2011 matches found
CVE-2025-68156 affecting package keda for versions less than 2.14.1-8
CVE-2025-68156 affecting package keda for versions less than 2.14.1-8. A patched version of the package is available...
CVE-2025-2406
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Verisay Communication and Information Technology Industry and Trade Ltd. Co. Trizbi allows Cross-Site Scripting XSS.This issue affects Trizbi: before 2.144.4...
CVE-2025-68945
In Gitea before 1.21.2, an anonymous user can visit a private user's project...
CVE-2025-68922
OpenOps before 0.6.11 allows remote code execution in the Terraform block...
EUVD-2025-205376
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Verisay Communication and Information Technology Industry and Trade Ltd. Co. Aidango allows Cross-Site Scripting XSS.This issue affects Aidango: before 2.144.4...
CVE-2025-2405
The CVE-2025-2405 entry documents a Cross-Site Scripting (XSS) vulnerability in Verisay Titarus (Verisay Communication and Information Technology Industry and Trade Ltd. Co.). Affected versions before 2.144.4 are exposed due to improper input neutralization during web page generation. The issue c...
CVE-2025-2405 XSS in Verisay Communication's Titarus
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Verisay Communication and Information Technology Industry and Trade Ltd. Co. Titarus allows Cross-Site Scripting XSS. This issue affects Titarus: before 2.144.4...
CVE-2025-67111
Vulnerability summary: CVE-2025-67111 affects OpenDDS DDS prior to 3.33.0. The issue is an integer overflow in the RTPS protocol implementation, enabling a Denial of Service via a crafted message. What’s affected: OpenDDS DDS (RTPS protocol implementation) before v3.33.0. Impact (as stated): Deni...
PT-2025-52863
Name of the Vulnerable Software and Affected Versions 5ire versions 0.15.2 and prior Description 5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. A remote code execution issue exists in the useMarkdown.ts file due to the markdown-it-mermaid...
CVE-2025-63662
Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information...
CVE-2025-14018
CVE-2025-14018 describes an Unquoted Search Path or Element vulnerability in NetBT Consulting Services Inc. E-Fatura prior to version 1.2.15. The root cause is unquoted configuration/file search paths that can be manipulated to redirect access to libraries. Impact per the sources is high confiden...
CVE-2025-63662
Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information...
EUVD-2025-204544
Galette is a membership management web application for non profit organizations. Starting in version 1.1.4 and prior to version 1.2.0, a user who is logged in as group manager may bypass intended restrictions on Contributions and Transactions. Version 1.2.0 fixes the issue...
CVE-2025-7047
Missing Authorization vulnerability in Utarit Informatics Services Inc. SoliClub allows Privilege Abuse.This issue affects SoliClub: before 5.3.7...
CVE-2025-63389
A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3. The platform exposes multiple API endpoints without requiring authentication, enabling remote attackers to perform unauthorized model management operations...
AVideo 安全漏洞
AVideo is an open source broadcast network creation tool from World Wide Broadcast Network. A security vulnerability exists in AVideo versions prior to 20.0, which stems from a lack of ownership checking in the upload function that could cause an authenticated user to upload files to another user...
CVE-2025-67787
DriveLock Operations Center is affected by a Cross Site Scripting (XSS) flaw in versions 25.1.2 through 25.1.4, enabling potential session takeover over the network. The issue is documented across multiple sources (Red Hat, NVD, CNNVD, etc.) and is tied to version 25.1.2 before 25.1.5. The common...
PT-2025-51793
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 143.0.7499.147 Description A flaw exists in the V8 component of Google Chrome that could allow a remote attacker to exploit heap corruption. This is due to an out-of-bounds read and write condition triggered by ...
GO-2025-4154 new-api is vulnerable to SSRF Bypass in one-api
new-api is vulnerable to SSRF Bypass in one-api. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the repor...