Lucene search
+L
GithubRecent

34251 matches found

Github Security Blog
Github Security Blog
added 2026/06/04 6:56 p.m.18 views

WWBN AVideo: Stored XSS via Hostile YouTube Video Title in AVideo YouTubeAPI Gallery Section

Stored XSS via Hostile YouTube Video Title in AVideo YouTubeAPI Gallery Section Summary A stored Cross-Site Scripting vulnerability CWE-79; chained CWE-829, Inclusion of Functionality from Untrusted Control Sphere in the AVideo YouTubeAPI plugin renders the snippet.title field returned by the...

4.7CVSS5.9AI score0.00162EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 6:55 p.m.17 views

WWBN AVideo: Unauthenticated Reflected XSS via $_GET['search'] in AVideo YouTubeAPI Gallery Pagination

Unauthenticated Reflected XSS via $GET'search' in AVideo YouTubeAPI Gallery Pagination Summary A reflected Cross-Site Scripting vulnerability CWE-79 in the AVideo YouTubeAPI plugin allows any unauthenticated attacker to execute arbitrary JavaScript in a victim's browser session when the victim...

6.1CVSS6.2AI score0.00178EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 6:55 p.m.15 views

WWBN AVideo: Stored XSS via autoEvalCodeOnHTML Bypass in MessageSQLite WebSocket Handler (CVE-2026-43874 Bypass)

AVideo: Stored XSS via autoEvalCodeOnHTML in MessageSQLite WebSocket Handler Summary AVideo has a stored XSS vulnerability in the WebSocket messaging system. The MessageSQLite.php handler only strips autoEvalCodeOnHTML from $json'msg', but msgToResourceId reads from $msg'json' with higher priorit...

7.7CVSS6AI score0.00327EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 6:47 p.m.19 views

WWBN AVideo: Authenticated wallet credit bypass in AuthorizeNet processPayment endpoint

Summary plugin/AuthorizeNet/processPayment.json.php credits the logged-in user's wallet based only on the attacker-controlled amount POST parameter. The endpoint contains a TODO for real Authorize.Net charging, hardcodes $paymentSuccess = true, and then calls YPTWallet::addBalance without...

7.1CVSS5.9AI score0.0012EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 6:46 p.m.26 views

WWBN AVideo: Stored XSS via unescaped Gallery category description

Summary AVideo stores category descriptions from user input and later renders categorydescription as raw HTML in the Gallery view. A user who can create or edit categories can store JavaScript in a category description, which executes when another user views the affected Gallery/category page. Th...

5.4CVSS5.9AI score0.00162EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 6:46 p.m.31 views

Spree: CSV Formula Injection in Customer Export

Summary CSV formula injection also known as formula injection or CSV injection affects customer export. User-controlled values customer names, email addresses, and shipping addresses. When an administrator opens a crafted Export in Microsoft Excel or LibreOffice Calc, formulas embedded in user da...

6AI score
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 6:39 p.m.19 views

OpenMeter: SQL injection through meter creation

Summary An authenticated tenant can inject arbitrary SQL through the valueProperty or groupBy fields of POST /api/v1/meters. The injection passes the application's JSONPath validation check and executes against the shared ClickHouse database, which contains event data for all tenants with no...

6.1AI score0.00036EPSS
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 6:30 p.m.8 views

Apache Fory Java SDK Has Deserialization of Untrusted Data in the Java replace-resolve path

Deserialization of Untrusted Data in the Java replace-resolve path in Apache Fory fory-core Java SDK before 1.1.0 on Java/JVM platforms allows a remote attacker to bypass class registration, TypeChecker, and DisallowedList checks and invoke classpath-present readResolve/readExternal hooks via...

9.1CVSS6.1AI score0.0052EPSS
SaveExploits0References4Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 6:30 p.m.9 views

OpenStack Neutron: Neutron port RBAC policy bypass allows project managers to set trusted device owners on shared networks

In OpenStack Neutron before 28.0.1, a project manager can create or update a port on a shared network owned by another project and set deviceowner to a value that has "network:" at the beginning "network:dhcp" for example. The default port RBAC policies incorrectly included PROJECTMANAGER without...

