4936 matches found
Linux Distros Unpatched Vulnerability : CVE-2017-9079
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dropbear before 2017.75 might allow local users to read certain files as root, if the file has the authorizedkeys file format with a command= option. This occur...
Cross-site Scripting (XSS)
Overview zencart/zencart is an Open Source E-commerce Application Affected versions of this package are vulnerable to Cross-site Scripting XSS via the CKEditor component. An attacker can inject and execute unauthorized scripts by submitting crafted input as an authorized administrator. Note: The...
Linux Distros Unpatched Vulnerability : CVE-2023-49088
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cacti is an open source operational monitoring and fault management framework. The fix applied for CVE-2023-39515 in version 1.2.25 is incomplete as it enables ...
CVE-2025-25005
Improper input validation in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network...
CVE-2025-50166
Integer overflow or wraparound in Windows Distributed Transaction Coordinator allows an authorized attacker to disclose information over a network...
CVE-2025-50157
Use of uninitialized resource in Windows Routing and Remote Access Service RRAS allows an authorized attacker to disclose information over a network...
CVE-2025-50156
Use of uninitialized resource in Windows Routing and Remote Access Service RRAS allows an authorized attacker to disclose information over a network...
CVE-2025-50172
Allocation of resources without limits or throttling in Windows DirectX allows an authorized attacker to deny service over a network...
CVE-2025-49743
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
CVE-2025-49751
Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network...
CVE-2025-53769
External control of file name or path in Windows Security App allows an authorized attacker to perform spoofing locally...
CVE-2025-53153
Use of uninitialized resource in Windows Routing and Remote Access Service RRAS allows an authorized attacker to disclose information over a network...
CVE-2025-47954
Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2025-50153
Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally...
CVE-2025-50162
Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an authorized attacker to execute code over a network...
CVE-2025-53148
Use of uninitialized resource in Windows Routing and Remote Access Service RRAS allows an authorized attacker to disclose information over a network...
CVE-2025-50168
Access of resource using incompatible type 'type confusion' in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...
CVE-2025-50155
Access of resource using incompatible type 'type confusion' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...