Latest CVE Feed
-
3.7
LOWCVE-2025-8204
A vulnerability classified as problematic was found in Comodo Dragon up to 134.0.6998.179. Affected by this vulnerability is an unknown functionality of the component HSTS Handler. The manipulation leads to security check for standard. The attack can be l... Read more
Affected Products : dragon- Published: Jul. 26, 2025
- Modified: Jul. 31, 2025
- Vuln Type: Misconfiguration
-
3.7
LOWCVE-2025-29923
go-redis is the official Redis client library for the Go programming language. Prior to 9.5.5, 9.6.3, and 9.7.3, go-redis potentially responds out of order when `CLIENT SETINFO` times out during connection establishment. This can happen when the client is... Read more
Affected Products :- Published: Mar. 20, 2025
- Modified: Mar. 20, 2025
- Vuln Type: Race Condition
-
3.7
LOWCVE-2025-24912
hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authent... Read more
Affected Products :- Published: Mar. 12, 2025
- Modified: Mar. 12, 2025
- Vuln Type: Denial of Service
-
3.7
LOWCVE-2025-8283
A vulnerability was found in the netavark package, a network stack for containers used with Podman. Due to dns.podman search domain being removed, netavark may return external servers if a valid A/AAAA record is sent as a response. When creating a contain... Read more
- Published: Jul. 28, 2025
- Modified: Aug. 11, 2025
- Vuln Type: Misconfiguration
-
3.7
LOWCVE-2024-21094
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracl... Read more
Affected Products : debian_linux active_iq_unified_manager oncommand_insight oncommand_workflow_automation jdk jre graalvm java_se graalvm_for_jdk data_infrastructure_insights_acquisition_unit +1 more products- Published: Apr. 16, 2024
- Modified: May. 21, 2025
-
3.7
LOWCVE-2024-21068
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle Graal... Read more
Affected Products : debian_linux active_iq_unified_manager oncommand_insight oncommand_workflow_automation jdk jre graalvm java_se graalvm_for_jdk data_infrastructure_insights_acquisition_unit +1 more products- Published: Apr. 16, 2024
- Modified: Dec. 06, 2024
-
3.7
LOWCVE-2024-20954
Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.... Read more
- Published: Apr. 16, 2024
- Modified: Dec. 06, 2024
-
3.7
LOWCVE-2023-3803
A vulnerability classified as problematic has been found in Chengdu Flash Flood Disaster Monitoring and Warning System 2.0. This affects an unknown part of the file /Service/ImageStationDataService.asmx of the component File Name Handler. The manipulation... Read more
Affected Products : flash_flood_disaster_monitoring_and_warning_system- Published: Jul. 21, 2023
- Modified: Nov. 21, 2024
-
3.7
LOWCVE-2024-47869
Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves a **timing attack** in the way Gradio compares hashes for the `analytics_dashboard` function. Since the comparison is not done in constant time, an attacke... Read more
Affected Products : gradio- Published: Oct. 10, 2024
- Modified: Oct. 17, 2024
-
3.7
LOWCVE-2024-21085
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22; Oracle GraalVM Enterprise Edition: 20.3.13 and... Read more
- Published: Apr. 16, 2024
- Modified: May. 21, 2025
-
3.7
LOWCVE-2021-21416
django-registration is a user registration package for Django. The django-registration package provides tools for implementing user-account registration flows in the Django web framework. In django-registration prior to 3.1.2, the base user-account regist... Read more
Affected Products : django-registration- Published: Apr. 01, 2021
- Modified: Nov. 21, 2024
-
3.7
LOWCVE-2024-21138
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; O... Read more
- Published: Jul. 16, 2024
- Modified: Dec. 05, 2024
-
3.7
LOWCVE-2023-33855
Under certain conditions, RSA operations performed by IBM Common Cryptographic Architecture (CCA) 7.0.0 through 7.5.36 may exhibit non-constant-time behavior. This could allow a remote attacker to obtain sensitive information using a timing-based attack.... Read more
- Published: Mar. 26, 2024
- Modified: Jul. 25, 2025
-
3.7
LOWCVE-2024-32708
Authentication Bypass by Spoofing vulnerability in helderk Maintenance Mode allows Functionality Bypass.This issue affects Maintenance Mode: from n/a through 3.0.1.... Read more
Affected Products : maintenance_mode- Published: May. 17, 2024
- Modified: Nov. 21, 2024
-
3.7
LOWCVE-2024-45453
Authentication Bypass by Spoofing vulnerability in Peter Hardy-vanDoorn Maintenance Redirect allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Maintenance Redirect: from n/a through 2.0.1.... Read more
Affected Products :- Published: Sep. 23, 2024
- Modified: Sep. 26, 2024
-
3.7
LOWCVE-2024-20955
Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 2... Read more
- Published: Jan. 16, 2024
- Modified: Jun. 03, 2025
-
3.7
LOWCVE-2011-2300
Unspecified vulnerability in Oracle VM VirtualBox 3.0, 3.1, 3.2, and 4.0 through 4.0.8 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Guest Additions for Windows.... Read more
Affected Products : vm_virtualbox- Published: Jul. 21, 2011
- Modified: Apr. 11, 2025
-
3.7
LOWCVE-2024-4063
A vulnerability was found in EZVIZ CS-C6-21WFR-8 5.2.7 Build 170628. It has been classified as problematic. This affects an unknown part of the component Davinci Application. The manipulation leads to improper certificate validation. It is possible to ini... Read more
Affected Products :- Published: Apr. 23, 2024
- Modified: Nov. 21, 2024
-
3.7
LOWCVE-2006-1166
Monotone 0.25 and earlier, when a user creates a file in a directory called "mt", and when checking out that file on a case-insensitive file system such as Windows or Mac OS X, places the file into the "MT" bookkeeping directory, which could allow context... Read more
Affected Products : monotone- Published: Mar. 12, 2006
- Modified: Apr. 03, 2025
-
3.7
LOWCVE-2023-21937
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: ... Read more
- Published: Apr. 18, 2023
- Modified: Nov. 21, 2024