2.2CVSS6.1AI score0.00262EPSS
SaveExploits0References8Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 6:30 p.m.8 views

OpenStack oslo.messaging does not verify RabbitMQ broker hostname during TLS handshake

An issue was discovered in OpenStack oslo.messaging 1.0.0 through 17.3.0. The oslo.messaging RabbitMQ driver does not perform TLS hostname verification when connecting to the message broker. When sslcafile is configured, the driver enables certificate chain validation but does not pass the expect...

7.4CVSS6.1AI score0.0016EPSS
SaveExploits0References7Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 6:30 p.m.8 views

milvus: RBAC grantee-id uses truncated MD5 (64-bit), enabling privilege-binding collisions and cross-role privilege forgery

A vulnerability has been found in milvus-io milvus up to 2.6.13. This vulnerability affects unknown code of the file internal/metastore/kv/rootcoord/kvcatalog.go of the component Grantee ID Hash Handler. The manipulation leads to use of weak hash. The attack needs to be performed locally. The...

7CVSS5AI score0.00089EPSS
SaveExploits0References10Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 6:30 p.m.7 views

LMCache: 16-bit multimodal hash collision can poison KV cache entries

A flaw has been found in LMCache up to 0.4.6. This affects the function hexhashtoint16 of the file lmcache/integration/vllm/utils.py of the component KV Cache Handler. Executing a manipulation can lead to use of weak hash. The attack needs to be launched locally. The attack requires a high level ...

3.6CVSS5.4AI score0.00075EPSS
SaveExploits0References9Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 6:1 p.m.20 views

Hono: app.mount() strips mount prefix using undecoded path, causing incorrect routing for percent-encoded paths

Summary app.mount strips the mount prefix from the incoming request path using the raw URL pathname, while route matching is performed against the percent-decoded path. This inconsistency causes the prefix to be stripped at the wrong position when the path contains percent-encoded multi-byte...

5.3CVSS5.8AI score0.0026EPSS
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 6:0 p.m.14 views

Hono: IP Restriction bypasses static deny rules for non-canonical IPv6

Summary The ip-restriction middleware hono/ip-restriction compares incoming IP addresses against configured deny and allow rules using string equality after partial normalization. Non-canonical IPv6 representations of an address already listed in a static rule — such as compressed forms,...

5.3CVSS5.8AI score0.00244EPSS
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 5:59 p.m.18 views

Hono: Cookie helper does not sanitize sameSite and priority, allowing Set-Cookie injection

Summary The serialize function in hono/cookie validates domain and path options against characters that corrupt Set-Cookie header syntax ;, \r, \n, but does not apply the same validation to sameSite and priority. An application that passes user-controlled input into either option may produce a...

5.3CVSS5.8AI score0.00216EPSS
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 5:52 p.m.24 views

Hono: JWT middleware accepts any Authorization scheme, not only Bearer

Summary The jwt and jwk middlewares do not verify that the Authorization header value uses theBearer scheme. Any two-part header value — regardless of the scheme name in the first position — proceeds to JWT verification. A request presenting a valid JWT under a non-Bearer scheme identifier such a...

6.5CVSS5.7AI score0.00199EPSS
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 5:49 p.m.22 views

epa4all-client: Unauthenticated REST API for Patient Record Writes

Impact Any network-reachable caller can write arbitrary documents to any patient's electronic health record accessible by the institution's SMC-B card. In a misconfigured deployment e.g., following the production Docker example in the README, this is exploitable from the local network without...

6.5CVSS5.9AI score0.00162EPSS
SaveExploits0References4Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 5:43 p.m.26 views

Nhost CLI local configserver allows cross-origin unauthenticated read/write access to local development configuration and secrets

Summary The hidden nhost configserver used by nhost dev exposes the Mimir GraphQL API with dummy authorization directives and permissive CORS. When a developer is running the local development environment, any process that can reach the developer's localhost service, including a web page loaded...

5.4CVSS5.9AI score0.00266EPSS
SaveExploits1References5Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 5:40 p.m.14 views

Klever-Go P2P MultiDataInterceptor leaks global throttler slots on malformed compressed batches (DoS)

Publisher note Fixed in v1.7.17. Operators running v1.7.17 should upgrade. The decompression-error path in MultiDataInterceptor.ProcessReceivedMessage now releases the global throttler slot before returning guarded defer after StartProcessing, disabled when the asynchronous goroutine takes...

