55858 matches found
CVE-2026-0574
A weakness has been identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function saveUserRole of the file warehouse\src\main\java\com\yeqifu\sys\controller\UserController.java of the component Request Handler. This manipulation causes improper...
CVE-2025-3660
Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains a broken access control vulnerability that allows authenticated users to access other users' pet data by exploiting missing ownership verification. Attackers can send requests to /member/pet/detailV2 with arbitrary pet IDs to...
CVE-2026-0571
A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this issue is the function createResponseEntity of the file warehouse\src\main\java\com\yeqifu\sys\common\AppFileUtils.java. The manipulation of the argument path results in path...
CVE-2025-65125
SQL injection in gosaliajainam/online-movie-booking 5.5 in moviedetails.php allows attackers to gain sensitive information...
EUVD-2026-0257
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
CVE-2025-34171
CasaOS versions up to and including 0.4.15 expose multiple unauthenticated endpoints that allow remote attackers to retrieve sensitive configuration files and system debug information. The /v1/users/image endpoint can be abused with a user-controlled path parameter to access files under...
CVE-2025-65125
SQL injection in gosaliajainam/online-movie-booking 5.5 in moviedetails.php allows attackers to gain sensitive information...
CVE-2025-65125
The gosaliajainam/online-movie-booking application, version 5.5 , is vulnerable to SQL injection in the movie_details.php file. This security flaw, associated with CWE-89 , allows an attacker to gain access to sensitive information . While a proof-of-concept was published on Telegram in early 202...
CVE-2025-65125
SQL injection in gosaliajainam/online-movie-booking 5.5 in moviedetails.php allows attackers to gain sensitive information...
CVE-2025-65125
SQL injection in gosaliajainam/online-movie-booking 5.5 in moviedetails.php allows attackers to gain sensitive information...
online-movie-booking security vulnerabilities
online-movie-booking is a university learning website by the individual developer gosaliajainam. A security vulnerability exists in online-movie-booking version 5.5, which stems from an SQL injection in the moviedetails.php file, which could lead to the disclosure of sensitive information...
CGA-5HHH-PR6W-7GM8
Bulletin has no description...
Information Exposure
Overview ttsfm is a Text-to-Speech API Client with OpenAI compatibility Affected versions of this package are vulnerable to Information Exposure due to verbose and unsanitized error handling in FFmpeg-related operations. An attacker can deliberately trigger FFmpeg errors using malformed audio...
BELL-CVE-2023-54246
Bulletin has no description...
GStreamer: undisclosed vulnerability (ZAI-2026-0NY63N)
Not disclosed. Details are not yet publicly disclosed...
GStreamer: undisclosed vulnerability (ZAI-2026-J8YVHJ)
Not disclosed. Details are not yet publicly disclosed...
RT-Thread: undisclosed vulnerability (ZAI-2026-9LSQGM)
Not disclosed. Details are not yet publicly disclosed...
MongoDB: undisclosed vulnerability (ZAI-2026-ATUOI7)
Not disclosed. Details are not yet publicly disclosed...