23751 matches found
CVE-2025-51742
An issue was discovered in jishenghua JSHERP 2.3.1. The /material/getMaterialEnableSerialNumberList endpoint passes the search query parameter directly to parseObject, introducing a Fastjson deserialization vulnerability that can lead to RCE via JDBC payloads...
ECHO-776E-6420-85F8
Bulletin has no description...
MINI-CR59-X592-5J89
Bulletin has no description...
CLSA-2025-1764062286 edk2: Fix of 2 CVEs
CVE-2023-45236: fix TCP Initial Sequence Number generation in NetworkPkg to prevent predictable sequence numbers - CVE-2023-45237: fix weak pseudo-random number generator in NetworkPkg to prevent predictable TCP sequence numbers...
EUVD-2025-199544
Not used...
EUVD-2025-199545
Not used...
EUVD-2025-199546
Not used...
CVE-2025-51746
An issue was discovered in jishenghua JSHERP 2.3.1. The /serialNumber/addSerialNumber endpoint is vulnerable to fastjson deserialization attacks...
PT-2025-48085
Name of the Vulnerable Software and Affected Versions jishenghua JSH ERP version 2.3.1 Description An issue exists in the software that allows for fastjson deserialization attacks. The /serialNumber/addSerialNumber API endpoint is susceptible to this issue. The addSerialNumber function is...
CVE-2025-51746
An issue was discovered in jishenghua JSHERP 2.3.1. The /serialNumber/addSerialNumber endpoint is vulnerable to fastjson deserialization attacks...
CVE-2025-51746
The jishenghua JSH_ERP version 2.3.1 is vulnerable to fastjson deserialization attacks via the /serialNumber/addSerialNumber API endpoint. The vulnerability specifically affects the addSerialNumber function, allowing for the deserialization of untrusted data (CWE-502). This issue could lead to cr...
PT-2025-62894
Name of the Vulnerable Software and Affected Versions better-auth passkey versions prior to 1.4.0 Description An insecure direct object reference occurs in the passkey deletion endpoint, allowing authenticated users to delete arbitrary passkeys. Attackers with valid sessions can send crafted...
Oracle Linux 9 : openssl (ELSA-2025-28011)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-28011 advisory. - Fix CVE-2025-9230 Resolves: RHEL-115929 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...
EUVD-2025-199035
Malicious code in sa-company-registration-number-regex npm...
CVE-2025-36150 IBM Concert Information Disclosure
IBM Concert 1.0.0 through 2.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...
CVE-2025-13584
creationtimestamp| type| source ---|---|--- 2025-11-24 05:34:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6e44bmh5l2q...
CVE-2025-65499
Array index error in tlsverifycallback in src/coapopenssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS handshake that triggers SSLgetexdataX509STORECTXidx to return -1...
PT-2025-48027
CVE-2025-13511 - Adobe Flash Type Confusion CVE ID : CVE-2025-13511 Published : Nov. 24, 2025, 5:16 p.m. | 1 hour, 35 minutes ago Description : Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this...
PT-2025-48028
CVE-2025-13594 - Apache HTTP Server Command Injection Vulnerability CVE ID : CVE-2025-13594 Published : Nov. 24, 2025, 5:16 p.m. | 1 hour, 35 minutes ago Description : Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and...