6722 matches found
CVE-2025-1368 MicroWord eScan Antivirus mwav.conf ReadConfiguration buffer overflow
A vulnerability was found in MicroWord eScan Antivirus 7.0.32 on Linux. It has been declared as problematic. This vulnerability affects the function ReadConfiguration of the file /opt/MicroWorld/etc/mwav.conf. The manipulation of the argument BasePath leads to buffer overflow. Local access is...
CVE-2025-1376
A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elfstrptr in the library /libelf/elfstrptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The...
CVE-2025-1369
A vulnerability classified as critical was found in MicroWord eScan Antivirus 7.0.32 on Linux. Affected by this vulnerability is an unknown functionality of the component USB Password Handler. The manipulation leads to os command injection. The attack needs to be approached locally. The complexit...
CVE-2025-1356
A vulnerability was found in needyamin Library Card System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file card.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed...
CVE-2025-1352
CVE-2025-1352 concerns GNU elfutils 0.192. The vulnerability affects the __libdw_thread_tail function in eu-readelf (libdw_alloc.c), where manipulation of the w argument leads to memory corruption. Nessus/NVD entries describe remote exploitation with high complexity and publicly disclosed exploit...
CVE-2024-11345
A heap-based memory vulnerability has been identified in the Postscript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code...
CVE-2024-12012
A CWE-598 “Use of GET Request Method with Sensitive Query Strings” was discovered affecting the 130.8005 TCP/IP Gateway running firmware version 12h. Both the SHA-1 hash of the password as well as the session tokens are included as part of the URL and therefore exposed to information leakage...
CVE-2025-0822
CVE-2025-0822 : The Bit Assist WordPress plugin is vulnerable to a path traversal issue via the fileID parameter, allowing authenticated users with Subscriber+ privileges to read arbitrary server files. Affected: Bit Assist plugin versions up to and including 1.5.2. Impact: potential exposure of ...
CVE-2025-0327
CWE-269: Improper Privilege Management vulnerability exists for two services of which one managing audit trail data and the other acting as server managing client request that could cause a loss of Confidentiality, Integrity and Availability of engineering workstation when an attacker with standa...
CVE-2025-0593
The vulnerability may allow a remote low priviledged attacker to run arbitrary shell commands by using lower-level functions to interact with the device...
CVE-2025-25288
creationtimestamp| type| source ---|---|--- 2025-02-14 17:27:30+00:00| published-proof-of-concept| https://github.com/octokit/plugin-paginate-rest.js/security/advisories/GHSA-h5c3-5r3r-rr8q 2025-02-14 19:40:18+00:00| seen| https://infosec.exchange/users/cve/statuses/114003936399738557 2025-02-14...
CVE-2025-24699
creationtimestamp| type| source ---|---|--- 2025-02-14 13:18:27+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5c3crzer24 2025-02-14 15:45:27+00:00| seen| https://t.me/cvedetector/18087 2025-02-14 16:08:55+00:00| seen|...
CVE-2025-24567
WP Mailster (WordPress plugin) is affected up to version 1.8.16.0 by CVE-2025-24567, described as Insertion of Sensitive Information Into Sent Data that allows retrieval of embedded sensitive data. The vulnerability affects WP Mailster: from n/a through 1.8.16.0. The provided sources consistently...
CVE-2024-13532
The Small Package Quotes – Purolator Edition plugin for WordPress is vulnerable to SQL Injection via the 'editid' and 'dropshipeditid' parameters in all versions up to, and including, 3.6.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...
CVE-2024-13701
The Liveticker by stklcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'liveticker' shortcode in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2024-54160
dashboards-reporting aka Dashboards Reports before 2.19.0.0, as shipped in OpenSearch before 2.19, allows XSS because Markdown is not sanitized when previewing a header or footer...
CVE-2025-26791
DOMPurify is affected by an mXSS flaw in which an incorrect template-literal regular expression in versions before 3.2.4 can lead to mutation cross-site scripting. The CVE-2025-26791 entry is referenced across IBM notices for IBM Db2 Data Management Console, IBM Watson-related products, and other...
CVE-2024-35557
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/vpsApideal.php?mudi=rev=close...
CVE-2025-0937
A flaw was discovered in Hashicorp Nomad. In affected versions of this package, the vulnerability is exploitable when reading from the event stream endpoint with a wildcard namespace, which can be used to bypass the ACL policy checks that would not otherwise permit access to a given namespace due...