Lucene search
+L

8572 matches found

Tenable Nessus
Tenable Nessus
•added 2025/08/15 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2024-27047

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - In the Linux kernel, the following vulnerability has been resolved: net: phy: fix phygetinternaldelay accessing an empty array The...

5.5CVSS5.7AI score0.00281EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•8 views

Malicious code in pick-some-values (npm)

The package pick-some-values was found to contain malicious code...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/08/14 6:52 p.m.•8 views

MAL-2025-34754 Malicious code in terser-module-csv-promise (npm)

The package terser-module-csv-promise was found to contain malicious code...

7.2AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/08/14 6:52 p.m.•8 views

MAL-2025-29225 Malicious code in pick-some-values (npm)

The package pick-some-values was found to contain malicious code...

7.2AI score
SaveExploits0
osv_azl
osv_azl
•added 2025/08/14 1:15 p.m.•25 views

AZL-66321 CVE-2025-8713 affecting package postgresql for versions less than 14.19-1

PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row security policy intended to hide. PostgreSQL maintains statistics for tables by sampling data available in columns; this...

3.1CVSS7.1AI score0.00236EPSS
SaveExploits0References1
osv_alpine
osv_alpine
•added 2025/08/14 1:15 p.m.•16 views

ALPINE-CVE-2025-8713

PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row security policy intended to hide. PostgreSQL maintains statistics for tables by sampling data available in columns; this...

3.1CVSS6.7AI score0.00236EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/08/14 1:15 p.m.•23 views

CVE-2025-8713

PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row security policy intended to hide. PostgreSQL maintains statistics for tables by sampling data available in columns; this...

7.8AI score
SaveExploits0References1
osv_debian
osv_debian
•added 2025/08/14 1:15 p.m.•11 views

DEBIAN-CVE-2025-8713

PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row security policy intended to hide. PostgreSQL maintains statistics for tables by sampling data available in columns; this...

3.1CVSS6AI score0.00236EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2025/08/14 1:15 p.m.•23 views

UBUNTU-CVE-2025-8713

PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row security policy intended to hide. PostgreSQL maintains statistics for tables by sampling data available in columns; this...

3.1CVSS7.1AI score0.00236EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/08/14 1:00 p.m.•11 views

CVE-2025-8713 PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table

PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row security policy intended to hide. PostgreSQL maintains statistics for tables by sampling data available in columns; this...

3.1CVSS7AI score0.00236EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2025/08/14 1:00 p.m.•26 views

CVE-2025-8713

PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row security policy intended to hide. PostgreSQL maintains statistics for tables by sampling data available in columns; this...

3.1CVSS6AI score0.00236EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/08/14 7:28 a.m.•17 views

CVE-2025-8767

The AnWP Football Leagues plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 0.16.17 via the 'downloadcsvplayers' and 'downloadcsvgames' functions. This makes it possible for authenticated attackers, with Administrator-level access and above, to embed...

4.8CVSS7.6AI score0.00307EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2025/08/14 2:53 a.m.•15 views

SUSE CVE-2025-55005

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-1, when preparing to transform from Log to sRGB colorspaces, the logmap construction fails to handle cases where the reference-black or reference-white value is larger than 1024...

7.8CVSS6.8AI score0.00264EPSS
SaveExploits1References9
Github Security Blog
Github Security Blog
•added 2025/08/14 12:05 a.m.•98 views

Helm May Panic Due To Incorrect YAML Content

A Helm contributor discovered an improper validation of type error when parsing Chart.yaml and index.yaml files that can lead to a panic. Impact There are two areas of YAML validation that were impacted. First, when a Chart.yaml file had a null maintainer or the child or parent of a dependencies...

6.5CVSS7.1AI score0.00334EPSS
SaveExploits0References4Affected Software1
osv_ghsa
osv_ghsa
•added 2025/08/14 12:05 a.m.•10 views

GHSA-F9F8-9PMF-XV68 Helm May Panic Due To Incorrect YAML Content

A Helm contributor discovered an improper validation of type error when parsing Chart.yaml and index.yaml files that can lead to a panic. Impact There are two areas of YAML validation that were impacted. First, when a Chart.yaml file had a null maintainer or the child or parent of a dependencies...

6.5CVSS7.1AI score0.00334EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2025/08/14 12:01 a.m.•31 views

Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion

A Helm contributor discovered that it was possible to craft a JSON Schema file in a manner which could cause Helm to use all available memory and have an out of memory OOM termination. Impact A malicious chart can point $ref in values.schema.json to a device e.g. /dev/ or other problem file which...

6.5CVSS7.1AI score0.00334EPSS
SaveExploits0References4Affected Software1
osv_ghsa
osv_ghsa
•added 2025/08/14 12:01 a.m.•11 views

GHSA-9H84-QMV7-982P Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion

A Helm contributor discovered that it was possible to craft a JSON Schema file in a manner which could cause Helm to use all available memory and have an out of memory OOM termination. Impact A malicious chart can point $ref in values.schema.json to a device e.g. /dev/ or other problem file which...

6.5CVSS7.1AI score0.00334EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/08/13 11:23 p.m.•75 views

CVE-2025-55199 Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion

Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, it is possible to craft a JSON Schema file in a manner which could cause Helm to use all available memory and have an out of memory OOM termination. This issue has been resolved in Helm 3.18.5. A workaround involves...

6.5CVSS0.00334EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2025/08/13 2:15 p.m.•14 views

DEBIAN-CVE-2025-55005

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-1, when preparing to transform from Log to sRGB colorspaces, the logmap construction fails to handle cases where the reference-black or reference-white value is larger than 1024...

5.5CVSS5.5AI score0.00264EPSS
SaveExploits1References1
NVD
NVD
•added 2025/08/13 2:15 p.m.•14 views

CVE-2025-52386

CycloneDX Sunshine v0.9 is vulnerable to CSV Formula Injection via a crafted JSON file...

5.4CVSS0.00255EPSS
SaveExploits0References3
Rows per page
Query Builder