23 matches found
CVE-2025-10025
A vulnerability has been found in PHPGurukul Online Course Registration 3.1. Affected is an unknown function of the file /admin/semester.php. The manipulation of the argument semester leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...
CVE-2012-10025 WordPress Plugin Advanced Custom Fields <= 3.5.1 Remote File Inclusion
The WordPress plugin Advanced Custom Fields ACF version 3.5.1 and below contains a remote file inclusion RFI vulnerability in core/actions/export.php. When the PHP configuration directive allowurlinclude is enabled default: Off, an unauthenticated attacker can exploit the acfabspath POST paramete...
CVE-2013-10025
A vulnerability was found in Exit Strategy Plugin 1.55 on WordPress and classified as problematic. Affected by this issue is the function exitpageadmin of the file exitpage.php. The manipulation leads to cross-site request forgery. The attack may be launched remotely. Upgrading to version 1.59 is...
CVE-2015-10025
A vulnerability has been found in luelista miniConf up to 1.7.6 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file miniConf/MessageView.cs of the component URL Scanning. The manipulation leads to denial of service. Upgrading to version 1.7.7 and...
CVE-2013-10025
A vulnerability was found in Exit Strategy Plugin 1.55 on WordPress and classified as problematic. Affected by this issue is the function exitpageadmin of the file exitpage.php. The manipulation leads to cross-site request forgery. The attack may be launched remotely. Upgrading to version 1.59 is...
SUSE CVE-2016-10025
VMFUNC emulation in Xen 4.6.x through 4.8.x on x86 systems using AMD virtualization extensions aka SVM allows local HVM guest OS users to cause a denial of service hypervisor crash by leveraging a missing NULL pointer check...
CVE-2015-10025
CVE-2015-10025 affects the luelista miniConf product lineage up to version 1.7.6. The vulnerability targets an unknown functionality in the file miniConf/MessageView.cs within the URL Scanning component, causing a denial of service when exploited. Upgrading to versions 1.7.7 or 1.8.0 addresses th...
CVE-2020-10025
...
CVE-2020-10025
CVE-2020-10025 is a reservation duplicate of CVE-2020-10067 and is not used.
Oracle Business Intelligence Publisher Multiple Vulnerabilities (Jul 2017 CPU)
The version of Oracle Business Intelligence Publisher running on the remote host is 11.1.1.7.x prior to 11.1.1.7.170718, 11.1.1.9.x prior to 11.1.1.9.170718, 12.2.1.1.x prior to 12.2.1.1.170718, or 12.2.1.2.x prior to 12.2.1.2.170718. It is, therefore, affected by multiple vulnerabilities as note...
CVE-2019-10025
An issue was discovered in Xpdf 4.01.01. There is an FPE in the function ImageStream::ImageStream at Stream.cc for nBits...
UBUNTU-CVE-2019-10025
An issue was discovered in Xpdf 4.01.01. There is an FPE in the function ImageStream::ImageStream at Stream.cc for nBits...
CVE-2019-10025
CVE-2019-10025 affects Xpdf 4.01.01, with a fault in ImageStream::ImageStream in Stream.cc for nBits that causes a faulting/potential exploitation path (FPE). The linked documents consistently describe the vulnerability as an FPE in the ImageStream constructor, without providing concrete exploit ...
CVE-2011-10025
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/subtitleprocessorm3ubof.rb 2025-10-23 21:12:56+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7...
CVE-2017-10025
Vulnerability in the BI Publisher component of Oracle Fusion Middleware subcomponent: BI Publisher Security. The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher. Successful...
CVE-2017-10025
CVE-2017-10025 affects Oracle Fusion Middleware BI Publisher, specifically the BI Publisher Security component in 11.1.1.7.0. The issue allows an unauthenticated attacker with network access via HTTP to compromise BI Publisher, potentially yielding unauthorized access to critical data or data wit...
CVE-2016-10025
CVE-2016-10025 affects the Xen hypervisor when running on x86 with AMD SVM (VMFUNC emulation) and allows local HVM guests to crash the hypervisor due to a missing NULL pointer check in hvmemul_vmfunc(). Public references in the connected data show Xen versions 4.6.x–4.8.x as vulnerable and descri...
Fedora 24 : xen (2016-bc02bff7f5)
two security flaws 1406840 x86 PV guests may be able to mask interrupts XSA-202, CVE-2016-10024 x86: missing NULL pointer check in VMFUNC emulation XSA-203, CVE-2016-10025 x86: Mishandling of SYSCALL singlestep during emulation XSA-204, CVE-2016-10013 1406260 Note that Tenable Network Security ha...
Citrix XenServer Multiple Security Updates (CTX219378)
Security vulnerabilities have been identified in Citrix XenServer that may allow malicious code running within a guest VM to read a small part of hypervisor memory and allow privileged-mode code running within a guest VM to hang or crash the host. SPDX-FileCopyrightText: 2017 Greenbone AG Some te...
Fedora Update for xen FEDORA-2016-bc02bff7f5
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...