1093 matches found
B&R Automation Runtime 安全漏洞
B&R Automation Runtime is an automation runtime from B&R Automation. A security vulnerability exists in B&R Automation Runtime versions prior to 6.4 that stems from improper neutralization of formula elements in a CSV file, which could allow a remote attacker to inject formula data...
CVE-2025-27258
Ericsson Network Manager ENM versions prior to ENM 25.1 GA contain a vulnerability, if exploited, can result in an escalation of privilege...
WeGIA SQL注入漏洞
WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A SQL injection vulnerability exists in WeGIA versions prior to 3.5.1, which stems from an SQL injection in the cpf parameter in the /html/funcionario/cadastrofuncionariopessoaexistente.php endpoint, whic...
Aykome License Tracking System 安全漏洞
Aykome License Tracking System is a license management system from Aykome Turkey. A security vulnerability exists in Aykome License Tracking System versions prior to 06.10.2025, which stems from improper neutralization of a special element and could lead to an SQL injection attack...
Buffalo NAS Navigator2 代码问题漏洞
Buffalo NAS Navigator2 is a network storage device management tool from Buffalo Japan. A code issue vulnerability exists in Buffalo NAS Navigator2 versions prior to 3.12.0 that stems from a Windows service registering unquoted file paths, which could lead to the execution of arbitrary code by a...
PT-2025-41531
Name of the Vulnerable Software and Affected Versions SonarQube versions prior to 25.6 SonarQube 2025.3 Commercial versions prior to 2025.3 SonarQube 2025.1.3 LTA versions prior to 2025.1.3 Description Authenticated users with low privileges can access the /api/v2/users-management/users endpoint ...
CVE-2025-59993 Junos Space: Space Node Setting fields are vulnerable to reflected cross-site script injection
An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the Space Node Setting fields that, when visited by another user, enable the attacker to execute commands with the target...
Better Auth 安全漏洞
Better Auth is a TypeScript's most comprehensive authentication framework open-sourced by Better Auth. A security vulnerability exists in versions of Better Auth prior to 1.3.26 that originates from an unauthenticated attacker who can bypass authentication via the user ID in the request body,...
PT-2025-41378
Name of the Vulnerable Software and Affected Versions Flowmon versions prior to 12.5.5 Description Flowmon network monitoring solutions are affected by an issue that allows an authenticated administrator to execute additional unintended commands within scripts designed for troubleshooting. This...
CVE-2025-62187
In Ankitects Anki before 25.02.6, crafted sound file references could cause files to be written to arbitrary locations on Windows and Linux media file pathnames are not necessarily relative to the media folder...
EUVD-2019-13191
Malware in sbrugna...
EUVD-2018-19479
Malware in sbrugna...
EUVD-2020-20276
Malware in sbrugna...
EUVD-2018-1929
Malware in sbrugna...
EUVD-2021-15845
Malware in sbrugna...
EUVD-2020-28323
Malware in sbrugna...
EUVD-2018-18865
Malware in sbrugna...
EUVD-2020-20255
Malware in sbrugna...