6722 matches found
CVE-2025-26336
Dell Chassis Management Controller Firmware for Dell PowerEdge FX2, versions prior to 2.40.200.202101130302, and Dell Chassis Management Controller Firmware for Dell PowerEdge VRTX versions prior to 3.41.200.202209300499, contains a Stack-based Buffer Overflow vulnerability. An unauthenticated...
CVE-2025-2639 JIZHICMS Article release.html improper authorization
A vulnerability has been found in JIZHICMS up to 1.7.0 and classified as problematic. This vulnerability affects unknown code of the file /user/release.html of the component Article Handler. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has be...
CVE-2025-2638
A vulnerability, which was classified as problematic, was found in JIZHICMS up to 1.7.0. This affects an unknown part of the file /user/release.html of the component Article Handler. The manipulation of the argument ishot with the input 1 leads to improper authorization. It is possible to initiat...
CVE-2025-2637
A vulnerability, which was classified as problematic, has been found in JIZHICMS up to 1.7.0. Affected by this issue is some unknown functionality of the file /user/userinfo.html of the component Account Profile Page. The manipulation of the argument jifen leads to improper authorization. The...
CVE-2025-2331
creationtimestamp| type| source ---|---|--- 2025-03-22 13:39:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkxtz7vlr62w 2025-03-22 14:33:19+00:00| seen| https://t.me/cvedetector/20867...
CVE-2024-10955
A Regular Expression Denial of Service ReDoS vulnerability exists in gaizhenbiao/chuanhuchatgpt, as of commit 20b2e02. The server uses the regex pattern r'+' to parse user input. In Python's default regex engine, this pattern can take polynomial time to match certain crafted inputs. An attacker c...
CVE-2025-26796
CVE-2025-26796 concerns Apache Oozie, stating a Cross-site Scripting (XSS) vulnerability caused by improper neutralization of input during web page generation. The vulnerability affects Apache Oozie across all versions and, per the sources, the project is retired with no planned patch; users are ...
CVE-2024-8053
In version v0.3.10 of open-webui/open-webui, the api/v1/utils/pdf endpoint lacks authentication mechanisms, allowing unauthenticated attackers to access the PDF generation service. This vulnerability can be exploited by sending a POST request with an excessively large payload, potentially leading...
CVE-2025-23382
Dell Secure Connect Gateway SCG 5.0 Appliance - SRS, versions 5.26, contains an Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.c...
CVE-2025-2591
The CVE-2025-2591 issue affects Open Asset Import Library Assimp 5.4.3, specifically MDLImporter::InternReadFile_Quake1 in code/AssetLib/MDL/MDLLoader.cpp. Manipulating skinwidth/skinheight can cause a divide-by-zero. The vulnerability can be triggered remotely, and public exploit details have be...
CVE-2024-6827
A flaw was found in Gunicorn. This vulnerability allows request smuggling, leading to cache poisoning, data exposure, session manipulation, Server-side request forgery SSRF, Cross-site scripting XSS, denial of service DoS, data integrity compromise, security bypass, and information leakage via...
CVE-2025-30179
creationtimestamp| type| source ---|---|--- 2025-03-21 11:48:00+00:00| seen| https://t.me/cvedetector/20802 2025-03-21 13:23:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkvcp4qzu22s...
CVE-2025-27933
creationtimestamp| type| source ---|---|--- 2025-03-21 11:48:00+00:00| seen| https://t.me/cvedetector/20801 2025-03-21 13:23:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkvcp4y5gj2n...
CVE-2024-35186 vulnerabilities
Vulnerabilities for packages: cargo-audit...
CVE-2025-0317
A flaw was found in Ollama. This vulnerability allows a malicious user to upload and create a customized GGUF model file on the Ollama server, leading to a division by zero error in the ggufPadding function. This causes the server to crash, resulting in a denial of service DoS attack. Mitigation...
CVE-2024-13903
A vulnerability was found in quickjs-ng QuickJS up to 0.8.0. It has been declared as problematic. Affected by this vulnerability is the function JSGetRuntime of the file quickjs.c of the component qjs. The manipulation leads to stack-based buffer overflow. The attack can be launched remotely...
CVE-2025-29807 Microsoft Dataverse Remote Code Execution Vulnerability
...
CVE-2025-2548 D-Link DIR-618/DIR-605L formSetDomainFilter access control
A vulnerability, which was classified as problematic, was found in D-Link DIR-618 and DIR-605L 2.02/3.02. Affected is an unknown function of the file /goform/formSetDomainFilter. The manipulation leads to improper access controls. The attack can only be initiated within the local network. The...
CVE-2025-2546 D-Link DIR-618/DIR-605L Firewall Service formAdvFirewall access control
A vulnerability classified as problematic was found in D-Link DIR-618 and DIR-605L 2.02/3.02. This vulnerability affects unknown code of the file /goform/formAdvFirewall of the component Firewall Service. The manipulation leads to improper access controls. The attack needs to be approached within...