8134 matches found
CVE-2009-3087
Unspecified vulnerability in nserver.exe in the server in IBM Lotus Domino 8.0 on Windows Server 2003 allows remote attackers to cause a denial of service daemon crash via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this disclosu...
CVE-2009-3093
Unspecified vulnerability on the ASUS WL-500W wireless router has unknown impact and remote attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11. NOTE: as of 20090903, this disclosure has no actionable information. However, because the VulnDisco Pack author is a...
CVE-2009-3099
Unspecified vulnerability in HP OpenView Operations Manager 8.1 on Windows Server 2003 SP2 allows remote attackers to have an unknown impact, related to a "Remote exploit," as demonstrated by a certain module in VulnDisco Pack Professional 8.11, a different vulnerability than CVE-2007-3872. NOTE:...
CVE-2024-40458
An issue in Ocuco Innovation Tracking.exe v.2.10.24.51 allows a local attacker to escalate privileges via the modification of TCP packets...
CVE-2024-40458
A security vulnerability exists in Ocuco Innovation Tracking.exe v.2.10.24.51 , a component of the Ocuco Ireland Laboratory Management System. A local attacker can escalate privileges by modifying TCP packets, which stems from improper input validation and improper privilege management (CWE-20, C...
CVE-2024-40458
An issue in Ocuco Innovation Tracking.exe v.2.10.24.51 allows a local attacker to escalate privileges via the modification of TCP packets...
PT-2025-22550 · Ocuco · Ocuco Innovation Tracking.Exe
Name of the Vulnerable Software and Affected Versions: Ocuco Innovation Tracking.exe version 2.10.24.51 Description: The issue allows a local attacker to escalate privileges via the modification of TCP packets. Recommendations: For Ocuco Innovation Tracking.exe version 2.10.24.51, at the moment,...
CVE-2007-5775
Unspecified vulnerability in BitDefender allows attackers to execute arbitrary code via unspecified vectors, aka EEYEB-20071024. NOTE: as of 20071029, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being assigne...
CVE-2002-2058
TeeKai Tracking Online 1.0 uses weak encryption of web usage statistics in data/userlog/log.txt, which allows remote attackers to identify IP's visiting the site by dividing each octet by the MD5 hash of '20'...
CVE-2007-3841
Unspecified vulnerability in Pidgin formerly Gaim 2.0.2 for Linux allows remote authenticated users, who are listed in a users list, to execute certain commands via unspecified vectors, aka ZD-00000035. NOTE: this information is based upon a vague advisory by a vulnerability information sales...
CVE-2025-37949 xenbus: Use kref to track req lifetime
In the Linux kernel, the following vulnerability has been resolved: xenbus: Use kref to track req lifetime Marek reported seeing a NULL pointer fault in the xenbusthread callstack: BUG: kernel NULL pointer dereference, address: 0000000000000000 RIP: e030:wakeupcommon+0x4c/0x180 Call Trace:...
CVE-2025-37949 xenbus: Use kref to track req lifetime
In the Linux kernel, the following vulnerability has been resolved: xenbus: Use kref to track req lifetime Marek reported seeing a NULL pointer fault in the xenbusthread callstack: BUG: kernel NULL pointer dereference, address: 0000000000000000 RIP: e030:wakeupcommon+0x4c/0x180 Call Trace:...
CVE-2025-47938
creationtimestamp| type| source ---|---|--- 2025-05-20 15:13:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpmerrkz532h 2025-05-20 15:49:48+00:00| seen| https://bsky.app/profile/OpenSource.activitypub.awakari.com.ap.brid.gy/post/3lpmgs4r2uw42...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a security vulnerability that stems from insufficient req lifecycle tracking in xenbus...
Scope 3, Category 8: What Akamai Is Doing for Customer Reporting
...
CVE-2024-6335
The Tracking Code Manager WordPress plugin before 2.3.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2025-47945
creationtimestamp| type| source ---|---|--- 2025-05-17 20:26:39+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpfeutnaoyj2 2025-05-17 21:07:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpfh7bsdbr2o...
WordPress User Activity Tracking and Log plugin < 4.1.4 - IP Spoofing vulnerability
IP Spoofing vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin User Activity Tracking and Log versions 4.1.4...
SUSE CVE-2025-3932
It was possible to craft an email that showed a tracking link as an attachment. If the user attempted to open the attachment, Thunderbird automatically accessed the link. The configuration to block remote content did not prevent that. Thunderbird has been fixed to no longer allow access to web...
CVE-2024-6335
The Tracking Code Manager WordPress plugin before 2.3.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...