38224 matches found
CVE-2025-42952
CVE-2025-42952 affects SAP Business Warehouse and SAP Plug-In Basis. An authenticated attacker can add fields to arbitrary SAP database tables/structures, potentially rendering the system unusable by triggering short dumps on login. Availability impact is High; no read/change/delete of data is in...
PT-2025-28282 · Sap · Sap Netweaver Application Server For Java Log Viewer
Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application server for Java affected versions not specified Description: A critical issue in the Log Viewer component enables authenticated administrator users to exploit unsafe Java object deserialization. Successful exploitati...
OPENSUSE-SU-2025:15319-1 djvulibre-3.5.29-1.1 on GA media
These are all security issues fixed in the djvulibre-3.5.29-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15320-1 avif-tools-1.3.0-2.1 on GA media
These are all security issues fixed in the avif-tools-1.3.0-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15323-1 libpoppler-cpp2-25.06.0-1.1 on GA media
These are all security issues fixed in the libpoppler-cpp2-25.06.0-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2025-28276 · Sap · Sap Netweaver System Configuration
Name of the Vulnerable Software and Affected Versions: SAP Netweaver System Configuration affected versions not specified Description: The issue results from a lack of necessary authorization checks for an authenticated user, leading to escalation of privileges. This could completely compromise t...
PT-2025-28283 · Sap · Sap Netweaver Enterprise Portal Administration
Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Enterprise Portal Administration affected versions not specified Description: The issue arises when a privileged user uploads untrusted or malicious content. Upon deserialization, this content could compromise the confidentialit...
OPENSUSE-SU-2025:15322-1 libPocoActiveRecord112-1.14.2-1.1 on GA media
These are all security issues fixed in the libPocoActiveRecord112-1.14.2-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2025-28275 · Sap · Sap Plug-In Basis +1
Name of the Vulnerable Software and Affected Versions: SAP Business Warehouse and SAP Plug-In Basis affected versions not specified Description: The issue allows an authenticated attacker to add fields to arbitrary SAP database tables and/or structures, potentially rendering the system unusable. ...
PT-2025-28278 · Sap Se · Sap Netweaver App Server Abap & Abap Platform
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An unauthenticated attacker may exploit a scenario where a Hashed Message Authentication Code HMAC credential, extracted from a system missing specific security patches, is reused in a repla...
CVE-2025-3044
A hash collision flaw was found in llamaindex. The MD5 function is used in the ArxivReader class, and given the weakness in the MD5 hashing algorithm, an attacker can build colliding inputs. Mitigation Mitigation for this issue is either not available or the currently available options do not mee...
CVE-2025-32023
CVE-2025-32023 affects Redis with a stack/heap out-of-bounds write in hyperloglog operations, potentially enabling remote code execution. Affected versions range from 2.8 up to before 8.0.3, and specific 7.x/6.2 lines (8.0.3, 7.4.5, 7.2.10, 6.2.19) are fixed. The root cause is an out-of-bounds wr...
CVE-2025-7107
creationtimestamp| type| source ---|---|--- 2025-07-07 07:56:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltecrhqeeo2m...
CVE-2025-53186
Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-53186
Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-53186
Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-53186
The CVE-2025-53186 issue concerns Huawei HarmonyOS and EMUI, affecting the Audio Framework module. The connected sources describe that a third-party calling application can send broadcasts without authentication/verification, enabling an impact primarily on availability. Specific affected product...
webkitgtk: Use-after-free may lead to application termination or arbitrary code execution
A use-after-free issue was found in webkitgtk that affected WebKitGTK versions before 2.28.4 and WPE WebKit versions before 2.28.4. This flaw allows a remote attacker to cause unexpected application termination or arbitrary code execution. The highest threat from this vulnerability is to...
CampCodes Complaint Management System 注入漏洞
CampCodes Complaint Management System is a complaint management system from CampCodes Philippines. An injection vulnerability exists in CampCodes Complaint Management System version 1.0, which stems from improper handling of the parameter email in the file /users/checkavailability.php, which coul...