17029 matches found
PT-2025-25800
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue has been resolved in the Linux kernel related to the iio: adc: ad7606 module. The problem occurred because the sw mode config function pointer was not checked for NULL before bei...
CVE-2025-26924
Improper Control of Generation of Code 'Code Injection' vulnerability in colabrio Ohio Extra ohio-extra allows Code Injection.This issue affects Ohio Extra: from n/a through = 3.4.7...
CVE-2025-26921
Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Object Injection.This issue affects Booking and Rental Manager: from n/a through = 2.2.6...
CVE-2025-26969
Missing Authorization vulnerability in Aldo Latino PrivateContent. This issue affects PrivateContent: from n/a through 8.11.5...
CVE-2025-26556
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in zzmaster WP AntiDDOS wpantiddos allows Reflected XSS.This issue affects WP AntiDDOS: from n/a through = 2.0...
RLSA-2024:10244 Important: pam:1.5.1 security update
Pluggable Authentication Modules PAM provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fixes: pam: Improper Hostname Interpretation in pamaccess Leads to Access Control Bypass CVE-2024-10963 For more details about the...
CVE-2024-48015
Dell SmartFabric OS10 Software, versions 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Comma...
CVE-2024-48017
Dell SmartFabric OS10 Software, versions 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code...
CVE-2024-48831
Summary: CVE-2024-48831 affects Dell SmartFabric OS10 Software, specifically version 10.5.6.x. The vulnerability is a hard-coded password issue that could allow an unauthenticated, local attacker to gain unauthorized access. What’s affected: Dell SmartFabric OS10 (OS10) software; exact impacted b...
CVE-2025-22473
Dell SmartFabric OS10 Software, versions 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code...
CVE-2024-49561
Dell SmartFabric OS10 vulnerabilities affect versions 10.5.4.x–10.5.6.x and 10.6.0.x. The issue is an Incorrect Privilege Assignment that lets a low-privileged, locally authenticated attacker escalate privileges. Impact is described as HIGH for confidentiality, integrity, and availability. Root c...
CVE-2024-48830
Dell SmartFabric OS10 Software, versions 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Comman...
Privilege Escalation
ASP.NET is vulnerable to Privilege Escalation. The vulnerability is due to improper authentication mechanisms due to insufficient validation, allowing an unauthorized attacker to elevate privileges over a network...
CVE-2024-7266
Incorrect User Management vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP allows logged-in user to list all users in the system, including those from other organizations. This issue affects EZD RP: from 15 before 15.84, from 16 before 16.15, from 17...
CVE-2025-1773
The Traveler theme for WordPress is vulnerable to Reflected Cross-Site Scripting via multiple parameters in all versions up to, and including, 3.1.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...
CVE-2024-46662
A improper neutralization of special elements used in a command 'command injection' in Fortinet FortiManager versions 7.4.1 through 7.4.3, FortiManager Cloud versions 7.4.1 through 7.4.3 allows attacker to escalation of privilege via specifically crafted packets...
onos-lib-go allows an index out-of-range panic
Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.28 allows an index out-of-range panic in asn1/aper GetBitString via a zero value of numBits...
GHSA-JRQJ-6VQ2-7R63 onos-lib-go allows an index out-of-range panic
Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.28 allows an index out-of-range panic in asn1/aper GetBitString via a zero value of numBits...