17029 matches found
GoBGP does not properly check the input length
An issue was discovered in GoBGP before 3.35.0. pkg/packet/mrt/mrt.go does not properly check the input length, e.g., by ensuring that there are 12 bytes or 36 bytes depending on the address family...
WordPress CiyaShop Theme <= 4.18.0 is vulnerable to PHP Object Injection
Software CiyaShop Type Theme Vulnerable versions = 4.18.0 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-39349 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 68a2f2e9e8f8 Credits Bonds Required privilege Unauthenticated Publishe...
PT-2025-17470 · Ibm · Ibm Maximo Asset Management
Name of the Vulnerable Software and Affected Versions: IBM Maximo Asset Management version 7.6.1.3 Description: The issue allows an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. This is due to a...
CVE-2025-28104
Incorrect access control in laskBlog v2.6.1 allows attackers to access all usernames via a crafted input...
CVE-2025-43973
An issue was discovered in GoBGP before 3.35.0. pkg/packet/rtr/rtr.go does not verify that the input length corresponds to a situation in which all bytes are available for an RTR message...
PT-2025-17414 · Markdown · Qmarkdown
Name of the Vulnerable Software and Affected Versions: QMarkdown aka quasar-ui-qmarkdown versions prior to 2.0.5 Description: The issue allows for XSS via headers, even when the no-html option is set. This could potentially lead to malicious script execution. Recommendations: For versions prior t...
CVE-2025-43961
In LibRaw before 0.21.4, metadata/tiff.cpp has an out-of-bounds read in the Fujifilm 0xf00c tag parser...
PT-2025-17426 · Gobgp +4 · Gobgp +4
Name of the Vulnerable Software and Affected Versions: GoBGP versions prior to 3.35.0 Description: An issue was discovered that allows an attacker to cause a crash in the pkg/packet/bgp/bgp.go flowspec parser by sending fewer than 20 bytes in a certain context. Recommendations: For versions prior...
CVE-2025-43964
In LibRaw before 0.21.4, tag 0x412 processing in phaseonecorrect in decoders/loadmfbacks.cpp does not enforce minimum w0 and w1 values...
CVE-2022-47112
7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected...
BIT-GHOST-2024-34448
Ghost before 5.82.0 allows CSV Injection during a member CSV export...
BELL-CVE-2025-40364
Bulletin has no description...
BELL-CVE-2025-39989
Bulletin has no description...
BELL-CVE-2025-37893
Bulletin has no description...
BELL-CVE-2025-38152
Bulletin has no description...
BELL-CVE-2025-38240
Bulletin has no description...
BELL-CVE-2025-38575
Bulletin has no description...
BELL-CVE-2025-37785
Bulletin has no description...
WordPress Download Manager plugin <= 3.3.12 - Authenticated (Author+) Arbitrary File Deletion vulnerability
Authenticated Author+ Arbitrary File Deletion vulnerability discovered by WordFence in WordPress Plugin Download Manager versions = 3.3.12...
OSV-2025-290 Heap-buffer-overflow in pcpp::TelnetLayer::toString
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=411460531 Crash type: Heap-buffer-overflow READ 1 Crash state: pcpp::TelnetLayer::toString pcpp::Packet::toStringList pcpp::Packet::toString...