CVE-2020-2742

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ...

CVE-2020-28587

A specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an object that is smaller than the size used for the copy, which will cause a heap-based buffer overflow. An attacker can entice the victim to open a document to...

CVE-2020-35932

Insecure Deserialization in the Newsletter plugin before 6.8.2 for WordPress allows authenticated remote attackers with minimal privileges such as subscribers to use the tpncrender AJAX action to inject arbitrary PHP objects via the optionsinlineedits parameter. NOTE: exploitability depends on PH...

CVE-2024-1163

The attacker may exploit a path traversal vulnerability leading to information disclosure...

CVE-2024-33958

SQL injection vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in 'phonenumber' in '/passwordrecover.php' parameter...

CVE-2024-24809

Traccar is an open source GPS tracking system. Versions prior to 6.0 are vulnerable to path traversal and unrestricted upload of file with dangerous type. Since the system allows registration by default, attackers can acquire ordinary user permissions by registering an account and exploit this...

Exploit for CVE-2024-12542

CVE-2024-12542-PoC Missing Authorization to Unauthenticated Se...

PT-2025-7901 · Esri · Esri Arcgis Allsource

Name of the Vulnerable Software and Affected Versions: Esri ArcGIS AllSource versions 1.2 through 1.3 Description: There is an untrusted search path vulnerability that may allow a low privileged attacker with write privileges to the local file system to introduce a malicious executable to the...

The vulnerability of the parisc component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the parisc component in the Linux operating system’s kernel is related to a NULL pointer dereferencing error. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the kernel component of the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the kernel component of the Linux operating system is related to a memory leak. Exploiting this vulnerability can allow an attacker to cause a system failure...

CVE-2024-12184 WordPress Contact Forms by Cimatti <= 1.9.4 - Missing Authorization to Unauthenticated Form Submission Download

The WordPress Contact Forms by Cimatti plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the accuaformsdownloadsubmittedfile function in all versions up to, and including, 1.9.4. This makes it possible for unauthenticated attackers to download...

ROS-20250130-01

Linux operating system kernel vulnerability is linked to security configuration errors. Exploitation exploitation of the vulnerability could allow an attacker to bypass the secure boot mechanism and escalate privileges...

CVE-2024-56529

CVE-2024-56529 concerns Mailcow’s web panel up to version 2024-11b, where a session fixation flaw allows an attacker to set a session ID when a victim’s browser has HSTS disabled. After user authentication, the attacker can reuse the same session ID to access the victim’s web panel. Root cause: o...

CVE-2024-13505

The Survey Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ayssections5questions8title’ parameter in all versions up to, and including, 5.1.3.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2025-02317)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in Oracle MySQL's MySQL Server. An attacker can exploit this vulnerability to cause MySQL Server to hang or crash...

Magma Null Pointer Dereference Vulnerability

Magma is an open source software platform from Magma Open Source. Provides network operators with an open, flexible and scalable mobile core network solution. Magma has a null pointer dereference vulnerability that can be exploited by an attacker to crash MME...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2025-02326)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. Oracle MySQL has a security vulnerability in MySQL Server. An attacker exploiting this vulnerability could cause MySQL Server to hang or crash...

CVE-2024-11139

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could allow local attackers to exploit these issues to potentially execute arbitrary code when opening a malicious project file...

Unspecified Vulnerability in Microsoft Windows Secure Boot (CNVD-2025-02537)

Microsoft Windows Secure Boot is a secure boot from Microsoft USA. A security vulnerability exists in Microsoft Windows Secure Boot. An attacker could exploit the vulnerability to bypass certain features...

Google Chrome Security Bypass Vulnerability (CNVD-2025-05088)

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in versions of Google Chrome prior to 132.0.6834.83, which can be exploited by attackers to bypass security restrictions...