2902 matches found
Unsecured Tunneling Protocols Expose 4.2 Million Hosts, Including VPNs and Routers
New research has uncovered security vulnerabilities in multiple tunneling protocols that could allow attackers to perform a wide range of attacks. "Internet hosts that accept tunneling packets without verifying the sender's identity can be hijacked to perform anonymous attacks and provide access ...
CVE-2024-57891
In the Linux kernel, the following vulnerability has been resolved: schedext: Fix invalid irq restore in scxopsbypass While adding outer irqsave/restore locking, 0e7ffff1b811 "scx: Fix raciness in scxopsbypass" forgot to convert an inner rqunlockirqrestore to rqunlock which could re-enable IRQ...
CVE-2025-0436 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2024-12297
CVE-2024-12297 affects multiple Moxa devices where an authentication bypass arises from flaws in the authorization mechanism. Public sources detail vulnerable components including various Moxa PT switches (examples: PT-508/510/7528/7728/7828 series and PT-G503/G510/G7728/G7828 series) with specif...
CVE-2024-50858
Multiple endpoints in GestioIP v3.5.7 are vulnerable to Cross-Site Request Forgery CSRF. An attacker can execute actions via the admin's browser by hosting a malicious URL, leading to data modification, deletion, or exfiltration...
GHSA-JJCV-WR2G-4RV4 vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
BIT-PHP-MIN-2021-21705 Incorrect URL validation in FILTER_VALIDATE_URL
In PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using URL validation functionality via filtervar function with FILTERVALIDATEURL parameter, an URL with invalid password field can be accepted as valid. This can lead to the code incorrectly parsing the URL and...
CVE-2024-56374 vulnerabilities
Vulnerabilities for packages: py3-django, awx...
CVE-2024-52006
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. Git defines a line-based protocol that is used to exchange information between Git and Git credential helpers. Some ecosystems mos...
CVE-2025-21233
Windows Telephony Service Remote Code Execution Vulnerability...
CVE-2025-21378 Windows CSC Service Elevation of Privilege Vulnerability
...
CVE-2025-21186
CVE-2025-21186 is a Microsoft Access remote code execution vulnerability. Public details in connected sources indicate a heap-based buffer overflow in Microsoft Access (notably Access 2016, 32/64‑bit) that could allow arbitrary code execution when a user opens a crafted file or input. Exploitatio...
CVE-2025-21354 Microsoft Excel Remote Code Execution Vulnerability
...
Microsoft SharePoint Server Spoofing Vulnerability
...
Windows OLE Remote Code Execution Vulnerability
...
Microsoft Access Remote Code Execution Vulnerability
...
Windows Recovery Environment Agent Elevation of Privilege Vulnerability
...
Microsoft Office Visio Remote Code Execution Vulnerability
...
