Lucene search
K

7 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-12460

Malicious code in bioql PyPI...

8.2CVSS8.2AI score0.00095EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/31 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-54880

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mermaid is a JavaScript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify complex diagrams. I...

6.1CVSS4.6AI score0.00015EPSS
Exploits1References2
SUSE CVE
SUSE CVE
added 2025/08/19 11:21 p.m.1 views

SUSE CVE-2025-54880

Mermaid is a JavaScript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify complex diagrams. In the default configuration of mermaid 11.9.0 and earlier, user supplied input for architecture diagram icons is passed to the d3 html...

6.1CVSS6.1AI score0.00015EPSS
Exploits1References3
NVD
NVD
added 2025/08/19 5:15 p.m.2 views

CVE-2025-54880

Mermaid is a JavaScript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify complex diagrams. In the default configuration of mermaid 11.9.0 and earlier, user supplied input for architecture diagram icons is passed to the d3 html...

6.1CVSS0.00015EPSS
Exploits1References3
OSV
OSV
added 2025/08/19 4:58 p.m.2 views

CVE-2025-54880 Mermaid does not properly sanitize architecture diagram iconText leading to XSS

Mermaid is a JavaScript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify complex diagrams. In the default configuration of mermaid 11.9.0 and earlier, user supplied input for architecture diagram icons is passed to the d3 html...

5.1CVSS5.7AI score0.00015EPSS
Exploits1References5
CVE
CVE
added 2023/02/01 4:34 p.m.36 views

CVE-2023-0400

Summary for CVE-2023-0400 (Trellix DLP) : A protection-bypass vulnerability was found in Trellix Data Loss Prevention 11.9.x for Windows, allowing a local user to bypass DLP controls when uploading sensitive data from a mapped drive into a web email client. Loading from a local driver was correct...

8.2CVSS7.8AI score0.00095EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/02/01 4:34 p.m.6 views

CVE-2023-0400

The protection bypass vulnerability in DLP for Windows 11.9.x is addressed in version 11.10.0. This allowed a local user to bypass DLP controls when uploading sensitive data from a mapped drive into a web email client. Loading from a local driver was correctly prevented. Versions prior to 11.9...

5.9CVSS6.7AI score0.00095EPSS
Exploits0References1
Rows per page
Query Builder