23602 matches found
CVE-2025-47907
Cancelling a query e.g. by cancelling the context passed to one of the query methods during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with...
CVE-2025-43867
creationtimestamp| type| source ---|---|--- 2025-08-07 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-219-02...
CVE-2024-26189
creationtimestamp| type| source ---|---|--- 2025-08-07 02:21:03+00:00| seen| https://bsky.app/profile/nihonmatsu.bsky.social/post/3lvrohwexas2s 2025-08-07 02:21:03+00:00| seen| https://bsky.app/profile/nihonmatsu.bsky.social/post/3lvrohu2y2s2s 2025-08-07 02:21:04+00:00| seen|...
CVE-2025-8576
Use after free in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension. Chromium security severity: Medium...
CVE-2025-8579
Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...
CVE-2025-8583
Inappropriate implementation in Permissions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...
CVE-2025-54783
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Versions 7.14.6 and below have a Reflected Cross-Site Scripting XSS vulnerability. This vulnerability allows an attacker to execute JavaScript code by modifying the HTTP Referer header to inclu...
CVE-2025-54799
A flaw was found in github.com/go-acme/lego. The LEGO ACME client and library fail to enforce HTTPS communication when interacting with Certificate Authorities, allowing unencrypted data transmission. This vulnerability allows a malicious Certificate Authority or intermediary to intercept and...
CVE-2025-54387
IPX is an image optimizer powered by sharp and svgo. In versions 1.3.1 and below, 2.0.0-0 through 2.1.0, and 3.0.0 through 3.1.0, the approach used to check whether a path is within allowed directories is vulnerable to path prefix bypass when the allowed directories do not end with a path...
CVE-2025-50675
GPMAW 14/14.2 is affected by a local, privilege-escalation vulnerability due to insecure default permissions in the installation directory (C:\Program Files\gpmaw). The directory allows full read/write/execute access for Everyone, enabling a non-privileged user to replace or modify critical compo...
CVE-2024-42048
OpenOrange Business Framework v1.15.5 permits unprivileged write access to its installation directory, enabling DLL hijacking due to loading DLLs from that path. This could lead to arbitrary code execution and privilege escalation, per CVE-2024-42048 and linked sources. No remediation details are...
CVE-2025-55138
LinkJoin through 882f196 mishandles token ownership in password reset...
CVE-2025-29745
creationtimestamp| type| source ---|---|--- 2025-08-06 21:02:26+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lvr4oabhcc2f...
CVE-2025-48393
creationtimestamp| type| source ---|---|--- 2025-08-06 18:06:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvqst3tcgn2q...
CVE-2025-20331 Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabiliy
A vulnerability in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based managemen...
CVE-2025-46391
Technical details about CVE-2025-46391 are not publicly provided in the supplied documents; no product/version/impact specifics are available. Monitor for updates.
CVE-2025-46386
CWE-639 Authorization Bypass Through User-Controlled Key...
CVE-2025-47324
Information disclosure while accessing and modifying the PIB file of a remote device via powerline...