Linux Distros Unpatched Vulnerability : CVE-2019-25591

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DNSS Domain Name Search Software 2.1.8 contains a buffer overflow vulnerability in the registration code input field that allows local attackers to crash the...

CVE-2019-25591 DNSS Domain Name Search Software 2.1.8 Denial of Service

DNSS Domain Name Search Software 2.1.8 contains a buffer overflow vulnerability in the registration code input field that allows local attackers to crash the application by submitting an excessively long string. Attackers can trigger a denial of service by pasting a malicious registration code...

CVE-2026-25591 New API has an SQL LIKE Wildcard Injection DoS via Token Search

New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to version 0.10.8-alpha.10, a SQL LIKE wildcard injection vulnerability in the /api/token/search endpoint allows authenticated users to cause denial of service through resource exhaustion by...

CVE-2026-25591

Summary of CVE-2026-25591 (from connected advisory): A SQL LIKE wildcard injection in the authenticated endpoint /api/token/search allows crafted patterns to cause resource exhaustion and DoS by forcing expensive queries. The vulnerable code directly concatenates user-supplied keyword and token i...

CVE-2026-25591

creationtimestamp| type| source ---|---|--- 2026-02-22 15:59:14+00:00| published-proof-of-concept| https://github.com/QuantumNous/new-api/security/advisories/GHSA-w6x6-9fp7-fqm4 2026-02-24 09:00:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mflsjc6zzn2u 2026-02-24...

CVE-2024-25591

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Benjamin Rojas WP Editor.This issue affects WP Editor: from n/a through 1.2.7...

CVE-2022-25591

BlogEngine.NET v3.3.8.0 was discovered to contain an arbitrary file deletion vulnerability which allows attackers to delete files within the web server root directory via a crafted HTTP request...

CVE-2023-25591

creationtimestamp| type| source ---|---|--- 2025-02-27 15:29:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5685...

CVE-2024-25591

creationtimestamp| type| source ---|---|--- 2024-03-17 18:21:38+00:00| seen| https://t.me/ctinow/210007 2024-03-17 18:26:48+00:00| seen| https://t.me/ctinow/210014...

CVE-2024-25591

Summary: CVE-2024-25591 affects the WordPress plugin WP Editor (versions

CVE-2023-25591

CVE-2023-25591 affects Aruba ClearPass Policy Manager Web-Based Management Interface. An attacker authenticated with low privileges could access sensitive information via the management UI, enabling potential privilege escalation. The issue is documented across multiple feeds (NVD, CVE listings, ...

CVE-2020-25591

CVE-2020-25591 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2020-25591

...

CVE-2022-25591

BlogEngine.NET v3.3.8.0 was discovered to contain an arbitrary file deletion vulnerability which allows attackers to delete files within the web server root directory via a crafted HTTP request...

CVE-2022-25591

BlogEngine.NET v3.3.8.0 is affected by an arbitrary file deletion vulnerability that allows an attacker to delete files in the web server root via a crafted HTTP request. The description confirms the affected software and the specific destructive action, but the available documents do not specify...

Logic flaw vulnerability in Liangjing Mall online store shopping system (CNVD-2020-25591)

Liangjing Mall Online Shop Shopping System is a multifunctional online store system. There is a logic flaw vulnerability in Liang Jing Mall Online Shop Shopping System, which can be exploited by attackers to modify the transaction amount...