17029 matches found
PT-2025-20057 · Samsung · Samsung Flow
Name of the Vulnerable Software and Affected Versions: Samsung Flow versions prior to 4.9.17.6 Description: The issue is related to improper verification of intent by a broadcast receiver, allowing local attackers to modify the configuration. This could potentially lead to unauthorized changes in...
PT-2025-20095 · Unknown · Solace Extra
Name of the Vulnerable Software and Affected Versions: Solace Extra versions 1.3.1 and earlier Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability, which allows for Server Side Request Forgery. This means an attacker can potentially trick the server into making...
PT-2025-20164 · Unknown · Ctltwp Wiki Embed
Name of the Vulnerable Software and Affected Versions: ctltwp Wiki Embed versions 1.4.6 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For versions 1.4.6 and...
PT-2025-20161 · Wbcom Designs · Activity Link Preview For Buddypress
Name of the Vulnerable Software and Affected Versions: Wbcom Designs - Activity Link Preview For BuddyPress versions 1.4.4 and earlier Description: A Server-Side Request Forgery SSRF issue affects the software, allowing for Server Side Request Forgery. Recommendations: For versions 1.4.4 and...
PT-2025-20084 · WordPress · Thimpress Wp Hotel Booking
Name of the Vulnerable Software and Affected Versions: ThimPress WP Hotel Booking versions n/a through 2.1.9 Description: A Cross-Site Request Forgery CSRF issue affects ThimPress WP Hotel Booking, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For versions n/...
CVE-2025-47420
The CVE-2025-47420 entry applies to Crestron Automate VX, affecting versions 5.6.8161.21536 through 6.4.0.49. The vulnerability is a privilege escalation in the Automate VX component, with a network-exposed attack surface and low privileges required, according to the CVSS data. Remediation guidan...
CVE-2025-0649 Stack Exhaustion In Tensorflow Serving
Incorrect JSON input stringification in Google's Tensorflow serving versions up to 2.18.0 allows for potentially unbounded recursion leading to server crash...
GHSA-58XC-HPVQ-8473 Redox UEFI Safe API can cause heap-buffer-overflow
ffi::nstr should be marked unsafe, since a pointer to a buffer without a trailing 0 value will cause a heap buffer overflow...
CVE-2025-46736 Umbraco Makes User Enumeration Feasible Based on Timing of Login Response
Umbraco is a free and open source .NET content management system. Prior to versions 10.8.10 and 13.8.1, based on an analysis of the timing of post login API responses, it's possible to determine whether an account exists. The issue is patched in versions 10.8.10 and 13.8.1. No known workarounds a...
CVE-2025-32022 Finit has heap based buffer overwrite in urandom.so plugin
Finit provides fast init for Linux systems. Finit's urandom plugin has a heap buffer overwrite vulnerability at boot which leads to it overwriting other parts of the heap, possibly causing random instabilities and undefined behavior. The urandom plugin is enabled by default, so this bug affects...
BELL-CVE-2023-53143
Bulletin has no description...
BELL-CVE-2023-53139
Bulletin has no description...
BELL-CVE-2023-53132
Bulletin has no description...
BELL-CVE-2023-53094
Bulletin has no description...
BELL-CVE-2023-53086
Bulletin has no description...
BELL-CVE-2023-53099
Bulletin has no description...
BELL-CVE-2023-53088
Bulletin has no description...
BELL-CVE-2023-53126
Bulletin has no description...