12852 matches found
CVE-2025-12961
creationtimestamp| type| source ---|---|--- 2025-11-18 09:56:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5vhwiebtq2q...
CVE-2025-7711
creationtimestamp| type| source ---|---|--- 2025-11-18 02:00:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5unduvdqr26...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-41064)
powerpc/eeh: possible crash when edev-pdev changes. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504739; scriptversion"1.3";...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56532)
ALSA: us122l: OTOH, the current code uses sndcardfree at disconnection, but this waits for the close of all used fds, hence it can take long. It eventually blocks the upper layer USB ioctls, which may trigger a soft lockup. This plugin only works with Tenable.ot. Please visit...
CVE-2025-60455
Unsafe Deserialization vulnerability in Modular Max Serve before 25.6, specifically when the "--experimental-enable-kvcache-agent" feature is used allowing attackers to execute arbitrary code...
OPENSUSE-SU-2025:15740-1 erlang27-27.1.3-1.1 on GA media
These are all security issues fixed in the erlang27-27.1.3-1.1 package on the GA media of openSUSE Tumbleweed...
WordPress plugin Photonic Gallery & Lightbox for Flickr, SmugMug & Others 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host a personal blog site on a PHP and MySQL based...
PT-2025-47378
Name of the Vulnerable Software and Affected Versions Modular Max Serve versions prior to 25.6 Description An unsafe deserialization issue exists in Modular Max Serve when the "--experimental-enable-kvcache-agent" feature is utilized. This allows attackers to potentially execute arbitrary code. T...
EUVD-2025-197865
A vulnerability was detected in itsourcecode Web-Based Internet Laboratory Management System 1.0. This affects an unknown function of the file /enrollment/controller.php. Performing manipulation results in sql injection. The attack is possible to be carried out remotely. The exploit is now public...
EUVD-2025-197871
IBM Planning Analytics Local 2.1.0 through 2.1.14 could allow a remote authenticated user to traverse directories on the system. An attacker could send a specially crafted URL request containing absolute path sequences to view, read, or write arbitrary files on the system...
EUVD-2025-197848
CWE-20 Improper Input Validation...
CVE-2025-55058
CWE-20 Improper Input Validation...
RHEL 10 : java-25-openjdk (RHSA-2025:21485)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:21485 advisory. The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit. Security Fixes:...
EUVD-2025-197676
Not used...
CVE-2025-11981
CVE-2025-11981 affects the WordPress plugin School Management System – WPSchoolPress up to version 2.2.23 . The vulnerability is an SQL Injection via the SCodes parameter caused by insufficient escaping and inadequate query preparation. The impact described in the sources is that an attacker with...
Cryptographic Failure Third-Party Dependency in Bitbucket Data Center and Server - CVE-2022-24771
This High severity vulnerability known as CVE-2022-24771 was introduced in 8.19.0, 8.19.1, 8.19.2, 8.19.3, 8.19.4, 8.19.5, 8.19.6, 8.19.7, 8.19.8, 8.19.9, 8.19.10, 8.19.11, 8.19.12, 8.19.13, 8.19.14, 8.19.15 of Bitbucket Data Center and Server. This vulnerability with a CVSS Score of 7.5 and a CV...
Prototype Pollution Third-Party Dependency in Bitbucket Data Center and Server - CVE-2022-46175
This High severity vulnerability known as CVE-2022-46175 was introduced in 8.19.0, 8.19.1, 8.19.2, 8.19.3, 8.19.4, 8.19.5, 8.19.6, 8.19.7, 8.19.8, 8.19.9, 8.19.10, 8.19.11, 8.19.12, 8.19.13, 8.19.14, 8.19.15 of Bitbucket Data Center and Server. This vulnerability with a CVSS Score of 7.1 and a CV...
BELL-CVE-2025-40137
Bulletin has no description...
PHPGurukul Student Record System 安全漏洞
Student Record System is a software application. Student Record System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the adminname and aemailid parameters of admin-profile.php, which can be exploited to...
