210 matches found
CVE-2025-10986
CVE-2025-10986 affects Ivanti Endpoint Manager Mobile (EPMM) admin panel. A path traversal vulnerability exists in EPMM versions before 12.6.0.2, 12.5.0.4, and 12.4.0.4 that could allow a remote authenticated attacker with admin privileges to write data to unintended locations on disk. Connected ...
EUVD-2020-14827
Malware in sbrugna...
EUVD-2020-17940
Malware in sbrugna...
EUVD-2014-7052
Malware in sbrugna...
EUVD-2017-18378
Malware in sbrugna...
EUVD-2020-18821
Malware in sbrugna...
EUVD-2017-16779
Malware in sbrugna...
EUVD-2023-32479
Malicious code in bioql PyPI...
EUVD-2025-6400
Malicious code in bioql PyPI...
EUVD-2023-58438
Malicious code in bioql PyPI...
EUVD-2022-55351
Malicious code in bioql PyPI...
UBUNTU-CVE-2025-39928
In the Linux kernel, the following vulnerability has been resolved: i2c: rtl9300: ensure data length is within supported range Add an explicit check for the xfer length to 'rtl9300i2cconfigxfer' to ensure the data length isn't within the supported range. In particular a data length of 0 is not...
DEBIAN-CVE-2025-38677
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid out-of-boundary access in dnode page As Jiaming Zhang reported: dumpstack lib/dumpstack.c:94 inline dumpstacklvl+0x1c1/0x2a0 lib/dumpstack.c:120 printaddressdescription mm/kasan/report.c:378 inline...
Schneider Electric Software Update < 3.0.12 Privilege Escalation
The version of Schneider Electric Software Update installed on the remote host is prior to 3.0.12. It is, therefore, affected by a link following vulnerability that allows arbitrary data to be written to protected locations, potentially leading to escalation of privilege, arbitrary file corruptio...
CVE-2012-10032
Maxthon3 version 3.2.2 build 1000 and prior are vulnerable to cross context scripting XCS via the about:history page. The browser’s trusted zone improperly handles injected script content, allowing attackers to execute arbitrary JavaScript in a privileged context. This flaw enables modification o...
NewStart CGSL MAIN 7.02 : procps-ng Vulnerability (NS-SA-2025-0191)
The remote NewStart CGSL host, running version MAIN 7.02, has procps-ng packages installed that are affected by a vulnerability: - Under some circumstances, this weakness allows a user who has access to run the ps utility on a machine, the ability to write almost unlimited amounts of unfiltered...
CVE-2025-50061
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Web Access. Supported versions that are affected are 20.12.0-20.12.21, 21.12.0-21.12.21, 22.12.0-22.12.19, 23.12.0-23.12.13 and 24.12.0-24.12.4. Easily exploitable...
Access Control Bypass
Overview Affected versions of this package are vulnerable to Access Control Bypass via the mysqldump component. An attacker can gain unauthorized access to read and modify certain data by leveraging network access and requiring interaction from another user. Remediation A fix was pushed into the...
AMD Versal Adaptive SoC 安全漏洞
AMD Versal Adaptive SoC is a chip from Ultra Micro Semiconductor AMD. A security vulnerability exists in AMD Versal Adaptive SoC that stems from an SSS misconfiguration that could result in data being incorrectly written and read...
