CVE-1999-0074

Listening TCP ports are sequentially allocated, allowing spoofing attacks...

CVE-1999-0047

MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4...

CVE-1999-0227

Access violation in LSASS.EXE LSA/LSARPC program in Windows NT allows a denial of service...

CVE-1999-0218

Livingston portmaster machines could be rebooted via a series of commands...

CVE-2025-48069

CVE-2025-48069 affects the ejson2env tool (Shopify) prior to version 2.0.8, where stdout writes are not adequately sanitized. The vulnerability permits variable names or values in decrypted EJSON to inject additional commands when the exported environment variables are evaluated or sourced, poten...

CVE-2025-48060

jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-buffer-overflow is present in function jvstringvfmt in the jqfuzzexecute harness from oss-fuzz. This crash happens on file jv.c, line 1456 void p = mallocsz;. As of time of publication, no patched versions are...

CVE-2025-5033

CVE-2025-5033 affects XiaoBingby TeaCMS 2.0.2. The vulnerability is in an unknown functionality of src/main/java/me/teacms/controller/admin/UserManageController/addUser, leading to cross-site request forgery (CSRF). It can be triggered remotely and an exploit has been disclosed publicly. Multiple...

CVE-2025-48206

creationtimestamp| type| source ---|---|--- 2025-05-21 17:18:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpp4anyvkp2n 2025-05-21 20:41:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17201...

CVE-2025-27998

creationtimestamp| type| source ---|---|--- 2025-05-21 17:18:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpp4anrufq2h...

CVE-2025-20257

A vulnerability in an API subsystem of Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager could allow an authenticated, remote attacker with low privileges to generate fraudulent findings that are used to generate alarms and alerts on an affected product. Th...

CVE-2025-20267

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the...

CVE-2025-20250

A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack. A vulnerability is due to improper filtering of user-supplied input. An attacker could exploit this vulnerability by persuading a user to follow a malicious link. A...

CVE-2025-20114

A vulnerability in the API of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to perform a horizontal privilege escalation attack on an affected system. This vulnerability is due to insufficient validation of user-supplied parameters in API requests. An attacker...

CVE-2025-0372

CVE-2025-0372 describes a race condition in HYPR Passwordless on Windows caused by improper synchronization when using shared resources. The vulnerability affects HYPR Passwordless versions before 10.1 and enables privilege escalation with a local attack vector. The CVSS data indicates low confid...

CVE-2025-20242

creationtimestamp| type| source ---|---|--- 2025-05-21 16:41:25+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17137 2025-05-21 18:39:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114547277430416464...

CVE-2025-39353

Missing Authorization vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Grand Restaurant: from n/a through = 7.0...

CVE-2025-24184

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, tvOS 18.3, visionOS 2.3, watchOS 11.3. An app may be able to cause unexpected system termination...

CVE-2025-20242

The CVE-2025-20242 entry concerns Cisco Unified Contact Center Enterprise (CCE) Cloud Connect. The vulnerability arises from insufficient authentication controls in the Cloud Connect component, enabling an unauthenticated, network-based attacker to read and modify data on an affected device by se...

CVE-2025-20114 Cisco Unified Intelligence Center Insecure Direct Object Reference Vulnerability

A vulnerability in the API of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to perform a horizontal privilege escalation attack on an affected system. This vulnerability is due to insufficient validation of user-supplied parameters in API requests. An attacker...

CVE-2025-20152 ISE restart

A vulnerability in the RADIUS message processing feature of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper handling of certain RADIUS requests. An attacker...