CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

315 matches found

ptsecurity•added 2025/11/19 12:0 a.m.•8 views

PT-2025-47477

AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web administration component F2MAdmin that exposes an unauthenticated script-management endpoint at AudioCodes files/utils/IVR/diagram/ajaxScript.php. The saveScript action writes attacker-suppli...

9.3CVSS7.1AI score0.00635EPSS

Exploits2References5

cnnvd•added 2025/11/14 12:0 a.m.•4 views

TG8 Firewall 安全漏洞

TG8 Firewall is a firewall from TG8 Inc. A security vulnerability exists in TG8 Firewall that originates from an unauthenticated HTTP directory exposing credential files, which could lead to information disclosure and unauthorized access...

8.7CVSS6.2AI score0.00647EPSS

Exploits0References4

osv•added 2025/10/21 5:15 p.m.•5 views

CVE-2025-60500

QDocs Smart School Management System 7.1 allows authenticated users with roles such as "accountant" or "admin" to bypass file type restrictions in the media upload feature by abusing the alternate YouTube URL option. This logic flaw permits uploading of arbitrary PHP files, which are stored in a...

7.2CVSS5.9AI score0.00482EPSS

Exploits1References1

vulnrichment•added 2025/10/21 12:0 a.m.•4 views

CVE-2025-60500

6.5AI score0.00482EPSS

Exploits1References1

cve•added 2025/10/21 12:0 a.m.•18 views

CVE-2025-60500

QDocs Smart School Management System 7.1 contains a logic flaw in the media upload feature that lets authenticated users with roles such as accountant or admin bypass file type restrictions by abusing the alternate YouTube URL option. This enables uploading arbitrary PHP files that are stored in ...

7.2CVSS6.5AI score0.00482EPSS

Exploits1References1Affected Software1