23592 matches found
CVE-2024-42048
OpenOrange Business Framework v1.15.5 permits unprivileged write access to its installation directory, enabling DLL hijacking due to loading DLLs from that path. This could lead to arbitrary code execution and privilege escalation, per CVE-2024-42048 and linked sources. No remediation details are...
CVE-2025-55138
LinkJoin through 882f196 mishandles token ownership in password reset...
CVE-2025-29745
creationtimestamp| type| source ---|---|--- 2025-08-06 21:02:26+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lvr4oabhcc2f...
CVE-2025-48393
creationtimestamp| type| source ---|---|--- 2025-08-06 18:06:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvqst3tcgn2q...
CVE-2025-20331 Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabiliy
A vulnerability in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based managemen...
CVE-2025-46391
Technical details about CVE-2025-46391 are not publicly provided in the supplied documents; no product/version/impact specifics are available. Monitor for updates.
CVE-2025-46386
CWE-639 Authorization Bypass Through User-Controlled Key...
CVE-2025-47324
Information disclosure while accessing and modifying the PIB file of a remote device via powerline...
CVE-2025-21477
Transient DOS while processing CCCH data when NW sends data with invalid length...
CVE-2025-47324
creationtimestamp| type| source ---|---|--- 2025-08-06 07:52:58+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lvpqkjqlim2h...
CVE-2025-27071 Buffer Copy Without Checking Size of Input in Powerline Communication Firmware
Memory corruption while processing specific files in Powerline Communication Firmware...
CVE-2025-20990
The CVE-2025-20990 entry concerns improper access control when accessing a system device node, enabling local attackers to obtain the device identifier. Connected sources indicate the issue affects Samsung mobile devices (prior to SMR Aug-2025 Release 1). A concrete remediation is available: upda...
CVE-2025-7399 Betheme <= 28.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via an Elementor display setting in all versions up to, and including, 28.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access...
CVE-2025-54633
Out-of-bounds read vulnerability in the register configuration of the DMA module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-54632
Vulnerability of insufficient data length verification in the HVB module. Impact: Successful exploitation of this vulnerability may affect service integrity...
CVE-2025-8612
creationtimestamp| type| source ---|---|--- 2025-08-06 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-806/...
CVE-2025-54637
Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-54633
Out-of-bounds read vulnerability in the register configuration of the DMA module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-54629
Race condition issue occurring in the physical page import process of the memory management module. Impact: Successful exploitation of this vulnerability may affect service integrity...