5.8AI score
SaveExploits0References4Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 5:38 p.m.20 views

Singluarity: Incorrect path matching for 'limit container paths' directive

Impact The limit container paths directive in singularity.conf is intended to allow a system administrator limit the paths from which containers can be run, under setuid mode. Due to incorrect matching of a path string, sibling directories with similar names may incorrectly be allowed. For exampl...

5.8AI score0.0001EPSS
SaveExploits0References5Affected Software2
Github Security Blog
Github Security Blog
added 2026/06/04 5:36 p.m.17 views

kas's late signature validation may allow unnoticed repository manipulations

Impact So far, kas checks out and processes repositories regarding configuration includes prior to validating signatures of those repositories. This may allow to replace on original repository with one under the control of an attacker under very specific conditions. First of all, the attacker mus...

5.8AI score0.00021EPSS
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 3:30 p.m.10 views

GPTCache: File and image cache keys collide because BufferedReader.peek() only reads the buffered prefix

A vulnerability was detected in zilliztech GPTCache up to 0.1.44. Affected by this issue is the function BufferedReader.peek of the file gptcache/processor/pre.py of the component Cache Key Handler. Performing a manipulation of the argument inputdata"image" results in use of weak hash. The attack...

3.6CVSS5.5AI score0.00075EPSS
SaveExploits0References9Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 3:23 p.m.20 views

React Router vulnerable to Denial of Service via reflected user input in single-fetch

A DoS vulnerability exists in the React Router v7 Framework Mode, as well as Remix v2.9.0+ with Single Fetch enabled. In some scenarios the underlying serialization algorithm can become a bottleneck when encoding specific types of data into server responses. Please upgrade to React Router v7.14.0...

7.5CVSS5.8AI score0.00294EPSS
SaveExploits0References6Affected Software2
Github Security Blog
Github Security Blog
added 2026/06/04 3:5 p.m.23 views

Nuclio: Missing authorization on project write paths allows any authenticated user to modify or delete any project

This vulnerability exists in Nuclio Dashboard's project management API, allowing any authenticated user without membership in the target project to bypass OPA authorization checks on write paths PUT /api/projects/id, DELETE /api/projects and modify or delete any project along with all its...

6AI score0.00047EPSS
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 2:55 p.m.14 views

Better Auth: Device authorization approve and deny accept any authenticated session while the user code is pending

Am I affected? You are affected if all of the following are true: - You use better-auth at a version = 1.6.0, 1.6.11. - The deviceAuthorization plugin is enabled in your auth config deviceAuthorization in your plugins array. - A third party can observe a pending user code before the legitimate us...

7.6CVSS5.7AI score0.0014EPSS
SaveExploits0References4Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 2:50 p.m.21 views

matrix-sdk-ui: Incomplete edit validation

Impact The message edit validation logic in the matrix-sdk-ui crate before 0.16.1 is missing a check: when replacing an encrypted event, the replacement event itself is not required to be encrypted. This enables a malicious homeserver administrator or an actor with equivalent power to impersonate...

5.9AI score0.00019EPSS
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 2:47 p.m.19 views

Matrix Rust SDK: Sender-binding gaps in to-device and room-key attribution

Impact The matrix-sdk-crypto crate before 0.16.1 is missing a check for the sender's user ID when decrypting an Olm-encrypted to-device message containing the senderdevicekeys property. This could be exploited to spoof the sender of an encrypted to-device message, but only if the attacker collude...

5.8AI score0.0005EPSS
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 2:39 p.m.28 views

Strawberry GraphQL's Bypass of MaxAliasesLimiter via Fragment Spreads leading to GraphQL Alias Amplification

Summary The MaxAliasesLimiter extension in Strawberry fails to account for the multiplicative/amplification effect of FragmentSpreadNode. While it correctly counts static aliases within the AST it does not consider how many times a fragments internal aliases are expanded during execution. this...

5.3CVSS6AI score0.00417EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 2:38 p.m.21 views

Strawberry GraphQL has a Circular Fragment Reference DOS

Summary The QueryDepthLimiter extension is vulnerable to an Application-level DOS due to a lack of cycle detection in fragment spreads. When a query contains circular fragment references the determinedepth function enters an infinite recursion, leading to a RecursionError and crashing the...

