30873 matches found
TOTOLINK X18 Command Execution Vulnerability
The TOTOLINK X18 is a wireless router from TOTOLINK that provides a high-speed and stable wireless network connection. The TOTOLINK X18 suffers from a command execution vulnerability that originates in the enable parameter of the sub41105C function of the cstecgi.cgi file. An attacker can exploit...
The vulnerability of the ImportConnectionVariables method in the software for managing and monitoring deleted objects in telemetry and telemechanics systems, allowing a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the ImportConnectionVariables method in software for managing and monitoring remote objects in telemetry and telemechanics systems is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the...
CVE-2025-43855 tRPC 11 WebSocket DoS Vulnerability
tRPC allows users to build & consume fully typesafe APIs without schemas or code generation. In versions starting from 11.0.0 to before 11.1.1, an unhandled error is thrown when validating invalid connectionParams which crashes a tRPC WebSocket server. This allows any unauthenticated user to cras...
CVE-2021-47662 Unauthenticated remote shutdown of the cobot
Due to missing authorization an unauthenticated remote attacker can cause a DoS attack by connecting via HTTPS and triggering the shutdown button...
PT-2025-22228
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock scenario in the Linux kernel has been resolved. The issue occurred when the ucsi displayport remove partner function held con-mutex waiting for dp altmode work to complete,...
Citrix DaaS - Hosting Connection "Username and Password Not Recognized" Error
When attempting to establish or test a hosting connection within your virtualization environment, the system reports an authentication failure with the following error message: "The username and password combination supplied for this connection was not recognized." This error indicates that the...
CVE-2025-32966 Dataease H2 JDBC Connection Remote Code Execution
DataEase is an open-source BI tool alternative to Tableau. Prior to version 2.10.8, authenticated users can complete RCE through the backend JDBC link. This issue has been patched in version 2.10.8...
CVE-2025-32966
CVE-2025-32966 affects DataEase, an open-source BI tool. The vulnerability allows authenticated users to achieve remote code execution through the backend JDBC link in versions before 2.10.8. A fix is available in 2.10.8, addressing the RCE vector. Multiple connected sources (Red Hat, NVD, CVE li...
CVE-2025-32966 Dataease H2 JDBC Connection Remote Code Execution
DataEase is an open-source BI tool alternative to Tableau. Prior to version 2.10.8, authenticated users can complete RCE through the backend JDBC link. This issue has been patched in version 2.10.8...
bluez: audio profile avrcp parse_media_element out-of-bounds read information disclosure vulnerability
A flaw was found within the handling of the AVRCP protocol in BlueZ. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect ...
The vulnerability of the UpdateConnectionVariables method in the software for managing and monitoring deleted objects in telemetry and telemechanics systems, allowing a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the UpdateConnectionVariables method in software for managing and monitoring deleted objects in telemetry and telemechanics systems is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the...
Unspecified Vulnerability in JetBrains Toolbox App
JetBrains Toolbox App is an application for managing and updating JetBrains development tools. A security vulnerability exists in JetBrains Toolbox App that stems from a lack of sufficient user validation when establishing a connection. An attacker could exploit the vulnerability to establish an...
Server-side Request Forgery (SSRF)
Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Server-side Request Forgery SSRF through the verifyconnection function, by manipulating the backend requests to arbitrary systems. Remediation Upgrade open-webui to version 0.6.34 or higher. References - GitH...
CVE-2025-29446
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2025-29446
open-webui v0.5.16 is vulnerable to SSRF in routers/ollama.py in function verifyconnection...
PT-2025-17455 · Unknown · Open-Webui
Name of the Vulnerable Software and Affected Versions: open-webui version 0.5.16 Description: The issue concerns a Server-Side Request Forgery SSRF vulnerability. It is located in the routers/ollama.py file, specifically in the verify connection function. Recommendations: For open-webui version...
RHEL 8 / 9 : java-17-openjdk (RHSA-2025:3852)
The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:3852 advisory. The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security...
RHEL 8 / 9 : java-21-openjdk (RHSA-2025:3855)
The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:3855 advisory. The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fixes...
RHEL 8 / 9 : java-1.8.0-openjdk (RHSA-2025:3845)
The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:3845 advisory. The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security...