Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2025-29450 |
Description: An issue in twonav v.2.1.18-20241105 allows a remote attacker to obtain sensitive information via the site settings component.
EPSS Score: 0.05%
April 17th, 2025 (2 days ago)
|
|
CVE-2025-29449 |
Description: An issue in twonav v.2.1.18-20241105 allows a remote attacker to obtain sensitive information via the link identification function.
EPSS Score: 0.05%
April 17th, 2025 (2 days ago)
|
|
CVE-2024-42178 |
Description: HCL MyXalytics is affected by a failure to restrict URL access vulnerability. Unauthenticated users might gain unauthorized access to potentially confidential information, creating a risk of misuse, manipulation, or unauthorized distribution.
CVSS: LOW (2.5) EPSS Score: 0.02%
April 17th, 2025 (2 days ago)
|
|
Description: Law Offices of Sally B. Gold, LLC is a law firm based in downtown Baltimore, Maryland, founded in 1992. The firm focuses primarily on family law, including prenuptial agreements, divorce, alimony, child custody, separation agreements, and domestic violence cases.
April 17th, 2025 (2 days ago)
|
|
Description: 1st Health Inc provides world-class care to individuals involved in automobile accidents. We provide prompt, professional medical care, from X-Rays and massage to therapeutic modalities. To make your life easier after an accident, we'll even ...
April 17th, 2025 (2 days ago)
|
|
Description: A critical vulnerability in the Erlang/OTP SSH, tracked as CVE-2025-32433, has been disclosed that allows for unauthenticated remote code execution on vulnerable devices. [...]
CVSS: CRITICAL (10.0) EPSS Score: 0.39%
April 17th, 2025 (2 days ago)
|
|
CVE-2025-29451 |
Description: An issue in Seo Panel 4.11.0 allows a remote attacker to obtain sensitive information via the Mail Setting component.
EPSS Score: 0.05%
April 17th, 2025 (2 days ago)
|
|
Description: Entertainment venue management firm Legends International warns it suffered a data breach in November 2024, which has impacted employees and people who visited venues under its management. [...]
April 17th, 2025 (2 days ago)
|
|
CVE-2025-3765 |
Description: A vulnerability, which was classified as critical, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This issue affects some unknown processing of the file /edit-photo.php. The manipulation of the argument Avatar leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Eine Schwachstelle wurde in SourceCodester Web-based Pharmacy Product Management System 1.0 entdeckt. Sie wurde als kritisch eingestuft. Hierbei geht es um eine nicht exakt ausgemachte Funktion der Datei /edit-photo.php. Mittels Manipulieren des Arguments Avatar mit unbekannten Daten kann eine unrestricted upload-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff über das Netzwerk. Der Exploit steht zur öffentlichen Verfügung.
CVSS: MEDIUM (5.3) EPSS Score: 0.04% SSVC Exploitation: poc
April 17th, 2025 (2 days ago)
|
|
CVE-2025-3764 |
Description: A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. This vulnerability affects unknown code of the file /edit-product.php. The manipulation of the argument Avatar leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. In SourceCodester Web-based Pharmacy Product Management System 1.0 wurde eine Schwachstelle entdeckt. Sie wurde als kritisch eingestuft. Dabei geht es um eine nicht genauer bekannte Funktion der Datei /edit-product.php. Mittels dem Manipulieren des Arguments Avatar mit unbekannten Daten kann eine unrestricted upload-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung.
CVSS: MEDIUM (5.3) EPSS Score: 0.04% SSVC Exploitation: poc
April 17th, 2025 (2 days ago)
|