1052 matches found
CVE-2025-2335 Drivin Soluções API registerSchool cross site scripting
A vulnerability classified as problematic was found in Drivin Soluções up to 20250226. This vulnerability affects unknown code of the file /api/school/registerSchool of the component API Handler. The manipulation of the argument message leads to cross site scripting. The attack can be initiated...
BELL-CVE-2025-1217
Bulletin has no description...
CVE-2025-29030
Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formWifiWpsOOB function...
CVE-2024-9042
CVE-2024-9042 affects Windows worker nodes in Kubernetes environments (vulnerability in kubelet/related components). Root cause: improper input validation (CWE-20). Impact as stated: potential confidentiality and integrity impact (C present; no availability impact) with CVSSv3.1 base score 5.9 (v...
BELL-CVE-2024-58087
Bulletin has no description...
CVE-2020-36843
The implementation of EdDSA in EdDSA-Java aka ed25519-java through 0.3.0 exhibits signature malleability and does not satisfy the SUF-CMA Strong Existential Unforgeability under Chosen Message Attacks property. This allows attackers to create new valid signatures different from previous signature...
CVE-2025-2240
A flaw was found in Smallrye, where smallrye-fault-tolerance is vulnerable to an out-of-memory OOM issue. This vulnerability is externally triggered when calling the metrics URI. Every call creates a new object within meterMap and may lead to a denial of service DoS issue. Mitigation Red Hat has...
CVE-2025-27792 Opal vulnerable to CSRF protection bypass
Opal is OBiBa’s core database application for biobanks or epidemiological studies. Prior to version 5.1.1, the protections against cross-site request forgery CSRF were insufficient application-wide. The referrer header is checked, and if it is invalid, the server returns 403. However, the referre...
CVE-2025-266277
creationtimestamp| type| source ---|---|--- 2025-03-11 17:45:19+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0081...
CVE-2025-27602 Umbraco Allows a Restricted Editor User to Delete Media Item or Access Unauthorized Content
Umbraco is a free and open source .NET content management system. In versions of Umbraco's web backoffice program prior to versions 10.8.9 and 13.7.1, via manipulation of backoffice API URLs, it's possible for authenticated backoffice users to retrieve or delete content or media held within folde...
CVE-2025-23396
creationtimestamp| type| source ---|---|--- 2025-03-11 11:35:14+00:00| seen| Telegram/euipiHO9WYwKjoIWc4KVD8IVMVysdONt8NOtM0tUvNLxBg 2025-03-11 13:26:59+00:00| seen| https://t.me/cvedetector/20081 2025-03-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-072-01...
CVE-2025-27436
CVE-2025-27436 affects SAP S/4HANA: Manage Bank Statements allows an authenticated user to delete the attachment of a posted bank statement due to missing access-control checks. Impact is low on integrity with no confidentiality or availability impact. Root cause described as insufficient authori...
CVE-2025-26701
CVE-2025-26701 (Percona PMM Server, OVA) affects PMM Server images prior to 3.0.0-1.ova. The issue arises from default service account credentials, enabling SSH access and the use of sudo to gain root privileges, which can lead to exposure of sensitive data. Public references indicate fixes in PM...
CVE-2025-27615 umatiGateway's UI publicly accessible in provided docker-compose file
umatiGateway is software for connecting OPC Unified Architecture servers with an MQTT broker utilizing JSON messages. The user interface may possibly be publicly accessible with umatiGateway's provided docker-compose file. With this access, the configuration can be viewed and altered. Commit...
CVE-2025-21840
In the Linux kernel, the following vulnerability has been resolved: thermal/netlink: Prevent userspace segmentation fault by adjusting UAPI header The intel-lpmd tool 1, which uses the THERMALGENLATTRCPUCAPABILITY attribute to receive HFI events from kernel space, encounters a segmentation fault...
CVE-2025-27646
Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.913 Application 20.0.2253 allows Edit User Account Exposure V-2024-001...
Linux Distros Unpatched Vulnerability : CVE-2021-47393
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: hwmon: mlxreg-fan Return non-zero value when fan current state is enforced from sysfs Fan...
CVE-2024-30154
creationtimestamp| type| source ---|---|--- 2025-03-03 18:35:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6249 2025-03-03 20:49:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljit7asamz26 2025-03-03 21:24:40+00:00| seen| https://t.me/cvedetector/19401...