Lucene search
+L

5376 matches found

CNNVD
CNNVD
added 2025/09/29 12:0 a.m.8 views

Esri Portal For ArcGIS 输入验证错误漏洞

Esri Portal For ArcGIS is a component of Esri that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. An input validation error vulnerability exists in Esri Portal for ArcGIS version 11.4 and earlier, which stems from an...

6.1CVSS6.6AI score0.0023EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/29 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-56648

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - npm parcel 2.0.0-alpha and before has an Origin Validation Error vulnerability. Malicious websites can send XMLHTTPRequests to the application's development...

6.5CVSS5.5AI score0.0022EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/09/29 12:0 a.m.7 views

Esri Portal For ArcGIS 输入验证错误漏洞

Esri Portal For ArcGIS is a component of Esri that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. An input validation error vulnerability exists in Esri Portal for ArcGIS version 11.4 and earlier, which stems from the presence ...

6.1CVSS6.7AI score0.0023EPSS
SaveExploits0References2
CNVD
CNVD
added 2025/09/28 12:0 a.m.3 views

NVIDIA CUDA toolkit input validation error vulnerability

NVIDIA CUDA Toolkit is a development software application for creating high-performance GPU-accelerated applications from NVIDIA. The NVIDIA CUDA Toolkit suffers from an input validation error vulnerability that could be exploited by an attacker to cause a denial of service...

5.5CVSS6.4AI score0.00171EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/24 12:0 a.m.7 views

Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets that stems from a memory corruption when processing data sent by the FE driver...

7.8CVSS6.9AI score0.00081EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/09/24 12:0 a.m.4 views

NVIDIA CUDA toolkit 输入验证错误漏洞

NVIDIA CUDA Toolkit is a development software application for creating high-performance GPU-accelerated applications from NVIDIA. The NVIDIA CUDA Toolkit suffers from an input validation error vulnerability that could be exploited by an attacker to cause a denial of service...

5.5CVSS6.6AI score0.00171EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/09/23 12:0 a.m.10 views

AMD Instinct MI300X accelerators 安全漏洞

AMD Instinct MI300X accelerators is a data center-grade GPU accelerator card from Ultraviolet Semiconductor AMD. A security vulnerability exists in AMD Instinct MI300X accelerators that stems from improper input validation and could allow a privileged attacker to delete local root directory files...

5CVSS6.4AI score0.002EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/22 12:0 a.m.7 views

WordPress plugin WP Gravity Forms Keap/Infusionsoft 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. An input...

4.7CVSS6.5AI score0.00261EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/22 12:0 a.m.4 views

Artifex Ghostscript 输入验证错误漏洞

Artifex Ghostscript is the United States Artifex company's set of Adobe-based, PostScript and portable document format page description language and compiled into the free software. A heap buffer overflow vulnerability exists in the Artifex Ghostscript ocrbeginpage function, which can be exploite...

5.5CVSS6.3AI score0.00166EPSS
SaveExploits0References3
SUSE Linux
SUSE Linux
added 2025/09/19 5:44 p.m.3 views

Security update for cmake

This update for cmake fixes the following issues: CVE-2025-9301: Fixed assertion failure due to improper validation bsc1248461 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...

4.6CVSS4.3AI score0.00146EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/09/19 12:29 a.m.20 views

CVE-2025-56648

npm parcel 2.0.0-alpha and before has an Origin Validation Error vulnerability. Malicious websites can send XMLHTTPRequests to the application's development server and read the response to steal source code when developers visit them. Mitigation Mitigation for this issue is either not available o...

6.5CVSS6.5AI score0.0022EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/09/19 12:0 a.m.5 views

PUSULA Manageable Email Sending System 输入验证错误漏洞

PUSULA Manageable Email Sending System is an email sending management system from the Turkish company PUSULA. An input validation error vulnerability exists in PUSULA Manageable Email Sending System versions 2025.06 and earlier and 2025.08.06 and earlier, which stems from the presence of an open...

4.7CVSS6.5AI score0.00211EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/09/19 12:0 a.m.6 views

NVIDIA Triton Inference Server Input Validation Error Vulnerability (CNVD-2025-23136)

NVIDIA Triton Inference Server is an open source software from NVIDIA that helps standardize model deployment and deliver fast and scalable AI in production. NVIDIA Triton Inference Server suffers from an input validation error vulnerability that stems from an improper input validation issue in t...

9.8CVSS7.5AI score0.00417EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/09/18 12:0 a.m.62 views

Mattermost Input Validation Error Vulnerability (CNVD-2025-22091)

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an input validation error vulnerability that stems from an unvalidated redirectto parameter, which can be exploited by an attacker to cause theft of a user's cookie via a...

7.6CVSS6.4AI score0.00161EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/18 12:0 a.m.7 views

Dover Fueling Solutions多款产品 输入验证错误漏洞

Dover Fueling Solutions MAGLINK LX Console and more are products from Dover Fueling Solutions.The Dover Fueling Solutions MAGLINK LX Console is an integrated console for fuel stations and oil distribution. This console is designed to help manage the various operations of a fuel station, including...

8.8CVSS6.6AI score0.00368EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2025/09/17 9:30 p.m.16 views

Parcel has an Origin Validation Error vulnerability

parcel versions 1.6.1 and above have an Origin Validation Error vulnerability. Malicious websites can send XMLHTTPRequests to the application's development server and read the response to steal source code when developers visit them. Version 2.16.4 supports a --no-cors option which disables CORS...

6.5CVSS5.9AI score0.0022EPSS
SaveExploits1References8Affected Software1
OSV
OSV
added 2025/09/17 9:30 p.m.7 views

GHSA-QM9P-F9J5-W83W Parcel has an Origin Validation Error vulnerability

parcel versions 1.6.1 and above have an Origin Validation Error vulnerability. Malicious websites can send XMLHTTPRequests to the application's development server and read the response to steal source code when developers visit them. Version 2.16.4 supports a --no-cors option which disables CORS...

6.5CVSS5.9AI score0.0022EPSS
SaveExploits1References8
Snyk
Snyk
added 2025/09/17 7:43 p.m.4 views

Origin Validation Error

Overview @parcel/reporter-dev-server is a Blazing fast, zero configuration web application bundler Affected versions of this package are vulnerable to Origin Validation Error via improper origin validation in the development server. An attacker can access source code by tricking a developer into...

6.5CVSS6.5AI score0.0022EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/09/17 12:0 a.m.18 views

CVE-2025-56648

npm parcel 2.0.0-alpha and before has an Origin Validation Error vulnerability. Malicious websites can send XMLHTTPRequests to the application's development server and read the response to steal source code when developers visit them...

0.0022EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/09/17 12:0 a.m.9 views

NVIDIA Triton Inference Server 输入验证错误漏洞

NVIDIA Triton Inference Server is an open source software from NVIDIA that helps standardize model deployment and deliver fast and scalable AI in production. NVIDIA Triton Inference Server suffers from an input validation error vulnerability that originates from loading a misconfigured model, whi...

7.5CVSS6.6AI score0.00322EPSS
SaveExploits0References1
Rows per page
Query Builder