CVE-2023-24721

A cross-site scripting XSS vulnerability in LiveAction LiveSP v21.1.2 allows attackers to execute arbitrary web scripts or HTML...

CVE-2023-2339

Cross-site Scripting XSS - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21...

CVE-2023-23468

IBM Robotic Process Automation for Cloud Pak 21.0.1 through 21.0.7.3 and 23.0.0 through 23.0.3 is vulnerable to insufficient security configuration which may allow creation of namespaces within a cluster. IBM X-Force ID: 244500...

CVE-2023-2322

Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.5.21...

CVE-2021-21987

VMware Workstation 16.x prior to 16.1.2 and Horizon Client for Windows 5.x prior to 5.5.2 contain out-of-bounds read vulnerability in the Cortado ThinPrint component TTC Parser. A malicious actor with access to a virtual machine or remote desktop may be able to exploit these issues leading to...

CVE-2021-27253

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handli...

CVE-2021-20093

A buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions 7.21a. An unauthenticated remote attacker can exploit this issue to disclose heap memory contents or crash the CodeMeter Runtime Server...

CVE-2021-0102

Insecure inherited permissions in the Intel UniteR Client for Windows before version 4.2.25031 may allow an authenticated user to potentially enable an escalation of privilege via local access...

CVE-2021-32742

Vapor is a web framework for Swift. In versions 4.47.1 and prior, bug in the Data.initbase32Encoded: function opens up the potential for exposing server memory and/or crashing the server Denial of Service for applications where untrusted data can end up in said function. Vapor does not currently...

CVE-2020-14555

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Marketing Administration. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

CVE-2020-12926

The Trusted Platform Modules TPM reference software may not properly track the number of times a failed shutdown happens. This can leave the TPM in a state where confidential key material in the TPM may be able to be compromised. AMD believes that the attack requires physical access of the device...

CVE-2025-48204

creationtimestamp| type| source ---|---|--- 2025-05-21 17:18:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpp4anh5bx2k 2025-05-21 20:41:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17200...

AZL-61972 CVE-2025-40775 affecting package bind for versions less than 9.20.9-1

When an incoming DNS protocol message includes a Transaction Signature TSIG, BIND always checks it. If the TSIG contains an invalid value in the algorithm field, BIND immediately aborts with an assertion failure. This issue affects BIND 9 versions 9.20.0 through 9.20.8 and 9.21.0 through 9.21.7...

CVE-2021-25255

Yandex Browser Lite for Android prior to version 21.1.0 allows remote attackers to cause a denial of service...

CVE-2021-3305

creationtimestamp| type| source ---|---|--- 2025-05-13 15:31:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16154...

UBUNTU-CVE-2025-4207

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13,...

CVE-2025-1301 Reflected XSS in Yordam Informatics' Library Automation System

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Yordam Informatics Library Automation System allows Reflected XSS. This issue affects Library Automation System: before 21.6...

SUSE-SU-2025:1429-1 Security update for java-21-openjdk

This update for java-21-openjdk fixes the following issues: Update to upstream tag jdk-21.0.7+6 April 2025 CPU CVEs fixed: + CVE-2025-21587: Fixed JSSE unauthorized access, deletion or modification of critical data bsc1241274 + CVE-2025-30691: Fixed Oracle Java SE Compiler Unauthorized Data Acces...

CVE-2025-34490

GFI MailEssentials

GFI MailEssentials 安全漏洞

GFI MailEssentials is an email security suite from GFI that includes 14 anti-spam filters, 3 anti-virus engines, and malware scanning capabilities. A security vulnerability exists in GFI MailEssentials versions prior to 21.8, which stems from the .NET Remoting Service improperly handling speciall...