6722 matches found
CVE-2025-27832
An issue was discovered in Artifex Ghostscript before 10.05.0. The NPDL device has a Compression buffer overflow for contrib/japanese/gdevnpdl.c...
CVE-2025-2750
A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of the component CSM File Handler. The manipulation leads to out-of-bounds write. It is...
CVE-2025-2721
Last updated 25 March 2025...
CVE-2025-2753
A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as critical. Affected is the function SceneCombiner::MergeScenes of the file code/AssetLib/LWS/LWSLoader.cpp of the component LWS File Handler. The manipulation leads to out-of-bounds read. It is possible ...
CVE-2024-42533
SQL injection vulnerability in the authentication module in Convivance StandVoice 4.5 through 6.2 allows remote attackers to execute arbitrary code via the GESTLOGIN parameter...
CVE-2025-25371
NASA cFS Core Flight System Aquila is vulnerable to path traversal in the OSAL module, allowing the override of any arbitrary file on the system...
CVE-2025-2720
The CVE-2025-2720 entry has technical detail in a connected document: it describes a vulnerability in GNOME libgsf affecting the gsf_base64_encode_simple function. The issue arises from local-access exploitation where manipulating the size argument can cause use of an uninitialized variable. Reme...
CVE-2025-2711
A vulnerability was found in Yonyou UFIDA ERP-NC 5.0. It has been classified as problematic. Affected is an unknown function of the file /help/systop.jsp. The manipulation of the argument langcode leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...
CVE-2025-2708 zhijiantianya ruoyi-vue-pro Backend File Upload Interface upload path traversal
A vulnerability, which was classified as critical, was found in zhijiantianya ruoyi-vue-pro 2.4.1. This affects an unknown part of the file /admin-api/infra/file/upload of the component Backend File Upload Interface. The manipulation of the argument path leads to path traversal. It is possible to...
CVE-2025-29778 Kyverno ignores subjectRegExp and IssuerRegExp
Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to version 1.14.0-alpha.1, Kyverno ignores subjectRegExp and IssuerRegExp while verifying artifact's sign with keyless mode. It allows the attacker to deploy kubernetes resources with the artifacts that were...
CVE-2025-30565
Cross-Site Request Forgery CSRF vulnerability in karrikas banner-manager banner-manager allows Stored XSS.This issue affects banner-manager: from n/a through = 16.04.19...
CVE-2025-30605 WordPress sourceplay-navermap plugin <= 0.0.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in ldwin79 sourceplay-navermap sourceplay-navermap allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects sourceplay-navermap: from n/a through = 0.0.2...
CVE-2025-30558 WordPress ANAC XML Render plugin <= 1.5.7 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in EnzoCostantini55 ANAC XML Render anac-xml-render allows Stored XSS.This issue affects ANAC XML Render: from n/a through = 1.5.7...
CVE-2024-13124 Photo Gallery by 10Web < 1.8.33 - Admin+ Stored XSS
The Photo Gallery by 10Web WordPress plugin before 1.8.33 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2024-10558
CVE-2024-10558 concerns the WordPress plugin Form Maker by 10Web. Multiple connected sources confirm a stored XSS risk in admin-level or high-privilege user settings due to incomplete sanitization/escaping of certain settings, potentially allowing an admin (or similarly privileged user) to execut...
CVE-2025-2681
A vulnerability was found in PHPGurukul Bank Locker Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /edit-locker.php?ltid=6. The manipulation of the argument lockersize leads to sql injection. The attack may be launched...
CVE-2025-2677
creationtimestamp| type| source ---|---|--- 2025-03-24 04:11:16+00:00| seen| https://t.me/cvedetector/20928 2025-03-24 04:24:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll3vwl2b2s24...
CVE-2025-2675
creationtimestamp| type| source ---|---|--- 2025-03-24 02:31:04+00:00| published-proof-of-concept| Telegram/TxYF2rNxgao0QlSERqOAIAGczvgtgedogrr1QU2ew4YiRfY 2025-03-24 04:11:17+00:00| seen| https://t.me/cvedetector/20930 2025-03-24 04:23:58+00:00| seen|...
CVE-2025-2665
creationtimestamp| type| source ---|---|--- 2025-03-24 00:00:32+00:00| seen| https://t.me/cvedetector/20920 2025-03-24 02:18:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll3owtuqp726...
