9431 matches found
CVE-2025-23173
The Versa Director SD-WAN orchestration platform provides direct web-based access to uCPE virtual machines through the Director GUI. By default, the websockify service is exposed on port 6080 and accessible from the internet. This exposure introduces significant risk, as websockify has known...
CVE-2025-23211
Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. A Jinja2 SSTI vulnerability allows any user to execute commands on the server. In the case of the provided Docker Compose file as root. This vulnerability is fixed in 1.5.24...
CVE-2022-31766
A vulnerability has been identified in RUGGEDCOM RM1224 LTE4G EU 6GK6108-4AM00-2BA2 All versions = V1.1.0 V3.0.0,...
CVE-2022-0580
Incorrect Authorization in Packagist librenms/librenms prior to 22.2.0...
EUVD-2026-1776
The Booking Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 10.14.10 via the WPBCFLEXTIMELINENAV AJAX action. This is due to the nonce verification being conditionally disabled by default bookingisnonceatfrontend option is 'Off' ...
EUVD-2026-1577
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in webaware NextGEN Download Gallery nextgen-download-gallery allows Retrieve Embedded Sensitive Data.This issue affects NextGEN Download Gallery: from n/a through = 1.6.2...
EUVD-2026-1430
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in zozothemes Corpkit corpkit allows PHP Local File Inclusion.This issue affects Corpkit: from n/a through = 2.0...
EUVD-2026-1556
Missing Authorization vulnerability in Aruba.it Dev Aruba HiSpeed Cache aruba-hispeed-cache allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Aruba HiSpeed Cache: from n/a through 3.0.3...
CVE-2013-6295
PrestaShop 1.5.5 vulnerable to privilege escalation via a Salesman account via upload module...
CVE-2013-6079
Buffer overflow in MostGear Soft Easy LAN Folder Share 3.2.0.100 allows local users to cause a denial of service application crash and possibly execute arbitrary code via a long string in the 1 registration code field in the activate license window or the 2...
CVE-2022-27653
A vulnerability has been identified in Simcenter Femap All versions V2022.2. The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted .NEU files. This could allow an attacker to execute code in the context of the current...
CVE-1999-0205
Denial of service in Sendmail 8.6.11 and 8.6.12...
CVE-1999-0889
Cisco 675 routers running CBOS allow remote attackers to establish telnet sessions if an exec or superuser password has not been set...
CVE-1999-0139
Buffer overflow in Solaris x86 mkcookie allows local users to obtain root access...
CVE-1999-0454
A remote attacker can sometimes identify the operating system of a host based on how it reacts to some IP or ICMP packets, using a tool such as nmap or queso...
CVE-1999-0198
finger .@host on some systems may print information on some user accounts...
CVE-1999-0011
Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer...
CVE-1999-0730
The zsoelim program in the Debian man-db package allows local users to overwrite files via a symlink attack...