1071 matches found
CVE-2025-54964
An issue was discovered in BAE SOCET GXP before 4.6.0.2. An attacker with the ability to interact with the GXP Job Service may inject arbitrary executables. If the Job Service is configured for local-only access, this may allow for privilege escalation in certain situations. If the Job Service is...
CVE-2025-8884
Authorization Bypass Through User-Controlled Key vulnerability in VHS Electronic Software Ltd. Co. ACE Center allows Privilege Abuse, Exploitation of Trusted Identifiers.This issue affects ACE Center: from 3.10.100.1768 before 3.10.161.2255...
CVE-2025-34282 ThingsBoard < v4.2.1 SVG Image SSRF
ThingsBoard versions 4.2.1 contain a server-side request forgery SSRF vulnerability in the dashboard's Image Upload Gallery feature. An attacker can upload a malicious SVG file that references a remote URL. If the server processes the SVG file in a way that parses external references, it may...
CVE-2025-11717
When switching between Android apps using the card carousel Firefox shows a black screen as its card image when a password-related screen was the last one being used. Prior to Firefox 144 the password edit screen was visible. This vulnerability was fixed in Firefox 144...
B&R Automation Runtime 安全漏洞
B&R Automation Runtime is an automation runtime from B&R Automation. A security vulnerability exists in B&R Automation Runtime versions prior to 6.4 that stems from improper neutralization of formula elements in a CSV file, which could allow a remote attacker to inject formula data...
CVE-2025-27258
Ericsson Network Manager ENM versions prior to ENM 25.1 GA contain a vulnerability, if exploited, can result in an escalation of privilege...
WeGIA SQL注入漏洞
WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A SQL injection vulnerability exists in WeGIA versions prior to 3.5.1, which stems from an SQL injection in the cpf parameter in the /html/funcionario/cadastrofuncionariopessoaexistente.php endpoint, whic...
Aykome License Tracking System 安全漏洞
Aykome License Tracking System is a license management system from Aykome Turkey. A security vulnerability exists in Aykome License Tracking System versions prior to 06.10.2025, which stems from improper neutralization of a special element and could lead to an SQL injection attack...
Buffalo NAS Navigator2 代码问题漏洞
Buffalo NAS Navigator2 is a network storage device management tool from Buffalo Japan. A code issue vulnerability exists in Buffalo NAS Navigator2 versions prior to 3.12.0 that stems from a Windows service registering unquoted file paths, which could lead to the execution of arbitrary code by a...
PT-2025-41531
Name of the Vulnerable Software and Affected Versions SonarQube versions prior to 25.6 SonarQube 2025.3 Commercial versions prior to 2025.3 SonarQube 2025.1.3 LTA versions prior to 2025.1.3 Description Authenticated users with low privileges can access the /api/v2/users-management/users endpoint ...
CVE-2025-59993 Junos Space: Space Node Setting fields are vulnerable to reflected cross-site script injection
An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Space Node Setting fields that, when visited by another user, enable the attacker to execute commands with the target...
Better Auth 安全漏洞
Better Auth is a TypeScript's most comprehensive authentication framework open-sourced by Better Auth. A security vulnerability exists in versions of Better Auth prior to 1.3.26 that originates from an unauthenticated attacker who can bypass authentication via the user ID in the request body,...
PT-2025-41378
Name of the Vulnerable Software and Affected Versions Flowmon versions prior to 12.5.5 Description Flowmon network monitoring solutions are affected by an issue that allows an authenticated administrator to execute additional unintended commands within scripts designed for troubleshooting. This...
CVE-2025-62187
In Ankitects Anki before 25.02.6, crafted sound file references could cause files to be written to arbitrary locations on Windows and Linux media file pathnames are not necessarily relative to the media folder...
EUVD-2020-29816
Malware in sbrugna...
EUVD-2021-15845
Malware in sbrugna...
EUVD-2018-1929
Malware in sbrugna...
EUVD-2006-6000
Malware in sbrugna...