5.3CVSS5.8AI score0.00296EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 2:37 p.m.21 views

Doorkeeper Openid Connect: Dynamic Client Registration feature creates public clients with client_secret

Impact The DynamicClientRegistrationControllerregister action hard-codes confidential: false when creating applications dynamicclientregistrationcontroller.rb:18-25, yet the response includes a clientsecret and advertises tokenendpointauthmethodssupported: "clientsecretbasic", "clientsecretpost"...

5.8AI score0.00058EPSS
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 2:33 p.m.37 views

WebOb: Location header normalization during redirect leads to open redirect - again

Impact When WebOb normalizes the HTTP Location header to include the request hostname, it does so by parsing the URL that the user is to be redirected to with Python's urllib.parse, and joining it to the base URL. urlsplit called internally by urljoin however treats a // at the start of a string ...

6.1CVSS5.7AI score0.00162EPSS
SaveExploits0References8Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 2:24 p.m.93 views

Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name Injection

Summary Axios versions before 0.32.0 on the 0.x line and before 1.16.0 on the 1.x line build a regular expression from the configured XSRF cookie name without escaping regex metacharacters. In standard browser environments, an attacker who can influence the cookie name passed to axios can cause...

7.5CVSS6AI score0.00622EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 2:21 p.m.203 views

Allocation of Resources Without Limits or Throttling in Axios

Summary Axios versions 1.7.0 through 1.15.x did not enforce configured request and response size limits when requests were sent with the fetch adapter. Applications that selected adapter: 'fetch', or ran in environments where axios resolved to the fetch adapter, could receive or send bodies large...

7.5CVSS5.8AI score0.00622EPSS
SaveExploits1References6Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 2:19 p.m.273 views

Axios: Proxy-Authorization Credential Leak to Origin Server Across HTTP-to-HTTPS Redirect in Axios Node.js HTTP Adapter

Summary Axios’s Node.js HTTP adapter may forward a Proxy-Authorization header to a redirected origin during specific proxy-to-direct redirect flows. This affects Node.js usage, where an initial HTTP request is sent through an authenticated HTTP proxy, redirects are followed, and the redirected UR...

8.2CVSS5.8AI score0.00664EPSS
SaveExploits1References5Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 2:15 p.m.331 views

Axios: Proxy-Authorization header leaks to redirect target when proxy is re-evaluated to direct connection

Summary Axios’ Node.js HTTP adapter can leak proxy credentials to a redirect target in affected versions. When a request is sent through an authenticated proxy, Axios may add a Proxy-Authorization header. If Axios then follows a redirect and the redirected request is no longer sent through that...

7.5CVSS5.9AI score0.0066EPSS
SaveExploits1References7Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 1:15 p.m.22 views

Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks

Summary In affected versions, the HTTP Host request header was not validated before being used to reconstruct request.url. Because the routing algorithm relies on the raw HTTP path while request.url is rebuilt from the Host header, a malformed header could make request.url.path differ from the pa...

6.5CVSS5.9AI score0.01839EPSS
SaveExploits2References26Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 12:30 p.m.12 views

MLflow: Deterministic sampling in dataset digest enables predictable collisions

A flaw has been found in MLflow up to 3.10.0. This issue affects the function mlflow.data.digestutils of the file mlflow/data/digestutils.py of the component Dataset Digest Computation. This manipulation causes use of weak hash. It is possible to launch the attack on the local host. The attack is...

3.6CVSS5.5AI score0.00103EPSS
SaveExploits1References10Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 12:30 p.m.12 views

Streamlit @st.cache_data hash collision via fixed sampling seed and PIL P-mode palette omission

A vulnerability has been found in Streamlit up to 1.53.0. Impacted is an unknown function in the library lib/streamlit/runtime/caching/hashing.py of the component Palette Handler. Such manipulation leads to use of weak hash. Local access is required to approach this attack. The attack requires a...

4.7CVSS5.3AI score0.00083EPSS
SaveExploits0References12Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 12:30 p.m.5 views

Keystone: GraphQL API Endpoint Lacks Query Depth Limits

A vulnerability was detected in keystonejs keystone up to 20260319. This vulnerability affects unknown code in the library packages/core/src/lib/core/queries/output-field.ts of the component GraphQL API Endpoint. The manipulation results in resource consumption. It is possible to launch the attac...

