18947 matches found
CVE-2025-65239
Incorrect access control in the /aux1/ocussd/trace endpoint of OpenCode Systems USSD Gateway OC Release:5, version 6.13.11 allows attackers with low-level privileges to read server logs...
CVE-2025-65237
A reflected cross-site scripted XSS vulnerability in OpenCode Systems USSD Gateway OC Release: 5 allows attackers to execute arbitrary JavaScript in the context of a user's browser via injecting a crafted payload...
CVE-2025-65239
Incorrect access control in the /aux1/ocussd/trace endpoint of OpenCode Systems USSD Gateway OC Release:5, version 6.13.11 allows attackers with low-level privileges to read server logs...
CVE-2025-65236
OpenCode Systems USSD Gateway OC Release: 5 was discovered to contain a SQL injection vulnerability via the Session ID parameter in the /occontrolpanel/index.php endpoint...
CVE-2025-65235
OpenCode Systems USSD Gateway OC Release: 5 Version 6.13.11 was discovered to contain a SQL injection vulnerability via the ID parameter in the getSubUsersByProvider function...
CVE-2025-65235
OpenCode Systems USSD Gateway OC Release: 5 Version 6.13.11 was discovered to contain a SQL injection vulnerability via the ID parameter in the getSubUsersByProvider function...
CVE-2025-36134
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.5 and 6.2.1.1 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie...
CVE-2025-64656
Out-of-bounds read in Application Gateway allows an unauthorized attacker to elevate privileges over a network...
CVE-2025-64657
Stack-based buffer overflow in Azure Application Gateway allows an unauthorized attacker to elevate privileges over a network...
CVE-2025-64657 Azure Application Gateway Elevation of Privilege Vulnerability
...
CVE-2025-64657
Azure Application Gateway Elevation of Privilege (CVE-2025-64657) is described as a stack-based overflow that allows an unauthenticated, network-based attacker to escalate privileges. Affected component: Azure App Gateway. Root cause: stack-based overflow. CVSSv3.1: 9.8 (CRITICAL), Network vector...
CVE-2025-64657 Azure Application Gateway Elevation of Privilege Vulnerability
...
CVE-2025-64657
Stack-based buffer overflow in Azure Application Gateway allows an unauthorized attacker to elevate privileges over a network...
EUVD-2025-199683
Stack-based buffer overflow in Azure Application Gateway allows an unauthorized attacker to elevate privileges over a network...
CVE-2025-64656 Azure Application Gateway Elevation of Privilege Vulnerability
...
CVE-2025-64656 Azure Application Gateway Elevation of Privilege Vulnerability
...
CVE-2025-64656
CVE-2025-64656 affects Microsoft Azure Application Gateway. An out-of-bounds read allows an unauthenticated attacker to elevate privileges over the network. Affected versions for Application Gateway are 9.4–9.8; the provided sources recommend updating to a fixed version, but no specific patched v...
CVE-2025-64656
Out-of-bounds read in Application Gateway allows an unauthorized attacker to elevate privileges over a network...