17029 matches found
PT-2025-26636 · Mitel · Mitel Openscape Xpressions
Name of the Vulnerable Software and Affected Versions: Mitel OpenScape Xpressions versions through V7R1 FR5 HF43 P913 Description: A vulnerability in the WebApl component could allow an unauthenticated attacker to conduct a path traversal attack due to insufficient input validation. A successful...
PT-2025-26645 · Convoy · Convoy
Name of the Vulnerable Software and Affected Versions: Convoy versions 3.9.0-rc3 through 4.4.0 Description: Convoy is a KVM server management panel for hosting businesses. A directory traversal vulnerability exists in the LocaleController component, allowing an unauthenticated remote attacker to...
DLA-4224-1 node-send - security update
Bulletin has no description...
WordPress Sala Theme <= 1.1.3 is vulnerable to PHP Object Injection
Software Sala Type Theme Vulnerable versions = 1.1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-52826 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 745dde376637 Credits Ann Required privilege Subscriber Published 23 June,...
PT-2025-26585 · Dragonfly · Dragonfly
Name of the Vulnerable Software and Affected Versions: dragonfly versions 1.28.18 through 1.30.1 Description: The issue is related to an Integer Overflow or Wraparound vulnerability in the dragonflydb dragonfly, specifically in the src/redis/lua/struct modules, associated with program files lua...
PT-2025-26644
Name of the Vulnerable Software and Affected Versions: changedetection.io versions prior to 0.50.4 Description: The issue is related to a cross-site scripting XSS vulnerability due to errors in filters from website page change detection watches not being properly filtered. This vulnerability has...
CVE-2025-52926
In scan.rs in spytrap-adb before 0.3.5, matches for known stalkerware are not rendered in the interactive user interface...
CVE-2025-52920
Innoshop through 0.4.1 allows Insecure Direct Object Reference IDOR at multiple places within the frontend shop. Anyone can create a customer account and easily exploit these. Successful exploitation results in disclosure of the PII of other customers and the deletion of their reviews of products...
The vulnerability of the websGetVar function in the /goform/set_blacklist file of the LB-LINK router software allows a violator to gain full control over the device.
The vulnerability of the websGetVar function in the /goform/setblacklist file of the LB-LINK router microprogramming system exists due to the lack of measures to neutralize special elements used in the operating system command. Exploiting this vulnerability can allow a remote attacker to gain ful...
BELL-CVE-2025-38074
Bulletin has no description...
BELL-CVE-2025-38069
Bulletin has no description...
BELL-CVE-2025-38058
Bulletin has no description...
BELL-CVE-2025-38062
Bulletin has no description...
BELL-CVE-2025-38068
Bulletin has no description...
BELL-CVE-2025-38060
Bulletin has no description...
BELL-CVE-2025-38038
Bulletin has no description...
BELL-CVE-2025-38035
Bulletin has no description...
BELL-CVE-2025-38045
Bulletin has no description...