phpIPAM SQL注入漏洞

phpIPAM is an open-source IP address management application IPAM based on PHP and MySQL. Versions of phpipam 1.7.4 and earlier have a SQL injection vulnerability. This vulnerability stems from incorrect handling of parameters in the file app/admin/sections/edit-result.php, specifically the...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: bazelisk, falco-exporter, kubernetes, azuredisk-csi, nri-mysql, actions-runner-controller, grafana-pyroscope, step, k8ssandra-operator, argo-events, grafana-agent-operator, grafana-operator, cert-exporter, terraform-provider-google, chezmoi,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: sbom-scorecard, bazelisk, falco-exporter, kubernetes, azuredisk-csi, nri-mysql, actions-runner-controller, grafana-pyroscope, step, k8ssandra-operator, argo-events, mage, grafana-agent-operator, grafana-operator, cert-exporter, terraform-provider-google, chezmoi,...

GHSA-JV3W-X3R3-G6RM vulnerabilities

Vulnerabilities for packages: multus-cni, nerdctl, istio-fips, containerd-fips, azure-ipam, containerd, docker, calico-fips, buildkitd, podman, buildah, rke2-runtime, calico, flannel, rootlesskit, rootlesskit-fips, nerdctl-fips, datadog-agent-fips, docker-fips, multus-cni-fips, buildkitd-fips,...

CVE-2025-67499 vulnerabilities

Vulnerabilities for packages: multus-cni, nerdctl, istio-fips, containerd-fips, azure-ipam, containerd, docker, calico-fips, buildkitd, podman, buildah, rke2-runtime, calico, flannel, rootlesskit, rootlesskit-fips, nerdctl-fips, datadog-agent-fips, docker-fips, multus-cni-fips, buildkitd-fips,...

CVE-2025-67499 vulnerabilities

Vulnerabilities for packages: podman, buildkitd, flannel, kuma, multus-cni, nerdctl, datadog-agent, rootlesskit, k3s, calico, istio, azure-ipam, buildah, containerd, docker...

GHSA-JV3W-X3R3-G6RM vulnerabilities

Vulnerabilities for packages: podman, buildkitd, flannel, kuma, multus-cni, nerdctl, datadog-agent, rootlesskit, k3s, calico, istio, azure-ipam, buildah, containerd, docker...

EUVD-2025-202256

Cross-site scripting XSS vulnerability in Request IP form in phpIPAM v1.7.3 allows remote attackers to inject arbitrary web script or HTML via the instructions parameter for the /app/admin/instructions/edit-result.php endpoint...

CVE-2025-13879

Directory traversal vulnerability in SOLIDserver IPAM v8.2.3. This vulnerability allows an authenticated user with administrator privileges to list directories other than those to which the have authorized access using the 'directory' parameter in '/mod/ajax.php?action=sections/list/list'.For...

CVE-2025-60912

CVE-2025-60912 affects phpIPAM v1.7.3 and describes a CSRF flaw in the database export path. The vulnerability is caused by the generate-mysql.php function under /app/admin/import-export/, which can allow a remote attacker to trigger large database dump downloads if an administrator has an active...

CVE-2025-13879

Directory traversal vulnerability in SOLIDserver IPAM v8.2.3. This vulnerability allows an authenticated user with administrator privileges to list directories other than those to which the have authorized access using the 'directory' parameter in '/mod/ajax.php?action=sections/list/list'.For...

CVE-2025-13879 Directory traversal vulnerability in EfficientIP's SOLIDserver IPAM

Directory traversal vulnerability in SOLIDserver IPAM v8.2.3. This vulnerability allows an authenticated user with administrator privileges to list directories other than those to which the have authorized access using the 'directory' parameter in '/mod/ajax.php?action=sections/list/list'.For...

EUVD-2025-200239

Directory traversal vulnerability in SOLIDserver IPAM v8.2.3. This vulnerability allows an authenticated user with administrator privileges to list directories other than those to which the have authorized access using the 'directory' parameter in '/mod/ajax.php?action=sections/list/list'.For...

EfficientIP SOLIDserver IPAM 路径遍历漏洞

EfficientIP SOLIDserver IPAM is an integrated IP address management system from EfficientIP France. A path traversal vulnerability exists in EfficientIP SOLIDserver IPAM version 8.2.3, which stems from a directory traversal issue in the parameter directory in...

PT-2025-48667

Name of the Vulnerable Software and Affected Versions SOLIDserver IPAM version 8.2.3 Description A directory traversal issue exists in SOLIDserver IPAM version 8.2.3. An authenticated user with administrator privileges can list directories beyond their authorized access. This is possible by...

CVE-2025-58187 vulnerabilities

Vulnerabilities for packages: sbom-scorecard, bazelisk, falco-exporter, mage, grafana-agent-operator, cert-exporter, docker-credential-ecr-login, vt-cli, coredns, distribution, kube-logging-operator-custom-runner, renovate, render-template, trivy-operator, dbmate, nuclei,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: sbom-scorecard, bazelisk, falco-exporter, mage, grafana-agent-operator, cert-exporter, docker-credential-ecr-login, vt-cli, coredns, distribution, kube-logging-operator-custom-runner, renovate, render-template, trivy-operator, dbmate, nuclei,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: mkcert, rancher-machine, terraform-provider-random, hydra, sbom-scorecard, rancher-loglevel, bazelisk, falco-exporter, kubernetes-csi-livenessprobe, spire-controller-manager, mesosphere-vsphere-csi, checksec, azure-ipam, pguser, mods, tofu-controller,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: mkcert, rancher-machine, terraform-provider-random, hydra, sbom-scorecard, rancher-loglevel, bazelisk, falco-exporter, kubernetes-csi-livenessprobe, spire-controller-manager, mesosphere-vsphere-csi, checksec, azure-ipam, pguser, mods, tofu-controller,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: mkcert, rancher-machine, terraform-provider-random, hydra, sbom-scorecard, rancher-loglevel, bazelisk, falco-exporter, kubernetes-csi-livenessprobe, spire-controller-manager, mesosphere-vsphere-csi, checksec, azure-ipam, pguser, mods, tofu-controller,...