Lucene search
K

8 matches found

ATTACKERKB
ATTACKERKB
added 2026/04/07 5:40 p.m.2 views

CVE-2026-39336

ChurchCRM is an open-source church management system. Prior to 7.1.0, a stored cross-site scripting issue affects the Directory Reports form fields set from config, Person editor defaults rendered into address fields, and external self-registration form defaults. This is primarily an admin-to-adm...

6.1CVSS5.8AI score0.00035EPSS
Exploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2025/11/07 1:46 p.m.1 views

CVE-2025-64318

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Manipulating Writeable Configuration Files.This issue affects Mulesoft Anypoint Code Builder: before 1.12.1...

5.3CVSS7AI score0.00037EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/11/07 12:0 a.m.3 views

PT-2025-45507

Name of the Vulnerable Software and Affected Versions Revenera InstallShield versions 2023 R2 through 2025 R1 Description A potential Denial of Service issue exists in Revenera InstallShield. When a local administrator performs an uninstall, a symbolic link may be followed during the removal of a...

5.6CVSS6.3AI score0.00059EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/11/04 6:30 p.m.3 views

CVE-2025-64321

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0...

0.00037EPSS
Exploits0References1
CVE
CVE
added 2025/11/04 6:22 p.m.9 views

CVE-2025-64319

CVE-2025-64319 affects Salesforce Mulesoft Anypoint Code Builder prior to 1.12.1. Root cause: Incorrect permission assignment for a critical resource that enables manipulation of writable configuration files. Impact: potential tampering with configuration files due to overly permissive access. Ex...

5.3CVSS6.7AI score0.00043EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2025/11/04 12:0 a.m.1 views

Salesforce Agentforce Vibes Extension 安全漏洞

Salesforce Agentforce Vibes Extension is an AI-coded agent extension from Salesforce USA. A security vulnerability exists in Salesforce Agentforce Vibes Extension versions prior to 3.2.0 that stems from improper neutralization of LLM prompt inputs, which could lead to manipulation of writable...

5.3CVSS6.5AI score0.00037EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.0 views

EUVD-2024-3096

Malicious code in bioql PyPI...

7.8CVSS6.3AI score0.00217EPSS
Exploits0References6
OSV
OSV
added 2018/04/18 9:29 p.m.2 views

CVE-2018-10204

PureVPN 6.0.1 for Windows suffers from a SYSTEM privilege escalation vulnerability in its "sevpnclient" service. When configured to use the OpenVPN protocol, the "sevpnclient" service executes "openvpn.exe" using the OpenVPN config file located at %PROGRAMDATA%\purevpn\config\config.ovpn. This fi...

8.8CVSS5.9AI score
Exploits0References1
Rows per page
Query Builder