9437 matches found
CVE-2025-8647
Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within t...
CVE-2025-20696
In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09915215;...
CVE-2025-8632 Kenwood DMX958XR Firmware Update Command Injection Vulnerability
Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within t...
CVE-2023-43039
creationtimestamp| type| source ---|---|--- 2025-08-06 01:04:20+00:00| seen| MISP/853ff921-86fb-463b-bc2a-2860bf336b81 2025-08-21 10:03:54+00:00| seen| MISP/853ff921-86fb-463b-bc2a-2860bf336b81...
CVE-2025-49529
creationtimestamp| type| source ---|---|--- 2025-08-06 01:04:19+00:00| seen| MISP/853ff921-86fb-463b-bc2a-2860bf336b81 2025-08-21 10:03:52+00:00| seen| MISP/853ff921-86fb-463b-bc2a-2860bf336b81...
CVE-2025-44962
RUCKUS SmartZone SZ before 6.1.2p3 Refresh Build allows ../ directory traversal to read files...
CVE-2025-45766
CVE-2025-45766 relates to the Poco library, specifically version 1.14.1-release , which is described as having a weakness in encryption. The description notes a dispute over whether key lengths should be determined by the application using the library rather than by the library itself. The connec...
CVE-2025-50688
creationtimestamp| type| source ---|---|--- 2025-08-05 21:34:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvonxysoc62c...
CVE-2025-51387
creationtimestamp| type| source ---|---|--- 2025-08-05 21:02:19+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lvom73tdfa24...
CVE-2025-46658
creationtimestamp| type| source ---|---|--- 2025-08-05 17:23:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvo7ydeekg2p...
CVE-2025-7769
creationtimestamp| type| source ---|---|--- 2025-08-05 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-217-02 2025-08-05 16:06:34+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3lvo3obrv5y2b 2025-08-07 00:05:37+00:00| seen|...
CVE-2025-8295 Employee Directory <= 4.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter
The Employee Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘noaccessmsg’ parameter in all versions up to, and including, 4.5.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-lev...
CVE-2025-52239
creationtimestamp| type| source ---|---|--- 2025-08-05 04:31:39+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lvmutnbacx2k 2026-07-06 05:57:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxfssxsdg2n 2026-07-06 05:57:04+00:00| seen|...
CVE-2025-54803
creationtimestamp| type| source ---|---|--- 2025-08-05 04:03:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvmtbx4zia2s...
CVE-2025-53417
DIAView v4.2.0 and prior - Directory Traversal Information Disclosure Vulnerability...
CVE-2025-54987
creationtimestamp| type| source ---|---|--- 2025-08-05 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-772/ 2025-08-05 13:58:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvnujcu74t2d 2025-08-06 06:57:00+00:00| seen|...
CVE-2025-8649
creationtimestamp| type| source ---|---|--- 2025-08-05 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-797/...
CVE-2025-8639
creationtimestamp| type| source ---|---|--- 2025-08-05 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-787/...