Lucene search
+L

148568 matches found

Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2015-5821

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption a...

6.8CVSS5.6AI score0.02505EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2015-5817

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption a...

6.8CVSS6.9AI score0.02709EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2012-3672

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application...

6.8CVSS6.2AI score0.02766EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2023-4197

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Dolibarr ERP CRM = v18.0.1 fails to strip certain PHP code from user- supplied input when creating a Website, allowing an attacker ...

8.8CVSS8.2AI score0.32845EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2015-3742

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or...

6.8CVSS8.2AI score0.02603EPSS
SaveExploits0References2
OSV
OSV
added 2025/09/08 6:15 a.m.8 views

CVE-2025-10085

A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file managewebsite.php. The manipulation results in unrestricted upload. It is possible to launch the attack remotely. The exploit has been released to the...

8.8CVSS5.6AI score0.00356EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/09/08 5:32 a.m.20 views

CVE-2025-10085 SourceCodester Pet Grooming Management Software manage_website.php unrestricted upload

A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file managewebsite.php. The manipulation results in unrestricted upload. It is possible to launch the attack remotely. The exploit has been released to the...

6.5CVSS0.00356EPSS
SaveExploits1References5
CVE
CVE
added 2025/09/08 5:32 a.m.24 views

CVE-2025-10085

CVE-2025-10085 affects SourceCodester Pet Grooming Management Software 1.0. A vulnerability in the file manage_website.php allows unrestricted file upload due to manipulation of unknown code, enabling a remotely exploitable attack. Multiple sources note that the exploit is publicly available and ...

8.8CVSS6.8AI score0.00356EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2025/09/08 4:16 a.m.11 views

CVE-2025-10081

A flaw has been found in SourceCodester Pet Management System 1.0. This impacts an unknown function of the file /admin/profile.php. This manipulation of the argument websiteimage causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been published and may be...

7.2CVSS5.5AI score0.00463EPSS
SaveExploits1References5
NVD
NVD
added 2025/09/08 4:16 a.m.10 views

CVE-2025-10081

A flaw has been found in SourceCodester Pet Management System 1.0. This impacts an unknown function of the file /admin/profile.php. This manipulation of the argument websiteimage causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been published and may be...

7.2CVSS0.00463EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/09/08 12:0 a.m.7 views

SourceCodester Pet Grooming Management Software 代码问题漏洞

SourceCodester Pet Grooming Management Software is an open source pet grooming management system from SourceCodester. A code issue vulnerability exists in version 1.0 of SourceCodester Pet Grooming Management Software, which stems from an arbitrary file upload vulnerability in the managewebsite.p...

8.8CVSS6.7AI score0.00356EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/09/08 12:0 a.m.12 views

PT-2025-36438

Name of the Vulnerable Software and Affected Versions: SourceCodester Pet Grooming Management Software version 1.0 Description: A security flaw has been discovered that allows for unrestricted file upload through manipulation of unknown code within the manage website.php file. This issue is...

8.8CVSS6.4AI score0.00356EPSS
SaveExploits1References11
CNNVD
CNNVD
added 2025/09/08 12:0 a.m.7 views

dingfanzu 安全漏洞

dingfanzu is a php based takeaway ordering website by gk2007 individual developer. A security vulnerability exists in dingfanzu version V1.0, which originates from a cross-site request forgery vulnerability in the /admin/doAdminAction.php component...

3.7CVSS6.7AI score0.00169EPSS
SaveExploits1References2
Hacker One
Hacker One
added 2025/09/05 2:16 p.m.9 views

U.S. Dept Of Defense: Exposed wp-config.php file in ███ National Guard website

A WordPress configuration file containing sensitive information, such as the MySQL database password, was found exposed on a website of the National Guard. The file was accessible at a public endpoint...

6.6AI score
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/09/04 4:45 a.m.5 views

webpack-dev-server users' source code may be stolen when they access a malicious web site

...

5.9CVSS7AI score0.00427EPSS
SaveExploits1
CNNVD
CNNVD
added 2025/09/04 12:0 a.m.13 views

Code-Projects Responsive Blog Site 代码注入漏洞

Code-Projects Responsive Blog Site is a Code-Projects open source responsive blog site. Code-Projects Responsive Blog Site version 1.0 suffers from a code injection vulnerability that stems from improper manipulation of the parameters productcode/genname/productname/supplier in the file...

4.8CVSS4.1AI score0.00308EPSS
SaveExploits1References5
NVD
NVD
added 2025/09/03 6:15 p.m.6 views

CVE-2025-20291

A vulnerability in Cisco Webex Meetings could have allowed an unauthenticated, remote attacker to redirect a targeted Webex Meetings user to an untrusted website. Cisco has addressed this vulnerability in the Cisco Webex Meetings service, and no customer action is needed. This vulnerability exist...

6.1CVSS0.00235EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/03 5:41 p.m.18 views

CVE-2025-20291

A vulnerability in Cisco Webex Meetings could have allowed an unauthenticated, remote attacker to redirect a targeted Webex Meetings user to an untrusted website. Cisco has addressed this vulnerability in the Cisco Webex Meetings service, and no customer action is needed. This vulnerability exist...

4.3CVSS0.00235EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/03 12:0 a.m.8 views

Real-Estate-website-in-PHP 安全漏洞

Real-Estate-website-in-PHP is a free and open source real estate website by scriptandtools individual developers. A security vulnerability exists in Real-Estate-website-in-PHP version 1.0, which originates from an incorrect manipulation of the file /admin/userlist.php resulting in execution after...

7.5CVSS7.5AI score0.00613EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/09/02 12:0 a.m.1 views

CVE-2025-55473

Asian Arts Talents Foundation AATF Website v5.1.x and Docker version 2024.12.8.1 are vulnerable to Cross Site Scripting XSS. The vulnerability exists in the /ip.php endpoint, which processes and displays the X-Forwarded-For HTTP header without proper sanitization or output encoding. This allows a...

6.3AI score0.0032EPSS
SaveExploits0References3
Rows per page
Query Builder