Lucene search
K

11 matches found

RedhatCVE
RedhatCVE
added 2025/11/18 6:2 p.m.4 views

CVE-2025-64758

@dependencytrack/frontend is a Single Page Application SPA used in Dependency-Track, an open source Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Since version 4.12.0, Dependency-Track users with the SYSTEMCONFIGURATION permission...

4.8CVSS6.7AI score0.00025EPSS
Exploits0References1
NVD
NVD
added 2025/11/17 6:15 p.m.2 views

CVE-2025-64758

@dependencytrack/frontend is a Single Page Application SPA used in Dependency-Track, an open source Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Since version 4.12.0, Dependency-Track users with the SYSTEMCONFIGURATION permission...

4.8CVSS0.00025EPSS
Exploits0References4
CVE
CVE
added 2025/11/17 5:24 p.m.7 views

CVE-2025-64758

CVE-2025-64758 affects Dependency-Track frontend (SPA). From 4.12.0 up to before 4.13.6, administrators with SYSTEM_CONFIGURATION could configure a login-page welcome message that was not properly sanitized, allowing arbitrary JavaScript to execute in users’ browsers. The issue results in a persi...

4.8CVSS6.6AI score0.00025EPSS
Exploits0References4
OSV
OSV
added 2025/11/17 5:24 p.m.4 views

CVE-2025-64758 @dependencytrack/frontend Vulnerable to Persistent Cross-Site-Scripting via Welcome Message

@dependencytrack/frontend is a Single Page Application SPA used in Dependency-Track, an open source Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Since version 4.12.0, Dependency-Track users with the SYSTEMCONFIGURATION permission...

4.8CVSS6.9AI score0.00025EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2025/11/17 5:24 p.m.2 views

CVE-2025-64758 @dependencytrack/frontend Vulnerable to Persistent Cross-Site-Scripting via Welcome Message

@dependencytrack/frontend is a Single Page Application SPA used in Dependency-Track, an open source Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Since version 4.12.0, Dependency-Track users with the SYSTEMCONFIGURATION permission...

4.8CVSS6.5AI score0.00025EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 4:37 a.m.3 views

SUSE CVE-2017-16529

The sndusbcreatestreams function in sound/usb/card.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service out-of-bounds read and system crash or possibly have unspecified other impact via a crafted USB device...

4.6CVSS6.8AI score0.00122EPSS
Exploits0References10
CNVD
CNVD
added 2017/11/06 12:0 a.m.2 views

Linux kernel local denial of service vulnerability (CNVD-2017-33096)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local denial of service vulnerability exists in the 'cdcparsecdcheader' function in the drivers/usb/core/message.c file in versions of Linux kernel prior to 4.13.6. A local...

7.2CVSS6.2AI score0.00107EPSS
Exploits0References1
CNVD
CNVD
added 2017/11/06 12:0 a.m.5 views

Linux kernel local denial of service vulnerability (CNVD-2017-33092)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local denial of service vulnerability exists in the 'sndusbcreatestreams' function in the sound/usb/card.c file in versions of Linux kernel prior to 4.13.6. A local attacker...

7.2CVSS6.2AI score0.00122EPSS
Exploits0References1
OSV
OSV
added 2017/11/04 1:29 a.m.0 views

DEBIAN-CVE-2017-16529

The sndusbcreatestreams function in sound/usb/card.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service out-of-bounds read and system crash or possibly have unspecified other impact via a crafted USB device...

6.6CVSS6.3AI score0.00122EPSS
Exploits0References1
OSV
OSV
added 2017/11/04 1:29 a.m.1 views

DEBIAN-CVE-2017-16526

drivers/uwb/uwbd.c in the Linux kernel before 4.13.6 allows local users to cause a denial of service general protection fault and system crash or possibly have unspecified other impact via a crafted USB device...

7.8CVSS7.6AI score0.00113EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2017/11/01 12:0 a.m.36 views

Virtuozzo 7 : readykernel-patch (VZA-2017-100)

According to the version of the vzkernel package and the readykernel-patch installed, the Virtuozzo installation on the remote host is affected by the following vulnerability : - It was found that fanoutadd in 'net/packet/afpacket.c' in the Linux kernel, before version 4.13.6, allows local users ...

7.8CVSS6.3AI score0.00393EPSS
Exploits4References5
Rows per page
Query Builder