17028 matches found
IBM Concert Software 安全漏洞
IBM Concert Software is IBM's generative AI-driven automated application management and monitoring tool based on the WatsonX platform, focused on optimizing the operational efficiency and reliability of applications. IBM Concert Software has a log input neutralization improper vulnerability that...
CVE-2025-12291
Summary (CVE-2025-12291) ashymuzuro’s Full-Ecommece-Website and Muzuro Ecommerce System (up to 1.1.0) contain an unrestricted upload flaw in the Add Product Page at /admin/index.php?add_product. The root cause is an input/validation issue that allows remote attackers to upload arbitrary files, en...
PT-2025-43876
Name of the Vulnerable Software and Affected Versions Bdtask Flight Booking Software versions prior to 3.1 Description A security issue exists in Bdtask Flight Booking Software. The issue involves unrestricted upload capabilities through an unknown functionality within the...
Bdtask Flight Booking Software 代码问题漏洞
Bdtask Flight Booking Software is an airline booking software from Bdtask Bangladesh. A code issue vulnerability exists in Bdtask Flight Booking Software version 3.1 and earlier, which stems from an unrestricted upload function in the component Deposit Handler in the file...
CVE-2025-61100
FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the ospfopaquelsadump function at ospfopaque.c. This vulnerability allows attackers to cause a Denial of Service DoS under specific malformed LSA conditions...
CVE-2025-62716 Plane Vulnerable to Cross-Site Scripting via Open Redirect in ?next_path Parameter
Plane is open-source project management software. Prior to version 1.1.0, an open redirect vulnerability in the ?nextpath query parameter allows attackers to supply arbitrary schemes e.g., javascript: that are passed directly to router.push. This results in a cross-site scripting XSS vulnerabilit...
BELL-CVE-2023-53708
Bulletin has no description...
BELL-CVE-2023-53722
Bulletin has no description...
BELL-CVE-2025-40780
Bulletin has no description...
BELL-CVE-2023-53692
Bulletin has no description...
CVE-2025-54966
An issue was discovered in BAE SOCET GXP versions prior to 4.6.0.2 where certain endpoints on the SOCET GXP Job Status Service may return sensitive information, including local file paths and SOCET GXP version information , in certain situations. To mitigate this vulnerability, it is recommended ...
CVE-2025-61885
Vulnerability in the Oracle Life Sciences InForm product of Oracle Health Sciences Applications component: Web Server. The supported version that is affected is 7.0.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Life Sciences...
CVE-2025-62479
...
Security Bulletin: Vulnerability in IBM WebSphere Application (CVE-2025-36000) affects IBM PowerVM Novalink.
Summary IBM WebSphere Libery Profile is used by IBM PowerVM Novalink. IBM PowerVM Novalink has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2025-36000 DESCRIPTION: IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 is vulnerable to stored cross-site scripting. Thi...
BELL-CVE-2025-40011
Bulletin has no description...
CVE-2025-11905
ChanCMS up to version 3.3.2 is affected by a code injection vulnerability in the function getArticle (file app/modules/cms/controller/gather.js). The issue stems from inadequate filtering of special elements in the constructed snippet, enabling arbitrary code execution. The attack can be launched...
EEF-CVE-2025-48044 Authorization bypass when bypass policy condition evaluates to true
Summary Incorrect Authorization vulnerability in ash-project ash allows Authentication Bypass. This issue affects ash: from 3.6.3 before 3.7.1...
BELL-CVE-2025-40000
Bulletin has no description...