23592 matches found
CVE-2024-41750
IBM SmartCloud Analytics - Log Analysis 1.3.7.0, 1.3.7.1, 1.3.7.2, 1.3.8.0, 1.3.8.1, and 1.3.8.2 could allow a local, authenticated attacker to bypass client-side enforcement of security to manipulate data...
CVE-2025-54294
CVE-2025-54294 describes a SQL injection vulnerability in the StackIdeas Komento component for Joomla, affecting versions 4.0.0–4.0.7. The issue allows unprivileged users to execute arbitrary SQL commands. The cited sources consistently tie the flaw to a SQL injection in Komento’s Joomla integrat...
CVE-2025-27930
Zohocorp ManageEngine Applications Manager versions 176600 and prior are vulnerable to stored cross-site scripting in the File/Directory monitor...
CVE-2025-41683
creationtimestamp| type| source ---|---|--- 2025-07-23 10:41:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lumtgvt52i2i 2025-09-09 20:56:42+00:00| seen| MISP/2bceffac-02c3-4c54-a709-6e253b38ec76...
CVE-2025-48932
creationtimestamp| type| source ---|---|--- 2025-07-23 10:13:13+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lumruhat6b2v 2025-07-23 14:47:59+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lunb7rep3w2d 2025-07-24 09:30:19+00:00| published-proof-of-concep...
CVE-2025-54440
creationtimestamp| type| source ---|---|--- 2025-07-23 07:31:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lumitq3uql2h 2025-07-28 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-657/...
CVE-2025-42947
creationtimestamp| type| source ---|---|--- 2025-07-23 06:58:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lumgyehibz2t 2026-08-13 08:47:29+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0998...
CVE-2025-6215
creationtimestamp| type| source ---|---|--- 2025-07-23 06:30:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lumfg63wyl2w 2025-11-12 11:34:36+00:00| seen| https://threatintel.cc/2025/11/12/update-now-november-patch-tuesday.html 2025-11-12 12:34:28+00:00| seen|...
CVE-2025-6174 WordPress Qwizcards <= 3.9.4 - Reflected XSS
The Qwizcards | online quizzes and flashcards WordPress plugin through 3.9.4 does not sanitise and escape the "stylesheet" parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin or any other user...
CVE-2025-54442
Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0...
CVE-2025-54455
Use of Hard-coded Credentials vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue affects MagicINFO 9 Server: less than 21.1080.0...
CVE-2025-54141
ViewVC is a browser interface for CVS and Subversion version control repositories. In versions 1.1.0 through 1.1.31 and 1.2.0 through 1.2.3, the standalone.py script provided in the ViewVC distribution can expose the contents of the host server's filesystem though a directory traversal-style...
CVE-2025-8034
Memory safety bugs present in Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been...
CVE-2025-8030
Insufficient escaping in the “Copy as cURL” feature could potentially be used to trick a user into executing unexpected code. This vulnerability was fixed in Firefox 141, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1...
CVE-2025-36520
creationtimestamp| type| source ---|---|--- 2025-07-22 15:30:05+00:00| seen| https://infosec.place/objects/25421bc7-dc80-4f89-908d-46367e974cd4...
CVE-2024-13973
creationtimestamp| type| source ---|---|--- 2025-07-22 13:48:46+00:00| seen| https://poliverso.org/objects/0477a01e-605c14d2-887a4e63c671f474 2025-07-23 03:45:08+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lum46iuol22j 2025-07-24 04:33:21+00:00| seen|...
CVE-2025-7952
creationtimestamp| type| source ---|---|--- 2025-07-22 12:24:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114896867677018195...
CVE-2025-7900 Insecure Direct Object Reference in extension "femanager" (femanager)
The femanager extension for TYPO3 allows Insecure Direct Object Reference resulting in unauthorized modification of userdata. This issue affects femanager version 6.4.1 and below, 7.0.0 to 7.5.2 and 8.0.0 to 8.3.0...