8853 matches found
EUVD-2022-7075
Malicious code in bioql PyPI...
EUVD-2021-31399
Malicious code in bioql PyPI...
EUVD-2022-25704
Malicious code in bioql PyPI...
EUVD-2021-31401
Malicious code in bioql PyPI...
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none
...
CVE-2025-48869
Horilla is a free and open source Human Resource Management System HRMS. Unauthenticated users can access uploaded resume files in Horilla 1.3.0 by directly guessing or predicting file URLs. These files are stored in a publicly accessible directory, allowing attackers to retrieve sensitive...
CVE-2025-48869
Horilla HRMS v1.3.0 is affected by a broken access control vulnerability that allows unauthenticated users to retrieve uploaded resume files by guessing or predicting file URLs. Files reside in a publicly accessible directory, enabling disclosure of sensitive candidate information without authent...
CVE-2025-48869 Horilla Unauthorized Access to Candidate Resume Files Due to Broken Access Control
Horilla is a free and open source Human Resource Management System HRMS. Unauthenticated users can access uploaded resume files in Horilla 1.3.0 by directly guessing or predicting file URLs. These files are stored in a publicly accessible directory, allowing attackers to retrieve sensitive...
Horilla 访问控制错误漏洞
Horilla is a free and open source human resources software from Horilla, Inc. An access control error vulnerability exists in Horilla version 1.3.0 that originates from an unauthenticated user being able to access an uploaded resume file by guessing or predicting the file URL, which could result ...
PT-2025-39308
Name of the Vulnerable Software and Affected Versions Horilla version 1.3.0 Description Horilla is a Human Resource Management System HRMS. Unauthenticated users can access uploaded resume files by directly guessing or predicting file URLs. These files are stored in a publicly accessible director...
PT-2025-38117
CVE-2025-55777 - Apache Non-Security Issue CVE ID : CVE-2025-55777 Published : Sept. 15, 2025, 6:15 p.m. | 2 hours, 43 minutes ago Description : Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that ...
CVE-2025-39734
In the Linux kernel, the following vulnerability has been resolved: Revert "fs/ntfs3: Replace inodetrylock with inodelock" This reverts commit 69505fe98f198ee813898cbcaf6770949636430b. Initially, conditional lock acquisition was removed to fix an xfstest bug that was observed during internal...
CVE-2025-39734 Revert "fs/ntfs3: Replace inode_trylock with inode_lock"
In the Linux kernel, the following vulnerability has been resolved: Revert "fs/ntfs3: Replace inodetrylock with inodelock" This reverts commit 69505fe98f198ee813898cbcaf6770949636430b. Initially, conditional lock acquisition was removed to fix an xfstest bug that was observed during internal...
CVE-2025-26437
In CredentialManagerServiceStub of CredentialManagerService.java, there is a possible way to retrieve candidate credentials due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...
PT-2025-36015
Name of the Vulnerable Software and Affected Versions: CredentialManagerService affected versions not specified Description: A missing permission check in the CredentialManagerServiceStub of CredentialManagerService.java may allow retrieval of candidate credentials, potentially leading to local...
An issue was discovered in NASM version 2.16rc0. There are memory leaks in nasm_malloc() in nasmlib/alloc.c.
...
PT-2025-33622 · Undefined · Undefined
CVE-2025-44201 - Apache None-Severity CVE ID : CVE-2025-44201 Published : Aug. 15, 2025, 9:15 p.m. | 51 minutes ago Description : Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a...
PT-2025-33617 · Undefined · Undefined
CVE-2024-12573 - Apache Web Server Authentication Bypass CVE ID : CVE-2024-12573 Published : Aug. 15, 2025, 3:15 p.m. | 2 hours, 49 minutes ago Description : Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-24752 Reason: This candidate is a reservation duplicate of...
