Ocuco Innovation Security Vulnerabilities

Ocuco Innovation is a comprehensive Laboratory Management System LMS from Ocuco Ireland, designed for laboratories performing edge grinding, freeform and conventional lens processing. A security vulnerability exists in Ocuco Innovation version 2.10.24.51, which stems from an application manager...

Ocuco Innovation Security Vulnerabilities

Ocuco Innovation is an integrated Laboratory Management System LMS from Ocuco Ireland, designed for laboratories performing edge grinding, freeform and conventional lens processing. A security vulnerability exists in Ocuco Innovation version 2.10.24.51, which stems from a modification of TCP...

CVE-2025-4008

The Meteobridge web interface let meteobridge administrator manage their weather station data collection and administer their meteobridge system through a web application written in CGI shell scripts and C. This web interface exposes an endpoint that is vulnerable to command injection. Remote...

Cisco Unified Communications Products Privilege Escalation Vulnerability

A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due to excessive permissions that have been assigned to system commands. An attack...

CVE-2025-4008

The CVE-2025-4008 vulnerability affects Smartbedded Meteobridge prior to 6.2. The web interface processes input in template.cgi (unsanitized query-string data passed to eval), enabling unauthenticated remote attackers to execute arbitrary commands with root privileges, risking full device comprom...

EUVD-2025-16032

The Meteobridge web interface let meteobridge administrator manage their weather station data collection and administer their meteobridge system through a web application written in CGI shell scripts and C. This web interface exposes an endpoint that is vulnerable to command injection. Remote...

CVE-2025-4008 Arbitrary Command Injection in Smartbedded MeteoBridge

The Meteobridge web interface let meteobridge administrator manage their weather station data collection and administer their meteobridge system through a web application written in CGI shell scripts and C. This web interface exposes an endpoint that is vulnerable to command injection. Remote...

Inedo ProGet security vulnerabilities

Inedo ProGet is a package management system from Inedo. A security vulnerability exists in Inedo ProGet versions prior to 2.17.5, which stems from the possibility that device activation data could be downloaded as a CSV file by an elevated privileged user and cause damage to the PC, allowing an...

Valve Steam Client security vulnerabilities

Valve Steam Client is a digital game distribution client from Valve Corporation, USA. A security vulnerability exists in Valve Steam Client version 1738026274, which originates from a specially crafted executable or DLL, and may result in elevated privileges...

Inedo ProGet security vulnerabilities

Inedo ProGet is a package management system from Inedo. A security vulnerability exists in Inedo ProGet versions prior to 2.17.5, which stems from improper input cleanup in the activationMessage field, and could lead to an elevated privilege user executing a stored cross-site scripting attack...

HYPR Passwordless Security Vulnerabilities

HYPR Passwordless is an identity security solution from HYPR. A security vulnerability exists in HYPR Passwordless versions prior to 10.1 that stems from improper synchronization of shared resources resulting in a competitive condition that could lead to elevated privileges...

Cisco Unified Communications security vulnerabilities

Cisco Unified Communications is an enterprise call control and session management platform from Cisco USA that connects people anywhere using any device. A security vulnerability exists in Cisco Unified Communications that stems from excessive system command privileges, which could lead to elevat...

Cisco Unified Intelligence Center security vulnerabilities

Cisco Unified Intelligence Center is a set of Web-based reporting platform from Cisco USA. The platform provides the ability to present report-related business data and call center data. A security vulnerability exists in Cisco Unified Intelligence Center that stems from insufficient server-side...

Security vulnerabilities in Atlassian Jira Core Data and Atlassian Jira Service Management Data

Atlassian Jira Core Data and Atlassian Jira Service Management Data are both products of Atlassian Australia.Atlassian Jira Core Data is an enterprise-level project management tool.Atlassian Jira Atlassian Jira Service Management Data is an IT Service Management ITSM tool. A security vulnerabilit...

FactoryTalk Security Privilege Escalation

The vulnerability of the FactoryTalk Security platform for manufacturing process management is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker to bypass security restrictions and gain increased privileges...

WordPress Plugin Projectopia has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

TeamT5 ThreatSonar Anti-Ransomware Security Vulnerability

TeamT5 ThreatSonar Anti-Ransomware is a proactive and intelligent endpoint detection and response solution from TeamT5. A security vulnerability exists in TeamT5 ThreatSonar Anti-Ransomware that stems from improper management of specific API privileges, which could lead to elevated privileges...

Security Bulletin: Vulnerabilities in Pivota Spring Framework, VMware Tanzu Spring Framework, VMware Spring Framework might affect IBM Storage Defender Copy Data Management.

Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in Pivota Spring Framework, VMware Tanzu Spring Framework, VMware Spring Framework. Vulnerabilities include an attacker and remote attacker could exploit these vulnerabilities to execute arbitrary code on the...

Security advisory: Improper Link Resolution Before File Access in QFileSystemEngine in the Qt corelib module on Windows impacts Qt

Improper Link Resolution Before File Access 'Link Following' vulnerability in QFileSystemEngine in the Qt corelib module on Windows potentially allows Symlink Attacks and the use of Malicious Files. This vulnerability has been discovered and assigned the CVE ID CVE-2025-4211. The issue originates...

WordPress plugin Z-Downloads has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...