454 matches found
CVE-2024-41947
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. By creating a conflict when another user with more rights is currently editing a page, it is possible to execute JavaScript snippets on the side of the other user, which compromises the...
CVE-2018-14040 vulnerabilities
Vulnerabilities for packages: grafana, grafana-fips...
PT-2025-53323
V-SOL GPON/EPON OLT Platform v2.03 contains a privilege escalation vulnerability that allows normal users to gain administrative access by manipulating the user role parameter. Attackers can send a crafted HTTP POST request to the user management endpoint with 'user role mod' set to integer value...
CVE-2025-34442
AVideo versions prior to 20.1 disclose absolute filesystem paths via multiple public API endpoints. Returned metadata includes full server paths to media files, revealing underlying filesystem structure and facilitating more effective attack chains...
CVE-2025-34441 AVideo < 20.1 User Information Disclosure via Public API
AVideo versions prior to 20.1 expose sensitive user information through an unauthenticated public API endpoint. Responses include emails, usernames, administrative status, and last login times, enabling user enumeration and privacy violations...
The vulnerability of SAP BusinessObjects Business Intelligence platform, related to incorrect coding or filtering of output data, allows a perpetrator to execute an SSRF attack.
The vulnerability of SAP BusinessObjects Business Intelligence platform is related to incorrect coding or filtering of output data. Exploiting this vulnerability can allow a malicious actor to execute an SSRF attack remotely...
PT-2025-48944
Name of the Vulnerable Software and Affected Versions Masa CMS versions prior to 7.2.8 Masa CMS versions prior to 7.3.13 Masa CMS versions prior to 7.4.6 Description Masa CMS is an open source Enterprise Content Management platform. The application is susceptible to remote code execution. The iss...
CVE-2025-10971
Insecure Storage of Sensitive Information vulnerability in MeetMe on iOS, Android allows Retrieve Embedded Sensitive Data. This issue affects MeetMe: through v2.2.5...
EUVD-2025-200106
Grav Exposes Password Hashes Leading to privilege escalation...
EUVD-2025-198070
A platform-level denial-of-service DoS vulnerability exists in ArubaOS-CX software. Successful exploitation of this vulnerability could allow an attacker with administrative access to execute specific code that renders the switch non-bootable and effectively non-functional...
CVE-2025-53037
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications component: Platform. Supported versions that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Easily exploitable vulnerability allows unauthenticated attacker with...
Restaurant Brands International assistant platform 安全漏洞
Restaurant Brands International assistant platform is a restaurant back office platform from Restaurant Brands International. A security vulnerability exists in Restaurant Brands International assistant platform version 2025-09-06 and earlier, which stems from unauthenticated user account creatio...
The vulnerability of the cloud platform for managing and protecting Microsoft Entra ID (formerly Azure Active Directory) relates to deficiencies in access control. This allows attackers to escalate their privileges.
The vulnerability of the cloud-based platform for managing and protecting Microsoft Entra ID formerly Azure Active Directory is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...
HCL AION 安全漏洞
HCL AION is an AI lifecycle management platform from HCL India. HCL AION has an information disclosure vulnerability that can be exploited by attackers to cause unauthorized access...
EUVD-2020-29622
Malware in sbrugna...
EUVD-2019-19240
Malware in sbrugna...
EUVD-2010-1479
Malware in sbrugna...
EUVD-2015-0332
Malware in sbrugna...