5532 matches found
PT-2025-3939 · Unknown · 1000 Projects Campaign Management System Platform For Women
Name of the Vulnerable Software and Affected Versions: 1000 Projects Campaign Management System Platform for Women version 1.0 Description: A critical issue has been identified, affecting an unknown functionality of the file /Code/sc login.php. The manipulation of the uname argument leads to SQL...
PT-2025-3934 · Code Projects · Admission Management System
Name of the Vulnerable Software and Affected Versions: code-projects Admission Management System version 1.0 Description: A critical issue was found in the Admission Management System. The problem affects an unknown functionality of the file /signupconfirm.php. The manipulation of the in eml...
PT-2025-4743
Name of the Vulnerable Software and Affected Versions RE11S version 1.11 Description A command injection issue was discovered in the /goform/formAccept component. This allows for potential exploitation. No information is provided about the estimated number of affected devices or real-world...
PT-2025-4997 · Quotemedia · Quotemedia Tools
Name of the Vulnerable Software and Affected Versions: QuoteMedia Tools versions n/a through 1.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This is a type of Cross-site Scripting attack. Recommendations: For...
`root` appended to group listings
Affected versions append root to group listings, unless the correct listing has exactly 1024 groups. This affects both: - The supplementary groups of a user - The group access list of the current process If the caller uses this information for access control, this may lead to privilege escalation...
PT-2025-1208 · Microsoft · Visual Studio
Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Description: The issue is related to insufficient access control in Microsoft Visual Studio, which could allow an attacker to elevate their privileges. Recommendations: At the moment,...
PT-2025-3489 · Monetdb · Monetdb Server
Name of the Vulnerable Software and Affected Versions: MonetDB Server version 11.49.1 Description: The issue in the exp bin component of MonetDB Server allows attackers to cause a Denial of Service DoS via crafted SQL statements. Recommendations: For MonetDB Server version 11.49.1, consider...
PT-2025-4212 · Microsoft · Windows Digital Media +1
Name of the Vulnerable Software and Affected Versions: Windows Digital Media affected versions not specified Description: The issue is related to an elevation of privilege, which allows attackers to affect the system. There is no information provided about the estimated number of potentially...
PT-2025-2418 · Wavlink · Wavlink Ac3000
Name of the Vulnerable Software and Affected Versions: Wavlink AC3000 version M33A8.V5030.210505 Description: A command injection issue exists in the AddMac function of wireless.cgi. This can be triggered by a specially crafted HTTP request, potentially leading to arbitrary command execution. An...
PT-2025-3558 · Msfm +1 · Msfm +1
Name of the Vulnerable Software and Affected Versions: MSFM versions prior to 2025.01.01 Description: A fastjson deserialization issue was found in the component system/table/add. This issue affects MSFM and can be exploited via the system/table/add component. Recommendations: For versions prior ...
PT-2025-3898 · Unknown · Lingdang Crm
Name of the Vulnerable Software and Affected Versions: Lingdang CRM versions up to 8.6.0.0 Description: A critical issue has been found in Lingdang CRM, affecting some unknown processes of the file /crm/weixinmp/index.php. The manipulation of the searchcontent argument leads to SQL injection. The...
PT-2025-2440
Name of the Vulnerable Software and Affected Versions: Fortinet FortiDeceptor versions 3.x through 5.3.0 Description: The issue is related to an improper neutralization of input during web page generation, also known as 'cross-site scripting'. This may allow an attacker to perform a reflected...
PT-2025-1225 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an uncontrolled resource consumption vulnerability in the upnphost.dll library of the Windows operating system. This can be exploited by a remote attacker to cause a...
Selesta Visual Access Manager 安全漏洞
Selesta Visual Access Manager is a visual access manager from Selesta. A cross-site scripting vulnerability exists in Selesta Visual Access Manager, which stems from the application's lack of effective filtering and escaping of user-supplied data, and for which no detailed vulnerability details a...
CVE-2021-3618 affecting package sendmail 8.15.2-46
CVE-2021-3618 affecting package sendmail 8.15.2-46. No patch is available currently...
CVE-2020-25722 affecting package samba 4.12.5-7
CVE-2020-25722 affecting package samba 4.12.5-7. No patch is available currently...
CVE-2021-44038 affecting package quagga 1.2.4-15
CVE-2021-44038 affecting package quagga 1.2.4-15. No patch is available currently...
CVE-2017-5834 affecting package libplist 2.1.0-4
CVE-2017-5834 affecting package libplist 2.1.0-4. No patch is available currently...