2649 matches found
govulncheck-vulndb-0.0.20250807T150727-1.1 on GA media (moderate)
govulncheck-vulndb-0.0.20250807T150727-1.1 on GA media Announcement ID: openSUSE-SU-2025:15424-1 Rating: moderate Cross-References: CVE-2015-7561 CVE-2016-9962 CVE-2017-1000056 CVE-2017-1002102 CVE-2018-1002100 CVE-2018-1002101 CVE-2018-16733 CVE-2018-19184 CVE-2019-1002100 CVE-2019-1002101...
CVE-2025-50466
OpenMetadata (OpenMetadata service)
Wordfence Intelligence Weekly WordPress Vulnerability Report (July 21, 2025 to July 27, 2025)
Calling all Vulnerability Researchers and Bug Bounty Hunters! Spring into Summer with Wordfence! Now through August 4, 2025, earn 2X bounty rewards forall in-scope submissions from our 'High Threat' list in software with fewer than 5 million active installs. Bounties up to $31,200 per...
CVE-2024-49740
creationtimestamp| type| source ---|---|--- 2025-07-30 07:59:24+00:00| seen| https://vulnerability.circl.lu/bundle/9d7fef5d-952d-4ecc-880d-94d02304e7a3...
CVE-2025-22431
creationtimestamp| type| source ---|---|--- 2025-07-30 07:59:24+00:00| seen| https://vulnerability.circl.lu/bundle/9d7fef5d-952d-4ecc-880d-94d02304e7a3...
CVE-2025-26445
creationtimestamp| type| source ---|---|--- 2025-07-30 07:59:24+00:00| seen| https://vulnerability.circl.lu/bundle/9d7fef5d-952d-4ecc-880d-94d02304e7a3...
CVE-2025-26458
creationtimestamp| type| source ---|---|--- 2025-07-30 07:59:24+00:00| seen| https://vulnerability.circl.lu/bundle/9d7fef5d-952d-4ecc-880d-94d02304e7a3...
WordPress WP Wallcreeper Authorization Issues Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. An authorization issue vulnerability exists in WordPress WP Wallcreeper, which stems from a lack of capability checking in the adminnotices hook, and can be exploited by an...
CVE-2025-33109
IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 is vulnerable to a privilege escalation caused by an invalid database authority check. A bad actor could execute a database procedure or function without having all required permissions, in addition to causing denial of service for some database actions...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a security vulnerability that stems from the presence of a memory leak...
Tenda FH451 formSafeClientFilter Function Buffer Overflow Vulnerability
The Tenda FH451 is a router from the Chinese company Tenda. The Tenda FH451 version 1.0.0.9 suffers from a buffer overflow vulnerability that originates from the parameter Go/page in file /goform/SafeClientFilter that fails to properly validate the length of the input data, which can be exploited...
Siemens SICAM TOOLBOX II Trust Management Issue Vulnerability
Siemens SICAM TOOLBOX II is an engineering software from Siemens, Germany. A trust management issue vulnerability exists in Siemens SICAM TOOLBOX II that stems from a failure to check the extended key usage attribute of a device certificate, which could be exploited by an attacker to cause a...
Microsoft Windows Input Validation Error Vulnerability (CNVD-2025-16780)
Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. Microsoft Windows has a security vulnerability. An attacker can exploit the vulnerability to elevate privileges...
CVE-2025-54062
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in versions prior to 3.4.6 in the /html/funcionario/profiledependente.php endpoint, specifically in the iddependente parameter. This vulnerability...
Wordfence Intelligence Weekly WordPress Vulnerability Report (July 7, 2025 to July 13, 2025)
Calling all Vulnerability Researchers and Bug Bounty Hunters! Spring into Summer with Wordfence! Now through August 4, 2025, earn 2X bounty rewards forall in-scope submissions from our 'High Threat' list in software with fewer than 5 million active installs. Bounties up to $31,200 per...
CVE-2025-54061 WeGIASQL Injection (Blind Time-Based) Vulnerability in idatendido_familiares Parameter on dependente_editarDoc.php Endpoint
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in versions prior to 3.4.6 in the idatendidofamiliares parameter of the /html/funcionario/dependenteeditarDoc.php endpoint. This vulnerability allo...
CVE-2025-53946 WeGIA vulnerable to SQL Injection in endpoint profile_paciente.php parameter id_fichamedica
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in versions prior to 3.4.5 in the idfuncionario parameter of the /html/saude/profilepaciente.php endpoint. This vulnerability allows attacker to...
goldendict 安全漏洞
goldendict is a feature-rich dictionary lookup program from goldendict open source. A security vulnerability exists in goldendict versions 1.5.0 and 1.5.1, which stems from exposing dangerous methods that could lead to file reads and modifications...
CVE-2025-53639
MeterSphere is an open source continuous testing platform. Prior to version 3.6.5-lts, the sortField parameter in certain API endpoints is not properly validated or sanitized. An attacker can supply crafted input to inject and execute arbitrary SQL statements through the sorting functionality. Th...