EUVD-2025-38204

EUVD-2025-38204...

EUVD-2025-38206

EUVD-2025-38206...

EUVD-2025-38205

EUVD-2025-38205...

EUVD-2025-38201

EUVD-2025-38201...

EUVD-2025-38207

EUVD-2025-38207...

EUVD-2025-38203

EUVD-2025-38203...

EUVD-2025-38202

EUVD-2025-38202...

EUVD-2025-38200

EUVD-2025-38200...

EUVD-2025-38211

EUVD-2025-38211...

EUVD-2025-38209

EUVD-2025-38209...

EUVD-2025-38210

EUVD-2025-38210...

PT-2025-45447

There is an arbitrary file download vulnerability in GuoMinJim PersonManage thru commit 5a02b1ab208feacf3a34fc123c9381162afbaa95 2020-11-23 in the document query function under the Download Center menu in the PersonManage system...

PT-2025-45506

Name of the Vulnerable Software and Affected Versions libxml2 affected versions not specified Description A flaw exists in the xmlSetTreeDoc function of the libxml2 XML parsing library. This function manages document pointers during XML node movements between documents. Improper handling of...

PersonManage 安全漏洞

PersonManage is a personnel management system by jinguomin personal developer. A security vulnerability exists in PersonManage, which stems from an arbitrary file download issue in the document lookup function...

CVE-2025-63686

There is an arbitrary file download vulnerability in GuoMinJim PersonManage thru commit 5a02b1ab208feacf3a34fc123c9381162afbaa95 2020-11-23 in the document query function under the Download Center menu in the PersonManage system...

CVE-2025-63686

There is an arbitrary file download vulnerability in GuoMinJim PersonManage thru commit 5a02b1ab208feacf3a34fc123c9381162afbaa95 2020-11-23 in the document query function under the Download Center menu in the PersonManage system...

CVE-2025-63686

The CVE-2025-63686 affects GuoMinJim PersonManage. A vulnerability exists in the Document query function under the Download Center, reachable through commit 5a02b1ab208feacf3a34fc123c9381162afbaa95 (2020-11-23). This enables arbitrary file download from the system. The Red Hat and NVD entries rei...

EUVD-2025-38157

oobabooga text-generation-webui trustremotecode Reliance on Untrusted Inputs Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of oobabooga text-generation-webui. Authentication is not required to exploit this...

EUVD-2025-38160

evernote-mcp-server openBrowser Command Injection Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of evernote-mcp-server. An attacker must first obtain the ability to execute low-privileged code on the target system in...

EUVD-2025-38163

Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AjaxStandaloneVpnClientsController.ajaxAction that allows an authenticated low-privileged observer user to inject SQL via datatable search parameters, leading to disclosure of database information...