22792 matches found
Grafana < 9.4.12 Multiple Vulnerabilities
According to its self-reported version, the Grafana install hosted on the remote host is earlier than 8.5.26, or earlier than 9.2.19, or earlier than 9.3.15, or earlier than 9.4.12, or 9.5.x earlier than 9.5.3. It is, therefore, affected by multiple vulnerabilities: - A Missing Authorization...
Grafana < 9.3.11 Cross-site Scripting
According to its self-reported version, the Grafana install hosted on the remote host is earlier than 8.5.22, or earlier than 9.2.15, or earlier than 9.3.11. It is, therefore, affected by a cross-site scripting vulnerability. Note that the scanner has not tested for these issues but has instead...
Grafana < 9.2.15 Cross-site Scripting
According to its self-reported version, the Grafana install hosted on the remote host is earlier than 8.5.22, or earlier than 9.2.15, or earlier than 9.3.11. It is, therefore, affected by a cross-site scripting vulnerability. Note that the scanner has not tested for these issues but has instead...
CVE-2025-5497
creationtimestamp| type| source ---|---|--- 2025-06-03 14:02:48+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqphctv4j3i2...
CVE-2025-4671
creationtimestamp| type| source ---|---|--- 2025-06-03 12:17:48+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqpbj44u5hy2 2025-06-03 15:54:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqpnmnywcd2r...
CVE-2024-52561
A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 build 55740. When a snapshot of a virtual machine is deleted, a root service verifies and modifies the ownership of the snapshot files. By using a symlink, an attacker can change...
CVE-2025-27029
Transient DOS while processing the tone measurement response buffer when the response buffer is out of range...
CVE-2024-53019
Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources...
CVE-2025-5390
A vulnerability, which was classified as critical, was found in JeeWMS up to 20250504. This affects the function filedeal of the file /systemController/filedeal.do of the component File Handler. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. Th...
CVE-2025-1051
Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Sonos Era 300 speakers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...
CVE-2025-5438
creationtimestamp| type| source ---|---|--- 2025-06-02 11:47:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqmpeaftjy2o...
CVE-2025-48957 AstrBot Has Path Traversal Vulnerability in /api/chat/get_file
AstrBot is a large language model chatbot and development framework. A path traversal vulnerability present in versions 3.4.4 through 3.5.12 may lead to information disclosure, such as API keys for LLM providers, account passwords, and other sensitive data. The vulnerability has been addressed in...
CVE-2025-5435
creationtimestamp| type| source ---|---|--- 2025-06-02 08:59:30+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqmfwatcbve2 2025-06-02 09:01:34+00:00| seen| Telegram/VQ0FQ5ZLin3xUorKYhfcFNtdNKkFwfxKkGrKdLfMt-CdeI0 2025-06-02...
CVE-2025-23099
Affected: Samsung Mobile Processor Exynos 1480 and Exynos 2400. Issue: missing length check leading to out-of-bounds writes in the affected components. Details consistently point to this root cause across multiple sources; no concrete exploit information or CVE-specific exploit path is provided i...
CVE-2025-5407
creationtimestamp| type| source ---|---|--- 2025-06-01 23:15:20+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqlfczrhu2g2 2025-06-02 00:22:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqlj3zrue62j...
CVE-2025-5142
The Simple Page Access Restriction plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.31. This is due to missing nonce validation and capability checks in the settings save handler in the settings.php script. This makes it possible for...
Fedora 41 : thunderbird (2025-5bf1989d48)
The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-5bf1989d48 advisory. Update to 128.11.0 https://www.thunderbird.net/en-US/thunderbird/128.11.0esr/releasenotes/...
CVE-2025-5387
creationtimestamp| type| source ---|---|--- 2025-05-31 18:06:35+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqidj5utghx2 2025-05-31 21:47:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqipwwp3x52r...
CVE-2025-5377 Astun Technology iShare Maps historic1.asp cross site scripting
A vulnerability was found in Astun Technology iShare Maps 5.4.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file historic1.asp. The manipulation of the argument Zoom leads to cross site scripting. The attack may be launched remotely. The exploit...