9431 matches found
CVE-2025-1470
In Eclipse OMR, from the initial contribution to version 0.4.0, some OMR internal port library and utilities consumers of z/OS atoe functions do not check their return values for NULL memory pointers or for memory allocation failures. This can lead to NULL pointer dereference crashes. Beginning i...
CVE-2025-1821
A vulnerability was found in zj1983 zz up to 2024-8 and classified as critical. Affected by this issue is the function getUserOrgForUserId of the file src/main/java/com/futvan/z/system/zorg/ZorgAction.java. The manipulation of the argument userID leads to sql injection. The attack may be launched...
CVE-2025-1425
A Sudo privilege misconfiguration vulnerability in PocketBook InkPad Color 3 on Linux, ARM allows attackers to read file contents on the device.This issue affects InkPad Color 3: U743k3.6.8.3671...
CVE-2025-1901
A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/checkavailability.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely...
CVE-2025-1279
The BM Content Builder plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the uxcbtoolsimportitemajax AJAX action in all versions up to, and including, 3.16.2.1. This makes it possible for authenticate...
CVE-2025-13371
creationtimestamp| type| source ---|---|--- 2026-01-07 08:24:17+00:00| seen| https://gist.github.com/Darkcrai86/d58f40576a71ed7ee9b9e2fa8ffb9323 2026-01-07 09:54:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbt76aeidx2q 2026-01-07 10:51:09+00:00| seen|...
EUVD-2026-1280
Insufficient session expiration in the Web UI authentication component in HCL BigFix IVR version 4.2 allows an authenticated attacker to gain prolonged unauthorized access to protected API endpoints due to excessive expiration periods...
EUVD-2026-1333
The HelpDesk contact form plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.5. This is due to missing or incorrect nonce validation on the handlequeryargs function. This makes it possible for unauthenticated attackers to update the plugin's...
EUVD-2026-0952
Missing Authorization vulnerability in Fahad Mahmood RSS Feed Widget rss-feed-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RSS Feed Widget: from n/a through = 3.0.2...
EUVD-2026-1019
iDS6 DSSPro Digital Signage System 6.2 contains an improper access control vulnerability that allows authenticated users to elevate privileges through console JavaScript functions. Attackers can create users, modify roles and permissions, and potentially achieve full application takeover by...
EUVD-2026-0967
In c2ps, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10274607; Issue ID: MSV-5049...
EUVD-2026-0888
In the Linux kernel, the following vulnerability has been resolved: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags When a filesystem is being automounted, it needs to preserve the user-set superblock mount options, such as the "ro" flag...
CVE-2025-64119
creationtimestamp| type| source ---|---|--- 2026-01-02 21:43:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbhugzidru2y 2026-01-03 00:08:40+00:00| published-proof-of-concept| Telegram/DFhOoz2ba5lY6tfZKWDQmHfJO-BCe0MWUTSMMxzWfmXNHIA 2026-01-03 00:08:49+00:00| seen|...
EUVD-2026-0057
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2026-0111
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2026-0206
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2026-0289
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2026-0309
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...