2025-35397

CVE-2025-58328 - Apache HTTP Server Unvalidated User Input CVE ID : CVE-2025-58328 Published : Aug. 29, 2025, 3:15 a.m. | 3 hours, 29 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

6.6AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/08/29 12:0 a.m.5 views

PT-2025-35399

CVE-2025-58330 - Apache HTTP Server Unvalidated User Input CVE ID : CVE-2025-58330 Published : Aug. 29, 2025, 3:15 a.m. | 3 hours, 29 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

6.6AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/08/29 12:0 a.m.6 views

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, related to an unvalidated return value, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to unvalidated return values. Exploiting these vulnerabilities can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

7.5CVSS6.6AI score0.00351EPSS
SaveExploits0References23Affected Software6
OSV
OSV
added 2025/08/28 5:22 p.m.11 views

USN-7723-1 udisks2 vulnerability

Michael Imfeld discovered that UDisks did not check the validity of input data correctly when handling files for loop devices. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code...

8.5CVSS5.9AI score0.00653EPSS
SaveExploits1References2
NVD
NVD
added 2025/08/28 2:15 p.m.7 views

CVE-2025-51969

A SQL Injection vulnerability exists in the product.php page of PuneethReddyHC Online Shopping System Advanced 1.0. This flaw is present in the productid GET parameter, which is not properly validated before being included in a SQL statement...

6.5CVSS0.00244EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/08/28 12:0 a.m.6 views

Apartment Management System add_owner_utility.php File SQL Injection Vulnerability

Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in parameter ID in file /ownerutility/addownerutility.php. An attacker can exploit...

9.8CVSS7.9AI score0.00421EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/08/28 12:0 a.m.7 views

Apartment Management System add_maintenance_cost.php File SQL Injection Vulnerability

Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements for parameter ID in file /maintenance/addmaintenancecost.php. An attacker can exploit thi...

9.8CVSS7.9AI score0.00525EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/08/28 12:0 a.m.7 views

PuneethReddyHc Online Shopping System Advanced 安全漏洞

PuneethReddyHc Online Shopping System Advanced is an open source online shopping system by the individual developers of Puneeth Reddy HC in India. A security vulnerability exists in PuneethReddyHC Online Shopping System Advanced version 1.0, which stems from an unvalidated productid parameter and...

6.5CVSS7.7AI score0.00244EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/08/27 12:0 a.m.7 views

AbanteCart 安全漏洞

AbanteCart is an open source e-commerce platform by AbanteCart. A security vulnerability exists in AbanteCart version 1.4.2, which stems from an unvalidated tmplid parameter in index.php, which could lead to a SQL injection attack...

9.8CVSS7.5AI score0.00451EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2019-14193

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated length at nfsreadlinkreply, in the if block after...

9.8CVSS7.4AI score0.0257EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2020-8559

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Kubernetes kube-apiserver in versions v1.6-v1.15, and versions prior to v1.16.13, v1.17.9 and v1.18.6 are vulnerable to an unvalidated redirect on proxied...

6.8CVSS6.7AI score0.061EPSS
SaveExploits3References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2019-18888

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Symfony 2.8.0 through 2.8.50, 3.4.0 through 3.4.34, 4.2.0 through 4.2.11, and 4.3.0 through 4.3.7. If an application passes unvalidat...

7.5CVSS7.3AI score0.02248EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/08/27 12:0 a.m.10 views

Dell ThinOS 10 安全漏洞

DELL ThinOS 10 is a next-generation thin client operating system from Dell designed for virtual desktop infrastructure VDI to improve security, efficiency and user experience. DELL ThinOS 10 suffers from an unauthorized access vulnerability that stems from unvalidated ownership, which can be...

7.8CVSS6.7AI score0.00127EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2021-26955

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because xcb::xproto::GetAtomNameReply::name calls...

9.8CVSS8.2AI score0.01728EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2020-14983

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled numplayers value, leading to a buffer overflow. A malicious user c...

9.8CVSS7.3AI score0.02245EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2017-17524

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - library/wwwbrowser.pl in SWI-Prolog 7.2.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allo...

8.8CVSS7.2AI score0.0122EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/08/26 2:26 p.m.14 views

CVE-2025-6366 Event List <= 2.0.4 - Authenticated (Subscriber+) Privilege Escalation

The Event List plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.0.4. This is due to the plugin not properly validating a user's capabilities prior to updating their profile in the elupdateprofile function. This makes it possible for authenticated...

8.8CVSS0.00304EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/08/25 12:0 a.m.6 views

PHPGurukul Hospital Management System 安全漏洞

Hospital Management System is a PHP and MySQL based hospital management system. Hospital Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the docname parameter of add-doctor.php. No details of the...

9.8CVSS8AI score0.00437EPSS
SaveExploits0References3
Talos
Talos
added 2025/08/25 12:0 a.m.11 views

The Biosig Project libbiosig MFER unvalidated length stack-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2025-2234 The Biosig Project libbiosig MFER unvalidated length stack-based buffer overflow vulnerability August 25, 2025 CVE Number...

9.8CVSS7.7AI score0.00713EPSS
SaveExploits15
BDU FSTEC
BDU FSTEC
added 2025/08/25 12:0 a.m.7 views

The vulnerability of the blk_mq_alloc_request_hctx() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the blkmqallocrequesthctx function in the Linux operating system is related to unvalidated array indexing. Exploitation of this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS6.7AI score0.00297EPSS
SaveExploits0References10Affected Software8
Rows per page
Query Builder