2853 matches found
CVE-2025-8858
CVE-2025-8858 concerns the Clinic Image System developed by Changing. The connected documents confirm a SQL Injection vulnerability that enables unauthenticated remote attackers to inject arbitrary SQL to read database contents. No explicit affected versions or fixed/patch information are provide...
CVE-2025-8861 Changing｜TSA - Missing Authentication
TSA developed by Changing has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents...
CVE-2025-8861 Changing｜TSA - Missing Authentication
TSA developed by Changing has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents...
CVE-2025-8861
CVE-2025-8861 concerns Changing TSA, a timestamp server product, with a Missing Authentication vulnerability that allows unauthenticated remote attackers to read, modify, and delete database contents. The underlying issue is an access-control flaw (lack of authentication). The connected documents...
PT-2025-35243
Name of the Vulnerable Software and Affected Versions: Diebold Nixdorf Vynamic Security Suite versions through 4.3.0 SR01 Description: Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR01 does not validate file attributes or the contents of the /root directory during integrity validation. Th...
PT-2025-35180
Name of the Vulnerable Software and Affected Versions: TSA developed by Changing affected versions not specified Description: TSA developed by Changing is susceptible to a missing authentication issue. This allows unauthenticated remote attackers to read, modify, and delete database contents...
Changing TSA 访问控制错误漏洞
Changing TSA is a timestamp server from Panorama Changing Corporation in Taiwan, China. Changing TSA suffers from an Access Control Error vulnerability that stems from a lack of authentication, which could allow an unauthenticated, remote attacker to read, modify, and delete database contents...
CVE-2024-46917
Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR01 does not validate file attributes or the contents of /root during integrity validation. This allows code execution, recovery of TPM Disk Encryption keys, decryption of the Windows system partition, and full control of the Windows OS, e.g.,...
Linux Distros Unpatched Vulnerability : CVE-2022-31160
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jQuery UI is a curated set of user interface interactions, effects, widgets, and themes built on top of jQuery. Versions prior to 1.13.2 are potentially...
CVE-2025-9255
WebITR developed by Uniong has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...
Astra Linux – Vulnerability in binutils
A vulnerability, classified as problematic, has been discovered in GNU Binutils 2.45. The affected function is bfdelfsetgroupcontents in the file bfd/elf.c. This manipulation leads to out-of-bounds writing. The attack can be launched on the local host. The exploit has been disclosed to the public...
CVE-2025-9255
WebITR by Uniong is affected by a SQL injection vulnerability that allows unauthenticated remote attackers to inject arbitrary SQL commands and read database contents. The available documents consistently describe this as a SQL injection issue in the WebITR system, without providing concrete deta...
CVE-2025-9255 Uniong｜WebITR - SQL Injection
WebITR developed by Uniong has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...
CVE-2025-55746 Directus allows unauthenticated file upload and file modification due to lacking input sanitization
Directus is a real-time API and App dashboard for managing SQL database content. From 10.8.0 to before 11.9.3, a vulnerability exists in the file update mechanism which allows an unauthenticated actor to modify existing files with arbitrary contents without changes being applied to the files'...
Sensitive Information Disclosure
org.opensearch.plugin:opensearch-security is vulnerable to Sensitive Information Disclosure. The vulnerability is due to improper enforcement of Field Level Security FLS rules due to member attributes of excluded objects still being accessible through search queries, allowing reconstruction of...
Linux Distros Unpatched Vulnerability : CVE-2022-47950
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in OpenStack Swift before 2.28.1, 2.29.x before 2.29.2, and 2.30.0. By supplying crafted XML files, an authenticated user may coerce the...
CVE-2025-1759
IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory...
Malicious code in gulp-ile-contents-to-keys (npm)
The package gulp-ile-contents-to-keys was found to contain malicious code...