1771 matches found
CVE-2025-25586
The CVE-2025-25586 entry relates to yimioa with an information disclosure vulnerability via the /resources/application.yml path, affecting versions prior to v2024.07.04. The standard CVSSv3.1 metrics indicate a Medium base score (4.2) with LOCAL attack vector, HIGH attack complexity, and LOW priv...
CVE-2025-2342
A vulnerability classified as critical has been found in IROAD X5 Mobile App up to 5.2.5 on Android. Affected is an unknown function of the component API Endpoint. The manipulation leads to hard-coded credentials. It is possible to launch the attack remotely. The exploit has been disclosed to the...
CVE-2024-34398
An issue was discovered in BMC Remedy Mid Tier 7.6.04. The web application allows stored HTML Injection by authenticated remote attackers...
CVE-2024-54449
The CVE-2024-54449 entry describes a flaw in LogicalDOC’s document API where two endpoints allow an authenticated user (with read/write on an existing document) to write arbitrary files to the server’s filesystem, enabling potential remote code execution. Affected component: the document-manageme...
CVE-2025-25175
CVE-2025-25175 affects Siemens/Simcenter Femap: memory corruption in the NEU file parsing path. Affected versions are Simcenter Femap V2401 (all < V2401.0003) and V2406 (all
CVE-2025-27773
The SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. Prior to versions 4.17.0 and 5.0.0-alpha.20, there is a signature confusion attack in the HTTPRedirect binding. An attacker with any signed SAMLResponse via the HTTP-Redirect binding can cause the application to...
CVE-2025-2190
The mobile application com.transsnet.store has a man-in-the-middle attack vulnerability, which may lead to code injection risks...
CVE-2025-25242 Cross-Site Scripting (XSS) in SAP NetWeaver Application Server ABAP
SAP NetWeaver Application Server ABAP allows malicious scripts to be executed in the application, potentially leading to a Cross-Site Scripting XSS vulnerability. This has no impact on the availability of the application, but it can have some minor impact on its confidentiality and integrity...
Amazon Linux 2 : aws-kinesis-agent (ALAS-2025-2788)
The version of aws-kinesis-agent installed on the remote host is prior to 2.0.10-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2788 advisory. In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in...
AT Software Solutions ATSVD 注入漏洞
AT Software Solutions ATSVD is an application from the Brazilian company AT Software Solutions. An injection vulnerability exists in AT Software Solutions ATSVD version 3.4.1 and earlier, which stems from an incorrect manipulation of the parameter txtCPF that can lead to SQL injection...
CVE-2025-27663
Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Weak Password Encryption / Encoding OVE-20230524-0007...
CVE-2025-27660
Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cross Site Scripting OVE-20230524-0003...
CVE-2025-27655
Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Server-Side Request Forgery: CPA v1 V-2023-009...
CVE-2025-27675
Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Vulnerable OpenID Implementation V-2023-004...
CVE-2025-27684
Vasion Print formerly PrinterLogic before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Debug Bundle Contains Sensitive Data V-2022-003...
ROS-20250307-12
Nomad application orchestrator vulnerability related to customization of wildcard namespace usage. namespace. Exploitation of the vulnerability could allow an attacker acting remotely to bypass ACL policy by allowing reads from other namespaces. ACL policy by allowing reads from other namespaces...
CVE-2025-22623
Ad Inserter - Ad Manager and AdSense Ads 2.8.0 was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/includes/dst/dst.php...
CVE-2025-22623 Ad Inserter - Reflected cross-site scripting (XSS)
Ad Inserter - Ad Manager and AdSense Ads 2.8.0 was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/includes/dst/dst.php...