Lucene search
+L

2375 matches found

Cvelist
Cvelist
•added 2026/01/29 5:32 p.m.•55 views

CVE-2026-1599 Bdtask Bhojon All-In-One Restaurant Management System Checkout placeorder logic error

A vulnerability was determined in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. The affected element is an unknown function of the file /hungry/placeorder of the component Checkout. Executing a manipulation of the argument orggrandTotal/vat/servicecharge/grandtotal can lea...

5.3CVSS0.00306EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2026/01/29 5:32 p.m.•8 views

CVE-2026-1599

A vulnerability was determined in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. The affected element is an unknown function of the file /hungry/placeorder of the component Checkout. Executing a manipulation of the argument orggrandTotal/vat/servicecharge/grandtotal can lea...

5.3CVSS5.5AI score0.00306EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
•added 2026/01/29 12:00 a.m.•18 views

Bdtask Bhojon All-In-One Restaurant Management System has security vulnerabilities.

Bdtask Bhojon All-In-One Restaurant Management System is a restaurant management system developed by the Bangladeshi company Bdtask. Versions of the Bdtask Bhojon All-In-One Restaurant Management System prior to version 20260116 contained security vulnerabilities. These vulnerabilities were cause...

5.3CVSS5.8AI score0.00306EPSS
SaveExploits1References6
HackRead
HackRead
•added 2026/01/27 12:44 p.m.•12 views

US Charges 31 Suspects in Nationwide ATM Jackpotting Scam

US prosecutors have charged 31 more suspects in a nationwide ATM jackpotting scam, bringing the total number of defendants to 87 across multiple states...

5.9AI score
SaveExploits0
HackRead
HackRead
•added 2026/01/20 8:30 p.m.•15 views

Airlock Digital Announces Independent TEI Study Quantifying Measurable ROI & Security Impact

Atlanta, GA, United States, 20th January 2026, CyberNewsWire...

5.5AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/01/20 12:58 p.m.•13 views

CVE-2025-14369

A flaw was found in drflac, an audio decoder within the drlibs toolset. This integer overflow vulnerability occurs due to the tool trusting the totalPCMFrameCount field from FLAC Free Lossless Audio Codec metadata without proper buffer size calculation. An attacker can exploit this by providing a...

5.5CVSS5.7AI score0.00163EPSS
SaveExploits0References4
Snyk
Snyk
•added 2026/01/20 12:48 p.m.•8 views

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the totalPCMFrameCount field from FLAC metadata before buffer size calculation. An attacker can cause a program crash or resource exhaustion by providing a specially crafted file. Remediation A fix was...

7.6CVSS5.8AI score0.00163EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/01/20 12:48 p.m.•11 views

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the totalPCMFrameCount field from FLAC metadata before buffer size calculation. An attacker can cause a program crash or resource exhaustion by providing a specially crafted file. Remediation A fix was...

7.6CVSS5.8AI score0.00163EPSS
SaveExploits0References2
OSV
OSV
•added 2026/01/20 12:15 p.m.•8 views

DEBIAN-CVE-2025-14369

drflac, an audio decoder within the drlibs toolset, contains an integer overflow vulnerability flaw due to trusting the totalPCMFrameCount field from FLAC metadata before calculating buffer size, allowing an attacker with a specially crafted file to perform DoS against programs using the tool...

5.5CVSS5.9AI score0.00163EPSS
SaveExploits0References1
OSV
OSV
•added 2026/01/20 12:15 p.m.•12 views

UBUNTU-CVE-2025-14369

drflac, an audio decoder within the drlibs toolset, contains an integer overflow vulnerability flaw due to trusting the totalPCMFrameCount field from FLAC metadata before calculating buffer size, allowing an attacker with a specially crafted file to perform DoS against programs using the tool...

5.5CVSS6AI score0.00163EPSS
SaveExploits0References4
Packet Storm News
Packet Storm News
•added 2026/01/20 12:00 a.m.•28 views

Enhanced Cyber Threat Intelligence by Network Forensic Analysis for Ransomware As a Service(RaaS) Malwares

In the current era of interconnected cyberspace, there is an adverse effect of ransomware on individuals, startups, and large companies. Cybercriminals hold digital assets till the demand for payment is made. The success of ransomware upsurged with the introduction of Ransomware as a ServiceRaaS...

5.5AI score
SaveExploits0
CNNVD
CNNVD
•added 2026/01/20 12:00 a.m.•16 views

dr_libs security vulnerabilities

drlibs is an audio decoding library developed by David Reid. drlibs has a security vulnerability that stems from trusting the totalPCMFrameCount field in FLAC metadata. This vulnerability may lead to integer overflows, allowing attackers to launch denial-of-service attacks on programs that use th...

5.5CVSS6AI score0.00163EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/01/15 11:25 p.m.•43 views

CVE-2021-47787 TotalAV 5.15.69 - Unquoted Service Path

TotalAV 5.15.69 contains an unquoted service path vulnerability in multiple system services running with LocalSystem privileges. Attackers can place malicious executables in specific unquoted path segments to potentially gain SYSTEM-level access by exploiting the service path configuration...

8.5CVSS0.00257EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2026/01/09 12:41 p.m.•17 views

CVE-2023-25134

McAfee Total Protection prior to 16.0.50 may allow an adversary with full administrative access to modify a McAfee specific Component Object Model COM in the Windows Registry. This can result in the loading of a malicious payload...

6.7CVSS6.8AI score0.00261EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 11:14 a.m.•15 views

CVE-2016-10898

The total-security plugin before 3.4.1 for WordPress has XSS...

6.1CVSS7.1AI score0.00913EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 10:19 a.m.•18 views

CVE-2019-18644

The malware scan function in Total Defense Anti-virus 11.5.2.28 is vulnerable to a TOCTOU bug; consequently, symbolic link attacks allow privileged files to be deleted...

5.9CVSS6.8AI score0.00561EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/09 8:42 a.m.•17 views

CVE-2022-31467

A DLL hijacking vulnerability in the installed for Quick Heal Total Security prior to 12.1.1.27 allows a local attacker to achieve privilege escalation, leading to execution of arbitrary code, via the installer not restricting the search path for required DLLs and then not verifying the signature...

7.9CVSS6.9AI score0.00286EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 8:42 a.m.•21 views

CVE-2022-31466

Time of Check - Time of Use TOCTOU vulnerability in Quick Heal Total Security prior to 12.1.1.27 allows a local attacker to achieve privilege escalation, potentially leading to deletion of system files. This is achieved through exploiting the time between detecting a file as malicious and when th...

7.9CVSS6.7AI score0.00157EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 8:37 a.m.•18 views

CVE-2020-7330

Privilege Escalation vulnerability in McAfee Total Protection MTP trial prior to 4.0.176.1 allows local users to schedule tasks which call malicious software to execute with elevated privileges via editing of environment variables...

8.8CVSS6.8AI score0.0027EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 8:36 a.m.•16 views

CVE-2020-7298

Unexpected behavior violation in McAfee Total Protection MTP prior to 16.0.R26 allows local users to turn off real time scanning via a specially crafted object making a specific function call...

8.4CVSS6.4AI score0.00293EPSS
SaveExploits0References1
Rows per page
Query Builder