10347 matches found
PT-2025-18425
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the ath12k wifi module. The issue occurs when the ath12k pci remove function fails to free allocated firmware...
PT-2025-3436 · Wallos · Wallos
Name of the Vulnerable Software and Affected Versions: Wallos version 2.41.0 Description: The issue allows a remote attacker to execute arbitrary code via the profile picture function. This is a result of a Cross Site Scripting vulnerability. Recommendations: For Wallos version 2.41.0, consider...
PT-2025-4402 · Tarak Patel · Wp Query Creator
Name of the Vulnerable Software and Affected Versions: Tarak Patel WP Query Creator versions 1.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting XSS. This enables attackers to inject maliciou...
PT-2025-3428 · Hortusfox · Hortusfox
Name of the Vulnerable Software and Affected Versions: HortusFox version 3.9 Description: The issue is related to a stored XSS vulnerability in the "Add Plant" function. The name input field does not sanitize or escape user inputs, allowing attackers to inject and execute arbitrary JavaScript...
CVE-2025-22450
Inclusion of undocumented features issue exists in UD-LT2 firmware Ver.1.00.008SE and earlier. A remote attacker may disable the LAN-side firewall function of the affected products, and open specific ports...
CVE-2025-22450
Inclusion of undocumented features issue exists in UD-LT2 firmware Ver.1.00.008SE and earlier. A remote attacker may disable the LAN-side firewall function of the affected products, and open specific ports...
CVE-2025-22450
The CVE-2025-22450 issue affects I-O Data UD-LT2 devices running firmware 1.00.008_SE and earlier. Described as inclusion of undocumented features, it may allow a remote attacker to disable the LAN-side firewall and open specific ports. Vulnerability is CVE-2025-22450 and is listed among multiple...
Multiple vulnerabilities in I-O DATA router UD-LT2
Overview UD-LT2 provided by I-O DATA DEVICE, INC. contains multiple vulnerabilities listed below. OS Command Injection CWE-78 - CVE-2025-20617, CVE-2025-26856 Inclusion of Undocumented Features CWE-1242 - CVE-2025-22450 OS Command Injection CWE-78 - CVE-2025-23237 CVE-2025-20617, CVE-2025-22450,...
SUSE CVE-2024-57941
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix the non-cancellation of copy when cache is temporarily disabled When the caching for a cookie is temporarily disabled e.g. due to a DIO write on that file, future copying to the cache for that file is disabled until al...
PT-2025-5222 · Wooexim · Wooexim
Name of the Vulnerable Software and Affected Versions: WOOEXIM versions n/a through 5.0.0 Description: The issue is related to the deserialization of untrusted data, allowing object injection. This can lead to a deserialization attack, potentially permitting an attacker to inject malicious object...
PT-2025-5360
Name of the Vulnerable Software and Affected Versions Jenkins Azure Service Fabric Plugin versions 1.6 and earlier Description A Cross-Site Request Forgery CSRF issue allows attackers to connect to a Service Fabric URL using attacker-specified credentials IDs obtained through another method. This...
PT-2025-5229 · Innovative Solutions · Innovative Solutions User Files
Name of the Vulnerable Software and Affected Versions: Innovative Solutions user files versions n/a through 2.4.2 Description: The issue allows an unrestricted upload of files with dangerous types, enabling the upload of a web shell to a web server. This can potentially allow attackers to upload...
I-O Data Device UD-LT2 has security vulnerabilities
I-O Data Device UD-LT2 is a wireless router from I-O Data Device Japan. A security vulnerability exists in I-O Data Device UD-LT2 1.00.008SE and prior versions, which stems from an inclusion of undocumented functionality issue that could allow a remote attacker to disable the LAN-side firewall...
CVE-2024-57941 netfs: Fix the (non-)cancellation of copy when cache is temporarily disabled
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix the non-cancellation of copy when cache is temporarily disabled When the caching for a cookie is temporarily disabled e.g. due to a DIO write on that file, future copying to the cache for that file is disabled until al...
PT-2025-3122 · Unknown · Rar Extractor - Unarchiver
Name of the Vulnerable Software and Affected Versions: RAR Extractor - Unarchiver Free and Pro version 6.4.0 Description: The issue allows local attackers to inject arbitrary code, potentially leading to remote control and unauthorized access to sensitive user data via the exploit combined.dylib...
PT-2025-5256 · Unknown · Ppo Call To Actions
Name of the Vulnerable Software and Affected Versions: PPO Call To Actions versions 0.1.3 and earlier Description: A Cross-Site Request Forgery CSRF issue affects PPO Call To Actions, allowing unauthorized requests. The estimated number of potentially affected devices worldwide is not specified...
PT-2025-3375 · Unknown · Phpgurukul Hospital Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Hospital Management System version 4.0 Description: The issue concerns a Cross Site Scripting XSS vulnerability in the /edit-profile.php file, specifically via the address parameter. This allows an attacker to inject malicious...
PT-2025-6045
Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.43 Description A memory leak issue was found in the link order scan function of the ld component, specifically in the file ld/ldelfgen.c. This issue can be exploited remotely, but the complexity of an attack is rather...
