3134 matches found
Planet Industrial Cellular Gateway 安全漏洞
Planet Industrial Cellular Gateway is a gateway device from Planet Corporation of Taiwan, China. A security vulnerability exists in Planet Industrial Cellular Gateway that stems from a lack of authentication, which could allow an unauthenticated remote attacker to manipulate the device...
SolaX Cloud 安全漏洞
SolaX Cloud is a photovoltaic monitoring and management platform from the Chinese company SolaX. A security vulnerability exists in SolaX Cloud that stems from a lack of authorization and could lead to the takeover of a solar inverter...
SAP NetWeaver AS Java 安全漏洞
SAP NetWeaver AS Java is a platform system from SAP, a German company. A security vulnerability exists in SAP NetWeaver AS Java that stems from a lack of randomness and could lead to predictive identifiers...
BELL-CVE-2025-38697
Bulletin has no description...
Simple Grading System edit_account.php File SQL Injection Vulnerability
Simple Grading System is a simple grading system. Simple Grading System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter ID in the file /editaccount.php. An attacker can exploit this vulnerability to execute...
PT-2025-35569
Name of the Vulnerable Software and Affected Versions Undertow affected versions not specified Description A flaw exists in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, known as the “MadeYouReset” attack, allows...
CVE-2025-31972
HCL BigFix SM is affected by a Sensitive Information Exposure vulnerability where internal connections do not use TLS encryption which could allow an attacker unauthorized access to sensitive data transmitted between internal components...
RHSA-2025:14433 Red Hat Security Advisory: webkit2gtk3 security update
Bulletin has no description...
CVE-2025-53363
dpanel is an open source server management panel written in Go. In versions 1.2.0 through 1.7.2, dpanel allows authenticated users to read arbitrary files from the server via the /api/app/compose/get-from-uri API endpoint. The vulnerability exists in the GetFromUri function in...
AOMEI Cyber Backup 访问控制错误漏洞
AOMEI Cyber Backup is a backup and restore software from China-based AOMEI Technology AOMEI. An access control error vulnerability exists in AOMEI Cyber Backup that stems from a lack of authentication for critical functions, which could lead to remote code execution...
CVE-2024-49827
IBM Concert Software 1.0.0 through 1.1.0 is vulnerable to excessive data exposure, allowing attackers to access sensitive information without proper filtering...
Linux Distros Unpatched Vulnerability : CVE-2019-20423
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic due to the lack of validation for specific fields of packets sent by ...
Linux Distros Unpatched Vulnerability : CVE-2019-20425
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds access and panic due to the lack of validation for specific fields of packets se...
Projectworlds Visitor Management System 注入漏洞
Visitor Management System is a visitor access management system. Visitor Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter rid in the file /visitorout.php. An attacker can exploit this...
WordPress plugin TheBooking 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
ABB AbilityTM zenon 访问控制错误漏洞
ABB AbilityTM zenon is a software platform for managing operational data from ABB Switzerland. An access control error vulnerability exists in ABB AbilityTM zenon versions 7.50 through 14 that stems from a lack of authentication for critical functions...
ABB ASPECT 访问控制错误漏洞
ABB ASPECT is a scalable building energy management and control solution from ABB Switzerland. An access control error vulnerability exists in ABB Aspect that stems from a lack of authentication for critical functions...
ABB ASPECT 访问控制错误漏洞
ABB ASPECT is a scalable building energy management and control solution from ABB Switzerland. An access control error vulnerability exists in ABB Aspect that stems from a lack of authentication for critical functions...
PT-2025-32373
Name of the Vulnerable Software and Affected Versions: Packet Power Monitoring and Control Web Interface affected versions not specified Description: The Packet Power Monitoring and Control Web Interface does not enforce authentication mechanisms by default. This could allow unauthorized users to...