23594 matches found
CVE-2025-5473 GIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability
GIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...
CVE-2025-49011
SpiceDB is an open source database for storing and querying fine-grained authorization data. Prior to version 1.44.2, on schemas involving arrows with caveats on the arrow’ed relation, when the path to resolve a CheckPermission request involves the evaluation of multiple caveated branches, reques...
CVE-2025-20261
A vulnerability in the SSH connection handling of Cisco Integrated Management Controller IMC for Cisco UCS B-Series, UCS C-Series, UCS S-Series, and UCS X-Series Servers could allow an authenticated, remote attacker to access internal services with elevated privileges. This vulnerability is due t...
CVE-2025-20129
A vulnerability in the web-based chat interface of Cisco Customer Collaboration Platform CCP, formerly Cisco SocialMiner, could allow an unauthenticated, remote attacker to persuade users to disclose sensitive data. This vulnerability is due to improper sanitization of HTTP requests that are sent...
CVE-2025-5750
WOLFBOX Level 2 EV Charger tuyasvcdevosactivateresultparse Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of WOLFBOX Level 2 EV Charger. Authentication is not required to...
CVE-2025-29873
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: File Station 5...
CVE-2024-13088
An improper authentication vulnerability has been reported to affect QHora. If an attacker gains local network access, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: QuRouter 2.5.0.140 and later...
CVE-2025-5785 TOTOLINK X15 HTTP POST Request formWirelessTbl buffer overflow
A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This issue affects some unknown processing of the file /boafrm/formWirelessTbl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack ma...
CVE-2025-22484
CVE-2025-22484 affects QNAP File Station 5. It is a resource management error caused by unrestricted allocation, which can allow a user with an account to exhaust resources and prevent other systems, applications, or processes from accessing the same resource. Affected versions are prior to 5.5.6...
CVE-2025-29877 File Station 5
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: File Station 5...
CVE-2025-49442
creationtimestamp| type| source ---|---|--- 2025-06-06 15:20:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqx553whgg2r...
CVE-2025-49453
creationtimestamp| type| source ---|---|--- 2025-06-06 15:15:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqx4u5f3hj2r...
CVE-2025-27531
Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 before 2.1.0, this issue would allow an authenticated attacker to read arbitrary files by double writing the param. Users are recommended to upgrade to version 2.1.0, which fixes the...
CVE-2025-38002
creationtimestamp| type| source ---|---|--- 2025-06-06 15:06:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqx4djdbhw2e 2025-06-26 15:52:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19622...
CVE-2025-5782
CVE-2025-5782 concerns PHPGurukul Employee Record Management System v1.3, where the vulnerability is a SQL injection in the /resetpassword.php file via the manipulated newpassword parameter. Descriptions across sources indicate an unknown functionality is affected, with remote exploitation possib...
CVE-2025-5780 code-projects Patient Record Management System view_dental.php sql injection
A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /viewdental.php. The manipulation of the argument itrno leads to sql injection. The attack may be launched remotely. The...
CVE-2025-49449
creationtimestamp| type| source ---|---|--- 2025-06-06 14:56:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqx3rh4vjr2s...
CVE-2025-5779 code-projects Patient Record Management System birthing.php sql injection
A vulnerability has been found in code-projects Patient Record Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /birthing.php. The manipulation of the argument itrno/compid leads to sql injection. The attack can be launched...
CVE-2025-38000
creationtimestamp| type| source ---|---|--- 2025-06-06 13:31:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114636663684698818 2025-06-19 00:33:38+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3lrwbmp62fk2d 2025-07-02 15:38:50+00:00| seen|...