5.3CVSS5.8AI score0.0031EPSS
SaveExploits0References10Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 12:30 p.m.10 views

ms-swift: Image Cache Hash Collision via Missing Dimension Metadata

A security vulnerability has been detected in modelscope ms-swift up to 4.2.0. This affects the function Template.savepilimage of the file swift/template/base.py of the component PIL Image Cache Key Handler. The manipulation leads to use of weak hash. An attack has to be approached locally. A hig...

3.6CVSS5.3AI score0.00075EPSS
SaveExploits0References11Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 6:30 a.m.6 views

OpenStack Ironic allows file overwrite via directory traversal during deployment with a crafted ISO image

OpenStack Ironic through before 35.0.2 allows file overwrite via directory traversal during deployment with a crafted ISO image...

8.1CVSS6.1AI score0.00601EPSS
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 6:30 a.m.7 views

OpenStack Mistral allows Arbitrary Remote Code Execution when the API is exposed

OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed. There are endpoints that allow code execution, which can lead to exfiltration of service credentials...

9.9CVSS6.2AI score0.00733EPSS
SaveExploits0References9Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 12:30 a.m.6 views

OpenStack Ironic allows Boot Script Injection

OpenStack Ironic through 35.0.x allows Boot Script Injection...

7.7CVSS6.1AI score0.00262EPSS
SaveExploits0References6Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/04 12:30 a.m.15 views

Gradio: Audio cache key ignores metadata when saving numpy audio outputs

A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function saveaudiotocache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high...

2.5CVSS5.5AI score0.00106EPSS
SaveExploits1References11Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/03 9:41 p.m.34 views

Froxlor's API Authentication bypasses 2FA Authentication

Summary Froxlor's API authentication FroxlorRPC::validateAuth does not enforce Two-Factor Authentication. When a user admin or customer enables 2FA on their account, the web UI correctly requires a TOTP code after password verification. However, the API accepts requests authenticated with only an...

9.8CVSS7.3AI score0.01129EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/03 9:39 p.m.18 views

browserstack-runner vulnerable to Remote Code Execution via vm sandbox escape in _log HTTP handler

Summary The HTTP handler /log in lib/server.js lines 491–515 of browserstack-runner passes unauthenticated user-supplied data to vm.runInNewContext combined with eval, enabling a sandbox escape and arbitrary code execution on the host system. Details When browserstack-runner starts, it creates an...

8.8CVSS6.5AI score0.00392EPSS
SaveExploits0References4Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/03 9:38 p.m.15 views

browserstack-runner has an unauthenticated arbitrary file read via path traversal in HTTP server

Summary The HTTP server in browserstack-runner serves files from the project directory via the default handler. This handler uses path.joinprocess.cwd, uri to resolve file paths but does not validate that the resulting path stays within the project root. Combined with the server binding on 0.0.0....

7.1CVSS6AI score0.00208EPSS
SaveExploits0References4Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/03 9:37 p.m.15 views

Jupyter Enterprise Gateway: Kubernetes Manifest Injection in Jinja2 Template Rendering

Summary The environment variables used during the rendering of the Kubernetes manifest allow YAML injection, enabling attackers to overwrite existing keys like securityContext and inject multi-document YAML to create additional unintended Kubernetes resources. Details The server interpolates...

10CVSS6.2AI score0.00348EPSS
SaveExploits1References2Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/03 9:36 p.m.15 views

Jupyter Enterprise Gateway: Jinja2 Template Server Side Template Injection resulting in Remote Code Execution

Summary The environment variables KERNELXXX used during the rendering of the Kubernetes manifest are vulnerable to Server Side Template Injection SSTI. By including Jinja2 template expressions it is possible to execution Python code and OS Commands in the Enterprise Gateway service. The code can...

10CVSS6.4AI score0.00461EPSS
SaveExploits1References2Affected Software1
Github Security Blog
Github Security Blog
added 2026/06/03 9:34 p.m.21 views

AIOHTTP is vulnerable to cross-origin redirect with per-request cookies

Summary Cookies set with the cookies parameter on requests are sent after following a cross-origin redirect. Impact If a developer uses the cookies parameter on a per-request basis then sensitive data might be leaked to an attacker if they manage to control a redirect. Workaround If unable to...

8.7CVSS5.8AI score0.0015EPSS
SaveExploits0References4Affected Software1
Total number of security vulnerabilities34251