Lucene search
K

284 matches found

Vulnrichment
Vulnrichment
added 2026/02/27 1:52 a.m.2 views

CVE-2026-24497

Stack-based Buffer Overflow vulnerability in SimTech Systems, Inc. ThinkWise allows Remote Code Inclusion.This issue affects ThinkWise: from 7 through 23...

8.4CVSS6AI score0.00336EPSS
Exploits0References2
CVE
CVE
added 2026/02/27 1:52 a.m.6 views

CVE-2026-24497

CVE-2026-24497 affects SimTech Systems, Inc. ThinkWise versions 7 through 23. The issue is a stack-based buffer overflow that enables remote code inclusion. The available descriptions consistently state this vulnerability arises in ThinkWise, without detailing the exact vulnerable component, file...

9.8CVSS5.5AI score0.00336EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/27 12:0 a.m.4 views

PT-2026-22282

Stack-based Buffer Overflow vulnerability in SimTech Systems, Inc. ThinkWise allows Remote Code Inclusion.This issue affects ThinkWise: from 7 through 23...

8.4CVSS5.4AI score0.00336EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/02/18 1:28 p.m.2 views

CVE-2025-7706

Missing Authentication for Critical Function vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Remote Code Inclusion.This issue affects Liderahenk: from 3.0.0 to 3.3.1 before 3.5.0...

6.1CVSS5.7AI score0.00248EPSS
Exploits0References1
NVD
NVD
added 2026/02/17 2:16 p.m.2 views

CVE-2025-7706

Missing Authentication for Critical Function vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Remote Code Inclusion. This issue affects Liderahenk: from 3.0.0 to 3.3.1 before 3.5.0...

6.1CVSS0.00248EPSS
Exploits0References2
CVE
CVE
added 2026/02/17 1:22 p.m.7 views

CVE-2025-7706

CVE-2025-7706 describes a Missing Authentication for a Critical Function in Liderahenk from TUBITAK BILGEM STI, affecting versions 3.0.0–3.3.1 prior to 3.5.0. The issue enables Remote Code Inclusion due to lack of auth on a critical function. CVSSv3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N is 6.1 (M...

6.1CVSS5.4AI score0.00248EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/02/17 1:22 p.m.26 views

CVE-2025-7706 Improper Access Control in TUBITAK BILGEM's Liderahenk

Missing Authentication for Critical Function vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Remote Code Inclusion. This issue affects Liderahenk: from 3.0.0 to 3.3.1 before 3.5.0...

6.1CVSS0.00248EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/02/17 1:22 p.m.2 views

CVE-2025-7706 Improper Access Control in TUBITAK BILGEM's Liderahenk

Missing Authentication for Critical Function vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Remote Code Inclusion. This issue affects Liderahenk: from 3.0.0 to 3.3.1 before 3.5.0...

6.1CVSS5.6AI score0.00248EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/02/17 1:22 p.m.2 views

CVE-2025-7706

Missing Authentication for Critical Function vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Remote Code Inclusion. This issue affects Liderahenk: from 3.0.0 to 3.3.1 before 3.5.0...

6.1CVSS5.6AI score0.00248EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/17 12:0 a.m.3 views

PT-2026-20269

Name of the Vulnerable Software and Affected Versions Liderahenk versions 3.0.0 through 3.3.1 Description A missing authentication check for a critical function in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows for Remote Code Inclusion. The issue impacts the software’s...

6.1CVSS6.1AI score0.00248EPSS
Exploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2026/02/02 6:9 p.m.7 views

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Progress DataDirect JDBC drivers

Summary Multiple vulnerabilities in Progress DataDirect JDBC drivers that are used by InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2025-10702 DESCRIPTION: Improper Control of Generation of Code 'Code Injection' vulnerability in Progress DataDirect Connect for JDBC...

8.6CVSS5.8AI score0.00261EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/07 9:17 a.m.18 views

CVE-2025-1534

CVE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Payara Platform Payara Server allows : Remote Code Inclusion.This issue affects Payara Server: from 4.1.2.1919.1 before 4.1.2.191.51, from 5.20.0 before 5.68.0, from 6.0.0 before 6.23.0, fr...

6.8CVSS7.7AI score0.00242EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/25 3:9 p.m.9 views

CVE-2025-2155

Unrestricted Upload of File with Dangerous Type vulnerability in Echo Call Center Services Trade and Industry Inc. Specto CM allows Remote Code Inclusion.This issue affects Specto CM: before 17032025...

8.8CVSS7.3AI score0.00288EPSS
Exploits0References1
NVD
NVD
added 2025/12/24 3:16 p.m.4 views

CVE-2025-2155

Unrestricted Upload of File with Dangerous Type vulnerability in Echo Call Center Services Trade and Industry Inc. Specto CM allows Remote Code Inclusion. This issue affects Specto CM: before 17032025...

8.8CVSS0.00288EPSS
Exploits0References2
EUVD
EUVD
added 2025/12/24 2:31 p.m.2 views

EUVD-2025-205285

Unrestricted Upload of File with Dangerous Type vulnerability in Echo Call Center Services Trade and Industry Inc. Specto CM allows Remote Code Inclusion.This issue affects Specto CM: before 17032025...

8.8CVSS6.8AI score0.00288EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/12/24 2:31 p.m.31 views

CVE-2025-2155 Arbitrary File Upload in EchoCCS's Specto CM

Unrestricted Upload of File with Dangerous Type vulnerability in Echo Call Center Services Trade and Industry Inc. Specto CM allows Remote Code Inclusion. This issue affects Specto CM: before 17032025...

8.8CVSS0.00288EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/24 2:31 p.m.5 views

CVE-2025-2155 Arbitrary File Upload in EchoCCS's Specto CM

Unrestricted Upload of File with Dangerous Type vulnerability in Echo Call Center Services Trade and Industry Inc. Specto CM allows Remote Code Inclusion. This issue affects Specto CM: before 17032025...

8.8CVSS5.6AI score0.00288EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2025/12/24 2:31 p.m.3 views

CVE-2025-2155

Unrestricted Upload of File with Dangerous Type vulnerability in Echo Call Center Services Trade and Industry Inc. Specto CM allows Remote Code Inclusion. This issue affects Specto CM: before 17032025...

8.8CVSS5.6AI score0.00288EPSS
Exploits0References3
CVE
CVE
added 2025/12/24 2:31 p.m.16 views

CVE-2025-2155

CVE-2025-2155 affects Specto CM (Echo Call Center Services Trade and Industry Inc.). The vulnerability is an Unrestricted Upload of File with Dangerous Type, enabling Remote Code Inclusion. Affected versions are before 17032025. Root cause: improper file‑type validation allowing executable conten...

8.8CVSS5.6AI score0.00288EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/12/24 12:0 a.m.2 views

Echo Specto CM 代码问题漏洞

Echo Specto CM is a call center management system from Echo Turkey. A code issue vulnerability exists in versions prior to Echo Specto CM 17032025, which stems from an unrestricted upload of hazardous types of files, which could lead to remote code inclusion...

8.8CVSS7.4AI score0.00288EPSS
Exploits0References1
Rows per page
Query Builder