15194 matches found
openjdk: Enhance Buffered Image handling (Oracle CPU 2025-04)
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK: 17.0.14, 21.0.6, 24; Oracle...
Cisco Webex App Client-Side Remote Code Execution Vulnerability
A vulnerability in the custom URL parser of Cisco Webex App could allow an unauthenticated, remote attacker to persuade a user to download arbitrary files, which could allow the attacker to execute arbitrary commands on the host of the targeted user. This vulnerability is due to insufficient inpu...
CVE-2025-29651
CVE-2025-29651 (TP-Link M7650) may describe an SQL injection vulnerability in firmware version 1.0.7 Build 170623 Rel.1022n due to unsafely handled username/password inputs, potentially allowing unauthenticated SQL injection. This claim is disputed in Red Hat's advisory (emulator-testing context ...
Amazon Corretto Java 17.x < 17.0.15.6.1 Multiple Vulnerabilities
The version of Amazon Corretto installed on the remote host is 17 prior to 17.0.15.6.1. It is, therefore, affected by multiple vulnerabilities as referenced in the corretto-17-2025-Apr-15 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...
CVE-2025-29650
TP-Link M7200 4G LTE Mobile Wi‑Fi Router firmware version 1.0.7 Build 180127 Rel.55998n is affected by a SQL injection vulnerability. The issue allows an unauthenticated attacker to inject SQL statements via the username and password fields. Remediation and patch details are not publicly provided...
CVE-2025-29653
TP-Link M7450 4G LTE Mobile Wi‑Fi Router is affected by CVE-2025-29653 as reported in multiple sources (Red Hat and PT-2025-16890). The vulnerability is a SQL Injection in firmware version 1.0.2 Build 170306 Rel.1015n, exploitable via the username and password fields. The PT-2025-16890 descriptio...
CVE-2025-29652
This CVE ID is rejected and not used; it does not represent an active vulnerability entry.
CVE-2025-31950
An unauthenticated attacker can obtain EV charger energy consumption information of other users...
CVE-2025-31950
An unauthenticated attacker can obtain EV charger energy consumption information of other users...
CVE-2025-31945
An unauthenticated attacker can obtain other users' charger information...
CVE-2025-27575
An unauthenticated attacker can obtain EV charger version and firmware upgrading history by knowing the charger ID...
CVE-2025-27565
An unauthenticated attacker can delete any user's "rooms" by knowing the user's and room IDs...
CVE-2025-25276
An unauthenticated attacker can hijack other users' devices and potentially control them...
CVE-2025-27927 Growatt Cloud portal Authorization Bypass Through User-Controlled Key
An unauthenticated attackers can obtain a list of smart devices by knowing a valid username through an unprotected API...
CVE-2025-25276
CVE-2025-25276 relates to Growatt Cloud Applications (Growatt Cloud portal). Connected documents confirm an unauthenticated attacker can hijack other users’ devices and potentially take control, via vulnerabilities including an authorization bypass through a user-controlled key and improper input...