CVE-2025-30013

SAP ERP BW Business Content is vulnerable to OS Command Injection through certain function modules. These function modules, when executed with elevated privileges, improperly handle user input, allowing attacker to inject arbitrary OS commands. This vulnerability allows the execution of unintende...

Unauthorized File Access

awssamcli is vulnerable to Unauthorized File Access. The vulnerability is due to improper handling of symlinks during the Docker build process, allowing access to privileged host files via elevated permissions...

PT-2025-15371 · Sap · Sap Erp Bw Business Content

Name of the Vulnerable Software and Affected Versions: SAP ERP BW Business Content affected versions not specified Description: The issue is related to OS Command Injection through certain function modules. When these modules are executed with elevated privileges, they improperly handle user inpu...

Microsoft DWM Core Library 输入验证错误漏洞

Microsoft DWM Core Library is a core library for Microsoft windows from Microsoft Corporation, USA. An input validation error vulnerability exists in the Microsoft DWM Core Library. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are...

Adobe Commerce 安全漏洞

Adobe Commerce is a leading global digital commerce solution for merchants and brands. An unauthorized access vulnerability exists in Adobe Commerce. The vulnerability stems from inadequate protection of access to sensitive credential information, which allows an attacker with elevated privileges...

The vulnerability of the sys_exec() function in the MariaDB database management system allows a attacker to execute arbitrary commands with elevated privileges.

The vulnerability of the sysexec function in the MariaDB database management system is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary commands with elevated privileges...

RuoYi 安全漏洞

RuoYi is a backend management system for individual developers of RuoYi China. A security vulnerability exists in RuoYi v.4.8.0, which originates from the SysDictTypeController component and may result in elevated privileges...

Shenzhen Libituo Technology LBT-T300-T400 安全漏洞

Shenzhen Libituo Technology LBT-T300-T400 is an industrial router from Shenzhen Libituo Technology China. A security vulnerability exists in the Shenzhen Libituo Technology LBT-T300-T400 version 3.2, which stems from a flaw in the tftpimagecheck function in the rc binary, which could lead to...

student-manage 安全漏洞

student-manage is a student grade management system by the individual developer Yongkang Huang in China. A security vulnerability exists in student-manage version 1, which stems from an insecure privilege validation that could lead to elevated privileges...

CVE-2025-24238

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, watchOS 11.4. An app may be able to gain elevated privileges...

Trend Vision One 安全漏洞

Trend Vision One is a comprehensive security platform from Trend Vision, Inc. A security vulnerability exists in Trend Vision One that stems from improper access control and could result in elevated privileges...

WordPress plugin Shopper Approved Reviews 安全漏洞

WordPress and WordPress plugin are products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

Trend Vision One 安全漏洞

Trend Vision One is a comprehensive security platform from Trend Vision, Inc. A security vulnerability exists in Trend Vision One that stems from improper access control and could result in elevated privileges...

Trend Vision One 安全漏洞

Trend Vision One is a comprehensive security platform from Trend Vision, Inc. A security vulnerability exists in Trend Vision One that stems from improper access control and could result in elevated privileges...

Trend Vision One 安全漏洞

Trend Vision One is a comprehensive security platform from Trend Vision, Inc. A security vulnerability exists in Trend Vision One that stems from improper access control and could result in elevated privileges...

WordPress plugin WPC Smart Linked Products - Upsells & Cross-sells for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the WordPre...

Mozilla Firefox和Mozilla Thunderbird 安全漏洞

Mozilla Firefox and Mozilla Thunderbird are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Thunderbird is a separate set of Mozilla Application Suite from the Email client software. The software supports IMAP, POP mail protocols, and HTML...

CVE-2025-24238

A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to gain elevated privileges...

CVE-2025-24238

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, watchOS 11.4. An app may be able to gain elevated privileges...

CVE-2025-24238

A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to gain elevated privileges...