14515 matches found
Imagination GPU Driver security vulnerabilities
Imagination GPU Driver is a graphics driver from Imagination. A security vulnerability exists in the Imagination GPU Driver that originates from kernel software installed and running in the Guest VM that may exploit memory shared with the GPU firmware to write data outside of the Guest's...
Imagination GPU Driver security vulnerabilities
Imagination GPU Driver is a graphics driver from Imagination. A security vulnerability exists in the Imagination GPU Driver, which originates from kernel software installed and running in a Guest VM that may be able to leverage memory shared with the GPU firmware to write data to another Guest's...
PT-2025-7425
Name of the Vulnerable Software and Affected Versions Kernel software affected versions not specified Description The issue allows kernel software installed and running inside a Guest VM to potentially exploit memory shared with the GPU Firmware, enabling it to write data outside the Guest's...
CVE-2023-51323
A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Shared Asset Booking System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...
CVE-2023-51325
PHPJabbers Shared Asset Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "title, name" parameters...
PT-2025-7305
Name of the Vulnerable Software and Affected Versions PHPJabbers Shared Asset Booking System version 1.0 Description A lack of rate limiting in the 'Forgot Password' feature allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS vi...
CVE-2023-51323: Authentication Bypass by Spoofing
A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Shared Asset Booking System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...
PT-2025-7562 · Tenda · Tenda Ac8V4
Name of the Vulnerable Software and Affected Versions: Tenda AC8V4 version V16.03.34.06 Description: A vulnerability was found in the function SUB 0046AC38 of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk crypto leads to a stack-based buffer overflow. Recommendations: For...
CVE-2023-51324: Improper Control of Generation of Code
PHPJabbers Shared Asset Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV...
PT-2025-7307
Name of the Vulnerable Software and Affected Versions PHPJabbers Shared Asset Booking System version 1.0 Description The issue concerns Multiple Stored Cross-Site Scripting XSS in the title and name parameters. This allows for the storage and execution of malicious scripts, potentially leading to...
CVE-2023-51323
A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Shared Asset Booking System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...
CVE-2023-51325
PHPJabbers Shared Asset Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "title, name" parameters...
CVE-2023-51325: Improper Neutralization of Input During Web Page Generation
PHPJabbers Shared Asset Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "title, name" parameters...
PT-2025-7306 · Phpjabbers · Phpjabbers Shared Asset Booking System
Name of the Vulnerable Software and Affected Versions: PHPJabbers Shared Asset Booking System version 1.0 Description: The issue is related to a CSV injection vulnerability that allows an attacker to execute remote code. This vulnerability exists due to insufficient input validation in the...
Malicious code in @supera/shared (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49646b06c192dbf0af2ad637e18b135b9b07b4d33bf270720fb46c6037d47f62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
D-Link DIR-853 PSK Parameter Buffer Overflow Vulnerability
The D-Link DIR-853 is a dual-band wireless router that supports the 802.11ac protocol and provides dual-band 2.4GHz up to 400Mbps and 5GHz up to 867Mbps network connectivity for HD video streaming and online gaming. The D-Link DIR-853 suffers from a buffer overflow vulnerability that originates...
CVE-2025-26158
creationtimestamp| type| source ---|---|--- 2025-02-14 16:45:01+00:00| seen| https://infosec.exchange/users/cve/statuses/114003247198101013 2025-02-14 17:16:20+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5penlxzf2e 2025-02-14 18:45:02+00:00| seen|...
OESA-2025-1134 nginx security update
NGINX is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server. Security Fixes: When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication...
SUSE CVE-2023-49582
Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially revealing sensitive application data. This issue does not affect non-Unix platforms, or builds with APRUSESHMEMSHMGET=1 apr.h Users are...
Exposure of Data Element to Wrong Session
Overview Affected versions of this package are vulnerable to Exposure of Data Element to Wrong Session due to the shared instance used in field injection without a CDI scope. An attacker can manipulate request data, impersonate users, or access sensitive information by exploiting the leakage of...