ROS-20260512-73-0016

A vulnerability in the Core component of Oracle VM VirtualBox virtual machine is related to insufficient input validation. Exploitation of the vulnerability could allow an attacker to gain full control over the application...

CVE-2025-55267

HCL Aftermarket DPC is affected by Unrestricted File Upload vulnerability, allows attacker to upload and execute malicious scripts, gaining full control over the server...

Xylem AquaView Trust Management Vulnerability

Xylem AquaView is a next-generation SCADA system from Xylem USA, Inc. to meet the needs of water and wastewater related professionals for a simpler, more personalized way to be able to monitor, control, and optimize their assets anytime, anywhere, from any device. A trust management issue...

Oracle VM VirtualBox Core Component Privilege Escalation

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...

Oracle VM VirtualBox Full Control

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...

Windows AppX Deployment Server Privilege Escalation

The vulnerability of the Windows AppX Deployment Server component of the operating system is related to insecure management of privileges. Exploiting this vulnerability can allow a perpetrator to gain control over the system through a specially created application...

Sun ZFS Storage Appliance Kit Object Store Full Control

The vulnerability of the Object Store component in the Sun ZFS Storage Appliance Kit is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain full control over the application...

Struts2 Command Execution Vulnerability in Government Network System

The Government Web System is a set of software designed to provide website building services for the government. A struts2 command-and-execute vulnerability exists in the GovWeb system, which can be exploited by an attacker to gain control of the website...