10495 matches found
CVE-2025-48944 vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm, py3.10-vllm-cuda-11.8...
CVE-2025-48887 vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm, py3.10-vllm-cuda-11.8...
CVE-2025-5695
A vulnerability has been found in Teledyne FLIR AX8 up to 1.46.16. This impacts the function subscribetospot/subscribetodelta/subscribetoalarm of the file /usr/www/application/models/subscriptions.php of the component Backend. Such manipulation leads to command injection. It is possible to launch...
CVE-2025-5695
Concluded: CVE-2025-5695 affects Teledyne FLIR AX8 Backend, specifically the subscribe_to_spot/subscribe_to_delta/subscribe_to_alarm paths in /usr/www/application/models/subscriptions.php. Root cause described as command injection that can be triggered remotely over the network; exploitation is d...
CVE-2025-5695 Teledyne FLIR AX8 Backend subscriptions.php subscribe_to_alarm command injection
A vulnerability has been found in Teledyne FLIR AX8 up to 1.46.16. This impacts the function subscribetospot/subscribetodelta/subscribetoalarm of the file /usr/www/application/models/subscriptions.php of the component Backend. Such manipulation leads to command injection. It is possible to launch...
CVE-2025-49009
Para is a multitenant backend server/framework for object persistence and retrieval. A vulnerability that exists in versions prior to 1.50.8 in FacebookAuthFilter.java results in a full request URL being logged during a failed request to a Facebook user profile. The log includes the user's access...
CVE-2025-5512
A vulnerability, which was classified as critical, was found in quequnlong shiyi-blog up to 1.2.1. Affected is an unknown function of the file /api/sys/user/verifyPassword/ of the component Administrator Backend. The manipulation leads to improper authentication. It is possible to launch the atta...
BIT-JOOMLA-2024-27187 [20240804] - Core - Improper ACL for backend profile view
Improper Access Controls allows backend users to overwrite their username when disallowed...
Teledyne FLIR AX8 命令注入漏洞
Teledyne FLIR AX8 is a series of thermal surveillance cameras from Teledyne FLIR USA. A command injection vulnerability exists in Teledyne FLIR AX8 version 1.46.16 and earlier, which stems from a command injection in the file /usr/www/application/models/subscriptions.php in the component Backend...
para 日志信息泄露漏洞
para is a multi-tenant backend server open-sourced by Erudika for rapidly building web and mobile applications. A log information disclosure vulnerability exists in versions prior to para 1.50.8, which stems from explicit logging of access tokens in the logs, which could lead to token disclosure...
CVE-2025-5512 quequnlong shiyi-blog Administrator Backend verifyPassword improper authentication
A vulnerability, which was classified as critical, was found in quequnlong shiyi-blog up to 1.2.1. Affected is an unknown function of the file /api/sys/user/verifyPassword/ of the component Administrator Backend. The manipulation leads to improper authentication. It is possible to launch the atta...
GHSA-WC36-9694-F9RF vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm...
CVE-2024-8768 vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm...
CVE-2024-9053 vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm...
GHSA-5VQR-WPRC-CPP7 vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm...
GHSA-CJ47-QJ6G-X7R4 vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm...
CVE-2024-8939 vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm...
GHSA-W2R7-9579-27HF vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm...
CVE-2025-48955
Para is a multitenant backend server/framework for object persistence and retrieval. A vulnerability that exists in versions prior to 1.50.8 exposes both access and secret keys in logs without redaction. These credentials are later reused in variable assignments for persistence but do not require...
CVE-2025-48955 Para Server Logs Sensitive Information
Para is a multitenant backend server/framework for object persistence and retrieval. A vulnerability that exists in versions prior to 1.50.8 exposes both access and secret keys in logs without redaction. These credentials are later reused in variable assignments for persistence but do not require...