38396 matches found
PT-2025-28275 · Sap · Sap Plug-In Basis +1
Name of the Vulnerable Software and Affected Versions: SAP Business Warehouse and SAP Plug-In Basis affected versions not specified Description: The issue allows an authenticated attacker to add fields to arbitrary SAP database tables and/or structures, potentially rendering the system unusable. ...
PT-2025-28278 · Sap Se · Sap Netweaver App Server Abap & Abap Platform
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An unauthenticated attacker may exploit a scenario where a Hashed Message Authentication Code HMAC credential, extracted from a system missing specific security patches, is reused in a repla...
CVE-2025-3044
A hash collision flaw was found in llamaindex. The MD5 function is used in the ArxivReader class, and given the weakness in the MD5 hashing algorithm, an attacker can build colliding inputs. Mitigation Mitigation for this issue is either not available or the currently available options do not mee...
CVE-2025-32023
CVE-2025-32023 affects Redis with a stack/heap out-of-bounds write in hyperloglog operations, potentially enabling remote code execution. Affected versions range from 2.8 up to before 8.0.3, and specific 7.x/6.2 lines (8.0.3, 7.4.5, 7.2.10, 6.2.19) are fixed. The root cause is an out-of-bounds wr...
CVE-2025-7107
creationtimestamp| type| source ---|---|--- 2025-07-07 07:56:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltecrhqeeo2m...
CVE-2025-53186
Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-53186
Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-53186
The CVE-2025-53186 issue concerns Huawei HarmonyOS and EMUI, affecting the Audio Framework module. The connected sources describe that a third-party calling application can send broadcasts without authentication/verification, enabling an impact primarily on availability. Specific affected product...
CVE-2025-53186
Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module Impact: Successful exploitation of this vulnerability may affect availability...
webkitgtk: Use-after-free may lead to application termination or arbitrary code execution
A use-after-free issue was found in webkitgtk that affected WebKitGTK versions before 2.28.4 and WPE WebKit versions before 2.28.4. This flaw allows a remote attacker to cause unexpected application termination or arbitrary code execution. The highest threat from this vulnerability is to...
CampCodes Complaint Management System 注入漏洞
CampCodes Complaint Management System is a complaint management system from CampCodes Philippines. An injection vulnerability exists in CampCodes Complaint Management System version 1.0, which stems from improper handling of the parameter email in the file /users/checkavailability.php, which coul...
OPENSUSE-SU-2025:15317-1 incus-6.14-1.1 on GA media
These are all security issues fixed in the incus-6.14-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15316-1 python311-Pillow-11.3.0-1.1 on GA media
These are all security issues fixed in the python311-Pillow-11.3.0-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2025-28121 · Huawei +1 · Emui +1
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A vulnerability exists in the audio framework module, allowing third-party call apps to send broadcasts without verification. Successful exploitation of this issue may affect availability...
security-advisories
OCaml Security Advisory Database The OCaml Security Advisory...
OPENSUSE-SU-2025:15307-1 velociraptor-0.7.0.4.git163.87ee3570-1.1 on GA media
These are all security issues fixed in the velociraptor-0.7.0.4.git163.87ee3570-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15260-1 perl-File-Find-Rule-0.350.0-1.1 on GA media
These are all security issues fixed in the perl-File-Find-Rule-0.350.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15213-1 curl-8.14.1-4.1 on GA media
These are all security issues fixed in the curl-8.14.1-4.1 package on the GA media of openSUSE Tumbleweed...