Lucene search
+L

2926 matches found

Zero Science Lab
Zero Science Lab
added 2025/11/06 12:0 a.m.187 views

Ilevia EVE X1/X5 Server 4.7.18.0.eden Root Privilege Escalation

Summary EVE is a smart home and building automation solution designed for both residential and commercial environments, including malls, hotels, restaurants, bars, gyms, spas, boardrooms, and offices. It enables comprehensive control and monitoring of electrical installations through a highly...

9.8CVSS6AI score0.07449EPSS
SaveExploits3
CNVD
CNVD
added 2025/11/05 12:0 a.m.17 views

Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 Out-of-Bounds Write Vulnerabilities

The Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 are both networked access controllers from Azure Access Technology, USA. Azure Access Technology BLU-IC2 and Azure Access Technology BLU-IC4 are vulnerable to an out-of-bounds write vulnerability that stems from the fact that...

9.8CVSS7.1AI score0.00279EPSS
SaveExploits0References1
NVD
NVD
added 2025/11/04 7:17 p.m.9 views

CVE-2025-64321

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0...

5.3CVSS0.00221EPSS
SaveExploits0References1
OSV
OSV
added 2025/11/04 7:17 p.m.6 views

CVE-2025-64319

Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Manipulating Writeable Configuration Files.This issue affects Mulesoft Anypoint Code Builder: before 1.12.1...

5.3CVSS5.8AI score0.00209EPSS
SaveExploits0References1
OSV
OSV
added 2025/11/04 7:17 p.m.9 views

CVE-2025-64322

Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0...

5.3CVSS5.8AI score0.00209EPSS
SaveExploits0References1
NVD
NVD
added 2025/11/04 7:17 p.m.31 views

CVE-2025-64318

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Manipulating Writeable Configuration Files.This issue affects Mulesoft Anypoint Code Builder: before 1.12.1...

5.3CVSS0.00221EPSS
SaveExploits0References1
OSV
OSV
added 2025/11/04 7:17 p.m.7 views

CVE-2025-64321

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0...

5.3CVSS5.8AI score0.00221EPSS
SaveExploits0References1
CVE
CVE
added 2025/11/04 6:33 p.m.24 views

CVE-2025-64322

CVE-2025-64322 affects Salesforce Agentforce Vibes Extension. The vulnerability is described as an incorrect permission assignment for a critical resource that allows manipulation of writable configuration files. Impact is limited to extensions before affected versions (per sources: before 3.3.0;...

5.3CVSS6.6AI score0.00209EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/04 6:33 p.m.4 views

CVE-2025-64322

Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0...

6.6AI score0.00209EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/11/04 6:33 p.m.12 views

CVE-2025-64322

Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0...

0.00209EPSS
SaveExploits0References1
CVE
CVE
added 2025/11/04 6:30 p.m.22 views

CVE-2025-64321

CVE-2025-64321 concerns Salesforce Agentforce Vibes Extension with improper neutralization of input used for LLM prompting, enabling manipulation of writable configuration files. Affected versions are before 3.3.0 (also noted as before 3.2.0 in some sources). The vulnerability is tied to how prom...

5.3CVSS6.5AI score0.00221EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/11/04 6:30 p.m.21 views

CVE-2025-64321

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0...

0.00221EPSS
SaveExploits0References1
CVE
CVE
added 2025/11/04 6:22 p.m.72 views

CVE-2025-64319

CVE-2025-64319 affects Salesforce Mulesoft Anypoint Code Builder prior to 1.12.1. Root cause: Incorrect permission assignment for a critical resource that enables manipulation of writable configuration files. Impact: potential tampering with configuration files due to overly permissive access. Ex...

5.3CVSS6.7AI score0.00209EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/04 6:22 p.m.7 views

CVE-2025-64319

Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Manipulating Writeable Configuration Files.This issue affects Mulesoft Anypoint Code Builder: before 1.12.1...

6.7AI score0.00209EPSS
SaveExploits0References1
CVE
CVE
added 2025/11/04 6:19 p.m.26 views

CVE-2025-64318

The issue CVE-2025-64318 affects Salesforce Mulesoft Anypoint Code Builder (before 1.12.1). The vulnerability is described as improper neutralization of input used for LLM prompting, enabling manipulation of writable configuration files. The available data indicate an impact on integrity (partial...

5.3CVSS6.6AI score0.00221EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/11/04 6:19 p.m.16 views

CVE-2025-64318

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Manipulating Writeable Configuration Files.This issue affects Mulesoft Anypoint Code Builder: before 1.12.1...

0.00221EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/04 12:0 a.m.9 views

PT-2025-45035

Name of the Vulnerable Software and Affected Versions Salesforce Agentforce Vibes Extension versions prior to 3.2.0 Description An incorrect permission assignment for a critical resource exists in Salesforce Agentforce Vibes Extension, allowing manipulation of writable configuration files...

5.3CVSS6.5AI score0.00209EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/11/04 12:0 a.m.7 views

Salesforce Mulesoft Anypoint Code Builder 安全漏洞

Salesforce Mulesoft Anypoint Code Builder is an integrated development environment from Salesforce USA. A security vulnerability exists in Salesforce Mulesoft Anypoint Code Builder versions prior to 1.11.6 that stems from improper input neutralization and could lead to the manipulation of writabl...

5.3CVSS6.6AI score0.00221EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/11/04 12:0 a.m.6 views

Salesforce Agentforce Vibes Extension 安全漏洞

Salesforce Agentforce Vibes Extension is an AI-coded agent extension from Salesforce USA. A security vulnerability exists in Salesforce Agentforce Vibes Extension versions prior to 3.2.0 that stems from improper neutralization of LLM prompt inputs, which could lead to manipulation of writable...

5.3CVSS6.5AI score0.00221EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/11/01 6:56 p.m.18 views

CVE-2025-12603 /etc/timezone can be Arbitrarily Written

/etc/timezone can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

2.3CVSS0.00279EPSS
SaveExploits0References1
Rows per page
Query Builder