9620 matches found
PT-2025-2418 · Wavlink · Wavlink Ac3000
Name of the Vulnerable Software and Affected Versions: Wavlink AC3000 version M33A8.V5030.210505 Description: A command injection issue exists in the AddMac function of wireless.cgi. This can be triggered by a specially crafted HTTP request, potentially leading to arbitrary command execution. An...
PT-2025-2445 · Wavlink · Wavlink Ac3000
Name of the Vulnerable Software and Affected Versions: Wavlink AC3000 version M33A8.V5030.210505 Description: A buffer overflow issue exists in the set info functionality of usbip.cgi. This can be triggered by a specially crafted HTTP request, leading to a stack-based buffer overflow. An attacker...
PT-2025-3482 · Monetdb · Monetdb Server
Name of the Vulnerable Software and Affected Versions: MonetDB Server version 11.47.11 Description: An issue in the BATcalcbetween intern component allows attackers to cause a Denial of Service DoS via crafted SQL statements. Recommendations: For MonetDB Server version 11.47.11, consider disablin...
PT-2025-2552 · Wavlink · Wavlink Ac3000
Name of the Vulnerable Software and Affected Versions: Wavlink AC3000 version M33A8.V5030.210505 Description: A static login vulnerability exists in the wctrls functionality. A specially crafted set of network packets can lead to root access. An attacker can send packets to trigger this...
PT-2025-3557 · Msfm +1 · Msfm +1
Name of the Vulnerable Software and Affected Versions: MSFM versions prior to 2025.01.01 Description: The issue is related to a fastjson deserialization vulnerability in the component system/table/addField. This vulnerability was discovered in MSFM. Recommendations: For versions prior to...
PT-2025-2310 · Wavlink · Wavlink Ac3000
Name of the Vulnerable Software and Affected Versions: Wavlink AC3000 version M33A8.V5030.210505 Description: A command execution issue exists in the adm.cgi set TR069 functionality. This allows an attacker to execute arbitrary commands by sending a specially crafted HTTP request. The vulnerabili...
PT-2025-3490 · Monetdb · Monetdb Server
Name of the Vulnerable Software and Affected Versions: MonetDB Server version 11.49.1 Description: The issue in the HEAP malloc component allows attackers to cause a Denial of Service DoS via crafted SQL statements. Recommendations: For MonetDB Server version 11.49.1, consider disabling the HEAP...
CLSA-2025-1736778412 kernel: Fix of 17 CVEs
tracing: Free buffers when a used dynamic event is removed CVE-2022-49006 - ASoC: ops: Check bounds for second channel in sndsocputvolswsx CVE-2022-48951 - ext4: fix slab-use-after-free in ext4splitextentat CVE-2024-49884 - ext4: fix bug on in ext4escacheextent as ext4splitextentat failed...
PT-2025-1459 · Pat Infinite Solutions · Helpdeskadvanced
Name of the Vulnerable Software and Affected Versions: Pat Infinite Solutions HelpdeskAdvanced versions = 11.0.33 Description: The issue is related to a Cross Site Scripting XSS vulnerability via the Filter/FilterEditor function. This allows for potential malicious script execution. No informatio...
PT-2025-1451 · Pat Infinite Solutions · Helpdeskadvanced
Name of the Vulnerable Software and Affected Versions: Pat Infinite Solutions HelpdeskAdvanced versions = 11.0.33 Description: The issue is related to a Directory Traversal vulnerability via the Attachment/DownloadTempFile function. This allows unauthorized access to sensitive files and...
PT-2025-4804
Name of the Vulnerable Software and Affected Versions Mongoose versions prior to 8.9.5 Mongoose versions prior to 7.8.4 Mongoose versions prior to 6.13.6 Description Mongoose is susceptible to a search injection issue due to the improper handling of nested $where filters when used with populate...
PT-2025-1452 · Pat Infinite Solutions · Helpdeskadvanced
Name of the Vulnerable Software and Affected Versions: Pat Infinite Solutions HelpdeskAdvanced versions = 11.0.33 Description: The issue is related to Directory Traversal via the Email/SaveAttachment function. This allows unauthorized access to sensitive files and directories. Recommendations: Fo...
PT-2025-1460 · Pat Infinite Solutions · Helpdeskadvanced
Name of the Vulnerable Software and Affected Versions: Pat Infinite Solutions HelpdeskAdvanced versions 11.0.33 and earlier Description: The issue is related to Cross Site Request Forgery CSRF via the WSCView function. This allows for unauthorized actions to be performed on behalf of a user witho...
PT-2025-3267
Name of the Vulnerable Software and Affected Versions OpenFGA versions 1.3.8 through 1.8.2 Description The issue concerns an authorization bypass in OpenFGA under specific conditions, including calling Check API or ListObjects with a model that uses conditions, and OpenFGA being configured with...
PT-2025-3875 · Unknown · Liujianview Gymxmjpa
Name of the Vulnerable Software and Affected Versions: liujianview gymxmjpa version 1.0 Description: A critical vulnerability has been found in the CoachController function of the file src/main/java/com/liujian/gymxmjpa/controller/CoachController.java. The manipulation of the coachName argument...
PT-2025-3868 · Unknown · Reckon Sppanadmin
Name of the Vulnerable Software and Affected Versions: reckcn SPPanAdmin version 1.0 Description: A cross-site scripting issue was found in the software, allowing for remote exploitation. The manipulation of the name argument in the "/;/admin/role/edit" file leads to this issue. Other parameters...
PT-2025-3867 · Unknown · Exelban Stats
Name of the Vulnerable Software and Affected Versions: exelban stats versions up to 2.11.21 Description: A critical issue has been found in the shouldAcceptNewConnection function of the XPC Service component, leading to command injection. This issue can be exploited locally. Recommendations: For...
UBUNTU-CVE-2024-57804
In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs The driver, through the SAS transport, exposes a sysfs interface to enable/disable PHYs in a controller/expander setup. When multiple PHYs are disabled and...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a SCSI mpi3mr driver that may result in a corrupted configuration page when the PHY is quickly...