6722 matches found
CVE-2005-2812
man2web allows remote attackers to execute arbitrary commands via -P arguments...
CVE-2009-5075
Monkey's Audio before 4.02 allows remote attackers to cause a denial of service application crash via a malformed APE file...
CVE-1999-0300
niscachemgr for Solaris NIS+ allows attackers to add malicious NIS+ servers...
CVE-2025-48060
jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-buffer-overflow is present in function jvstringvfmt in the jqfuzzexecute harness from oss-fuzz. This crash happens on file jv.c, line 1456 void p = mallocsz;. As of time of publication, no patched versions are...
CVE-1999-0075
PASV core dump in wu-ftpd daemon when attacker uses a QUOTE PASV command after specifying a username and password...
CVE-1999-0021
Arbitrary command execution via buffer overflow in Count.cgi wwwcount cgi-bin program...
CVE-2025-48207
creationtimestamp| type| source ---|---|--- 2025-05-21 17:18:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpp4anl3uo2p 2025-05-21 19:42:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17175...
CVE-2025-20256 Cisco Secure Network Analytics Manager Server-Side Template Injection Vulnerability
A vulnerability in the web-based management interface of Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager could allow an authenticated, remote attacker with valid administrative credentials to execute arbitrary commands as root on the underlying operating...
CVE-2024-23337
jq is a command-line JSON processor. In versions up to and including 1.7.1, an integer overflow arises when assigning value using an index of 2147483647, the signed integer limit. This causes a denial of service. Commit de21386681c0df0104a99d9d09db23a9b2a78b1e contains a patch for the issue...
Security Bulletin: Vulnerability in jsonpath-plus affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.
Summary Potential vulnerability in jsonpath-plus has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...
CVE-2025-1421
Data provided in a request performed to the server while activating a new device are put in a database. Other high privileged users might download this data as a CSV file and corrupt their PC by opening it in a tool such as Microsoft Excel. The attacker could gain remote access to the user's PC...
CVE-2025-48414 Hard-coded web interface credentials in eCharge Hardy Barth cPH2 / cPP2 charging stations
There are several scripts in the web interface that are accessible via undocumented hard-coded credentials. The scripts provide access to additional administrative/debug functionality and are likely intended for debugging during development and provides an additional attack surface...
CVE-2025-37922
No description is available for this CVE...
CVE-2025-25539
Local File Inclusion vulnerability in Vasco v3.14and before allows a remote attacker to obtain sensitive information via help menu...
CVE-2024-42922
AAPanel v7.0.7 was discovered to contain an OS command injection vulnerability...
CVE-2025-44895
FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the ipv4Aclkey parameter in the webaclipv4BasedAceAdd function...
CVE-2025-4851
A vulnerability classified as critical was found in TOTOLINK N300RH 6.1c.1390B20191101. This vulnerability affects the function setUploadUserData of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName leads to command injection. The attack can be initiated remotely. The explo...
CVE-2025-44882
creationtimestamp| type| source ---|---|--- 2025-05-20 23:13:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpn7mqhrbl2p...
CVE-2025-30193
No description is available for this CVE...
CVE-2025-5001 GNU PSPP pspp-convert.c calloc integer overflow
A vulnerability was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. It has been declared as problematic. This vulnerability affects the function calloc of the file pspp-convert.c. The manipulation of the argument -l leads to integer overflow. Local access is required to approach this...