Lucene search
+L

3421 matches found

RedhatCVE
RedhatCVE
added 2025/10/13 5:29 a.m.7 views

CVE-2025-8887

Authorization Bypass Through User-Controlled Key, Missing Authorization, Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Usta Information Systems Inc. Aybs Interaktif allows Forceful Browsing, Parameter Injection, Input Data Manipulation.This issue affects Aybs...

6.1CVSS6.8AI score0.00137EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/10 2:15 p.m.5 views

CVE-2025-8887

Authorization Bypass Through User-Controlled Key, Missing Authorization, Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Usta Information Systems Inc. Aybs Interaktif allows Forceful Browsing, Parameter Injection, Input Data Manipulation. This issue affects Aybs...

6.1CVSS0.00137EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2025/10/10 1:56 p.m.5 views

CVE-2025-8887

Authorization Bypass Through User-Controlled Key, Missing Authorization, Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Usta Information Systems Inc. Aybs Interaktif allows Forceful Browsing, Parameter Injection, Input Data Manipulation. This issue affects Aybs...

6.1CVSS5.5AI score0.00137EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/10 1:56 p.m.2 views

CVE-2025-8887 IDOR in Usta Information Systems' Aybs Interaktif

Authorization Bypass Through User-Controlled Key, Missing Authorization, Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Usta Information Systems Inc. Aybs Interaktif allows Forceful Browsing, Parameter Injection, Input Data Manipulation. This issue affects Aybs...

6.1CVSS5.4AI score0.00137EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/10/10 1:56 p.m.13 views

CVE-2025-8887 IDOR in Usta Information Systems' Aybs Interaktif

Authorization Bypass Through User-Controlled Key, Missing Authorization, Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Usta Information Systems Inc. Aybs Interaktif allows Forceful Browsing, Parameter Injection, Input Data Manipulation. This issue affects Aybs...

6.1CVSS0.00137EPSS
SaveExploits0References2
CVE
CVE
added 2025/10/10 1:56 p.m.13 views

CVE-2025-8887

The CVE-2025-8887 issue concerns Usta Information Systems Inc. Aybs Interaktif. Affects Aybs Interaktif versions from 2024 through 28082025 and arises from an authorization bypass via user-controlled keys, leading to missing authorization and exposure of sensitive information to an unauthorized a...

6.1CVSS5.4AI score0.00137EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/10 5:50 a.m.5 views

RLSA-2025:16086 Moderate: mysql security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. Security Fixes: mysql: mysqldump unspecified vulnerability CPU Apr 2025 CVE-2025-30722 mysql: Optimizer unspecified vulnerability CPU Apr 2025...

6.5CVSS7.1AI score0.00983EPSS
SaveExploits1References52
CNNVD
CNNVD
added 2025/10/10 12:0 a.m.4 views

Usta Aybs Interaktif 安全漏洞

Usta Aybs Interaktif is an Enterprise Resource Planning ERP management platform from Usta Turkey. A security vulnerability exists in Usta Aybs Interaktif versions 2024 through 28082025, which stems from authorization bypass and missing authorization, and could lead to forceful browsing, parameter...

6.1CVSS6.7AI score0.00137EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/10 12:0 a.m.8 views

NVIDIA Display Driver 代码问题漏洞

NVIDIA Display Driver is a graphics card driver from NVIDIA. A security vulnerability exists in NVIDIA Display Driver, which can be exploited by attackers to cause denial of service, elevation of privilege, code execution, and data manipulation...

8.2CVSS7AI score0.00167EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/10/10 12:0 a.m.5 views

PT-2025-41566

Name of the Vulnerable Software and Affected Versions Usta Information Systems Inc. Aybs Interaktif versions 2024 through 28082025 Description An authorization bypass exists in Usta Information Systems Inc. Aybs Interaktif due to user-controlled keys, missing authorization checks, and exposure of...

6.1CVSS6.5AI score0.00137EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/10/09 1:13 a.m.7 views

CVE-2025-48981

An insecure implementation of the proprietary protocol DNET in Product CGM MEDICO allows attackers within the intranet to eavesdrop and manipulate data on the protocol because encryption is optional for this connection...

8.6CVSS6.9AI score0.00111EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/08 10:2 p.m.5 views

EUVD-2025-33272

A weakness has been identified in PHPGurukul Beauty Parlour Management System 1.1. The impacted element is an unknown function of the file /admin/search-invoices.php. This manipulation of the argument searchdata causes sql injection. The attack can be initiated remotely. The exploit has been made...

7.5CVSS6.5AI score0.00384EPSS
SaveExploits1References7
CVE
CVE
added 2025/10/08 12:49 a.m.15 views

CVE-2025-48981

CVE-2025-48981 affects CGM MEDICO; an insecure implementation of the DNET protocol allows intranet attackers to eavesdrop and manipulate data because encryption for this connection is optional. Descriptions from NVD/Red Hat confirm the same impact; CVSS shows NETWORK with high confidentiality imp...

8.6CVSS6.5AI score0.00111EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/08 12:49 a.m.3 views

CVE-2025-48981

An insecure implementation of the proprietary protocol DNET in Product CGM MEDICO allows attackers within the intranet to eavesdrop and manipulate data on the protocol because encryption is optional for this connection...

6.5AI score0.00111EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/08 12:0 a.m.7 views

CompuGroup Medical MEDICO 安全漏洞

CompuGroup Medical MEDICO is a hospital information system software from CompuGroup Medical, Inc. A security vulnerability exists in CompuGroup Medical MEDICO that stems from an insecure implementation of DNET's proprietary protocol, which could lead to eavesdropping and manipulation of protocol...

8.6CVSS6.4AI score0.00111EPSS
SaveExploits0References2
SUSE Linux
SUSE Linux
added 2025/10/07 7:15 a.m.4 views

Security update for python-xmltodict

This update for python-xmltodict fixes the following issues: CVE-2025-9375: XML injection vulnerability in xmltodict allows input data manipulation bsc1249036. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

6.9CVSS7.1AI score0.00417EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2019-0701

Malware in sbrugna...

8.8CVSS8.6AI score0.01346EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2020-7031

Malware in sbrugna...

5.5CVSS6.6AI score0.00769EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2020-22432

Malware in sbrugna...

6.5CVSS6.5AI score0.01159EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2020-6918

Malware in sbrugna...

4.3CVSS6AI score0.02272EPSS
SaveExploits0References24
Rows per page
Query Builder