17029 matches found
CVE-2025-30372
CVE-2025-30372 concerns Emlog Pro vulnerable versions pro-2.5.7 and pro-2.5.8 to an SQL injection due to missing addslashes after urldecode, allowing bypass via URL double encoding and risking leakage of sensitive user data. The root cause is lack of proper input sanitization in search_controller...
tough failure to detect delegated target rollback
Summary When updating the snapshot role, TUF clients should ensure that any previously encountered targets or delegated targets metadata files continue to be present in new snapshot metadata files. Likewise, the new targets and delegated targets metadata versions must be greater than or equal to...
MAL-2025-2910 Malicious code in vistar-ad-client (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2024-7407 Weak password encoding in Streamsoft Prestiż
Use of a custom password encoding algorithm in Streamsoft Prestiż software allows straightforward decoding of passwords using their encoded forms, which are stored in the application's database. One has to know the encoding algorithm, but it can be deduced by observing how password are...
MAL-2025-2853 Malicious code in bitunix-main (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-2832 Malicious code in @vercel-internals/constants (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-2825 Malicious code in @uniqa/self-service-ms-api-v1 (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2024-12619 Insufficient Granularity of Access Control in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1, allowing internal users to gain unauthorized access to internal projects...
CVE-2024-12619
Removed by vendor...
CVE-2024-12619
GitLab CVE-2024-12619 affects GitLab CE/EE. Affected versions are 16.0 up to before 17.8.6, 17.9 up to before 17.9.3, and 17.10 up to before 17.10.1. The issue allows internal users to gain unauthorized access to internal projects due to an unspecified vulnerability in these releases. The primary...
BIT-MATTERMOST-2025-27715
Mattermost versions 9.11.x = 9.11.8 fail to prompt for explicit approval before adding a team admin to a private channel, which team admins to joining private channels via crafted permalink links without explicit consent from them...
BELL-CVE-2025-21892
Bulletin has no description...
BELL-CVE-2023-52995
Bulletin has no description...
BELL-CVE-2023-53002
Bulletin has no description...
BELL-CVE-2023-52982
Bulletin has no description...
BELL-CVE-2023-53006
Bulletin has no description...
BELL-CVE-2023-53000
Bulletin has no description...
BELL-CVE-2023-52999
Bulletin has no description...