CVE-2024-47516

A vulnerability was found in Pagure. An argument injection in Git during retrieval of the repository history leads to remote code execution on the Pagure instance...

DEBIAN-CVE-2024-47516

A vulnerability was found in Pagure. An argument injection in Git during retrieval of the repository history leads to remote code execution on the Pagure instance...

CVE-2024-47516

A vulnerability was found in Pagure. An argument injection in Git during retrieval of the repository history leads to remote code execution on the Pagure instance...

UBUNTU-CVE-2024-47516

A vulnerability was found in Pagure. An argument injection in Git during retrieval of the repository history leads to remote code execution on the Pagure instance...

CVE-2024-47516 Pagure: argument injection in pagurerepo.log()

A vulnerability was found in Pagure. An argument injection in Git during retrieval of the repository history leads to remote code execution on the Pagure instance...

CVE-2024-47516 Pagure: argument injection in pagurerepo.log()

A vulnerability was found in Pagure. An argument injection in Git during retrieval of the repository history leads to remote code execution on the Pagure instance...

CVE-2024-47516

A vulnerability was found in Pagure. An argument injection in Git during retrieval of the repository history leads to remote code execution on the Pagure instance...

CVE-2025-2751

A vulnerability has been found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This vulnerability affects the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of the component CSM File Handler. The manipulation of the argument na...

UBUNTU-CVE-2025-2724

A vulnerability classified as problematic has been found in GNOME libgsf up to 1.14.53. Affected is the function sortingkeycopy. The manipulation of the argument Name leads to out-of-bounds read. It is possible to launch the attack on the local host. The vendor was contacted early about this...

CVE-2025-2712

CVE-2025-2712 affects Yonyou UFIDA ERP-NC 5.0. The vulnerability is a reflected cross-site scripting (XSS) in the langcode parameter, impacting /help/top.jsp (and, per related templates, /help/systop.jsp). Root cause: unsanitized input reflected in the response, enabling arbitrary JavaScript exec...

CVE-2025-2673

A vulnerability classified as problematic has been found in code-projects Payroll Management System 1.0. Affected is an unknown function of the file /homeemployee.php. The manipulation of the argument division leads to cross site scripting. It is possible to launch the attack remotely. The exploi...

CVE-2025-2674

CVE-2025-2674 affects PHPGurukul Bank Locker Management System 1.0 . The vulnerability targets an unknown functionality in the file /aboutus.php where modification of the pagetitle parameter leads to SQL injection . Attack could be launched remotely over the network, with exploitation publicly di...

PT-2025-12679 · Yonyou · Yonyou Ufida Erp-Nc

Name of the Vulnerable Software and Affected Versions: Yonyou UFIDA ERP-NC version 5.0 Description: A vulnerability was found in Yonyou UFIDA ERP-NC, affecting an unknown functionality of the file /help/top.jsp. The manipulation of the langcode argument leads to cross site scripting. The attack c...

PT-2025-12504 · Jizhicms · Jizhicms

Name of the Vulnerable Software and Affected Versions: JIZHICMS version 1.7.0 Description: A vulnerability has been found in JIZHICMS, affecting some unknown functionality of the file /user/userinfo.html of the component Account Profile Page. The manipulation of the jifen argument leads to improp...

CVE-2025-2593 FastCMS list sql injection

A vulnerability has been found in FastCMS up to 0.1.5 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /api/client/article/list. The manipulation of the argument orderBy leads to sql injection. The attack can be launched remotely. The exploit has...

PT-2025-12451 · Unknown · Lzcms-Laozhangbokexitong

Name of the Vulnerable Software and Affected Versions: LzCMS-LaoZhangBoKeXiTong versions up to 1.1.4 Description: A critical issue affects some unknown functionality of the file /admin/upload/upimage.html, specifically the HTTP POST Request Handler component. The manipulation of the File argument...

CLSA-2025-1742379365 Fix CVE(s): CVE-2025-0840

SECURITY UPDATE: stack-based buffer overflow via manipulation of argument - debian/patches/CVE-2025-0840.patch: Fix stack-buffer-overflow at objdump disassemblebytes by restricting insnwidth to range 1-49 - CVE-2025-0840...

UBUNTU-CVE-2025-2361

A vulnerability was found in Mercurial SCM 4.5.3/71.19.145.211. It has been declared as problematic. This vulnerability affects unknown code of the component Web Interface. The manipulation of the argument cmd leads to cross site scripting. The attack can be initiated remotely. The exploit has be...

CVE-2025-2361

A vulnerability was found in Mercurial SCM 4.5.3/71.19.145.211. It has been declared as problematic. This vulnerability affects unknown code of the component Web Interface. The manipulation of the argument cmd leads to cross site scripting. The attack can be initiated remotely. The exploit has be...

PT-2025-11389

Name of the Vulnerable Software and Affected Versions: Mercurial SCM version 4.5.3 Description: A vulnerability was found in the Web Interface component of Mercurial SCM, where the manipulation of the cmd argument leads to cross-site scripting. The attack can be initiated remotely. Recommendation...