2891 matches found
RHSA-2025:1434 Red Hat Security Advisory: kpatch-patch-5_14_0-427_13_1, kpatch-patch-5_14_0-427_31_1, and kpatch-patch-5_14_0-427_44_1 security update
Bulletin has no description...
CVE-2024-35311
Yubico YubiKey 5 Series before 5.7.0, Security Key Series before 5.7.0, YubiKey Bio Series before 5.6.4, and YubiKey 5 FIPS before 5.7.2 have Incorrect Access Control...
CVE-2024-35558
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/cadeal.php?mudi=rev=close...
CVE-2024-29090
Server-Side Request Forgery SSRF vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.1.4...
CVE-2024-26016
A low privilege authenticated user could import an existing dashboard or chart that they do not have access to and then modify its metadata, thereby gaining ownership of the object. However, it's important to note that access to the analytical data of these charts and dashboards would still be...
RHSA-2025:1374 Red Hat Security Advisory: kpatch-patch-5_14_0-70_112_1, kpatch-patch-5_14_0-70_121_1, and kpatch-patch-5_14_0-70_85_1 security update
Bulletin has no description...
CVE-2024-31153
Improper input validation for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable denial of service via local access...
CVE-2024-21830
Uncontrolled search path in some IntelR VPL software before version 2023.4.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-41934
CVE-2024-41934 affects Intel® GPA software and Intel® GPA Framework prior to version 2024.3, with an improper access control vulnerability that may allow an authenticated local attacker to cause a denial of service. Multiple sources (Intel advisory, Red Hat CVE page, PT-security entry) confirm th...
CVE-2025-25205 Remote Authentication-Bypass can lead to server crash or limited information disclosure due to faulty pattern matching
Audiobookshelf is a self-hosted audiobook and podcast server. Starting in version 2.17.0 and prior to version 2.19.1, a flaw in the authentication bypass logic allows unauthenticated requests to match certain unanchored regex patterns in the URL. Attackers can craft URLs containing substrings lik...
Zertificon Z1 SecureMail 安全漏洞
Zertificon Z1 SecureMail is an email encryption and signature for businesses from Zertificon, Germany. A security vulnerability exists in Zertificon Z1 SecureMail version 4.44.2-7240-debian12, which originates from the ability to obtain sensitive information via the /compose-pdf.xhtml?convid=id...
Azure Linux 3.0 Security Update: cmake / curl / mysql / rust / tensorflow (CVE-2023-23916)
The version of cmake / curl / mysql / rust / tensorflow installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-23916 advisory. - An allocation of resources without limits or throttling vulnerability exis...
CVE-2025-25168
Cross-Site Request Forgery CSRF vulnerability in Black and White BookPress – For Book Authors book-press allows Cross-Site Scripting XSS.This issue affects BookPress – For Book Authors: from n/a through = 1.2.7...
CVE-2025-25153
Cross-Site Request Forgery CSRF vulnerability in djjmz Simple Auto Tag simple-auto-tag allows Stored XSS.This issue affects Simple Auto Tag: from n/a through = 1.1...
CVE-2025-25125
Cross-Site Request Forgery CSRF vulnerability in CyrilG Fyrebox Quizzes fyrebox-shortcode allows Stored XSS.This issue affects Fyrebox Quizzes: from n/a through = 3.1...
dhtmlxFileExplorer 8.4.6 Local File Inclusion / Traversal Vulnerabilities
Exploit Title: dhtmlxFileExplorer 8.4.6 - Local File Inclusion in the Download Function of File Explorer Exploit Author: Nutchaya Augkanavitayakul, Nattachai Wanmak, Pongtorn Angsuchotmetee Vendor Homepage: https://dhtmlx.com Software Link: https://dhtmlx.com Version: 8.4.6 Tested on: macOS CVE :...
CVE-2022-40916
Tiny File Manager v2.4.7 and below is vulnerable to session fixation...
CVE-2025-22642
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rtowebsites Dynamic Conditions dynamicconditions allows Stored XSS.This issue affects Dynamic Conditions: from n/a through = 1.7.4...