4457 matches found
CVE-2025-7994: Out-of-bounds Read
Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must...
PT-2025-52462
Уязвимость платформы для работы с кодом GitFlic, связана с отсутствием авторизации. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, получить несанкционированный доступ к защищаемой информации...
CVE-2025-56578
An issue in RTSPtoWeb v.2.4.3 allows a remote attacker to obtain sensitive information and executearbitrary code via the lack of authentication mechanisms...
CVE-2025-10227: Missing Encryption of Sensitive Data
Missing Encryption of Sensitive Data CWE-311 in the Object Archive component in AxxonSoft Axxon One C-Werk before 2.0.8 on Windows and Linux allows a local attacker with access to exported storage or stolen physical drives to extract sensitive archive data in plaintext via lack of encryption at...
SolaX Cloud security vulnerabilities
SolaX Cloud is a photovoltaic monitoring and management platform from the Chinese company SolaX. A security vulnerability exists in SolaX Cloud that stems from a lack of authorization and could lead to the takeover of a solar inverter...
Digiever DS-2105 Pro Authentication Bypass
The vulnerability of the microprogrammed network video recorder Digiever DS-2105 Pro is related to the lack of authentication. Exploiting this vulnerability allows a intruder to execute arbitrary commands...
SAP NetWeaver AS Java security vulnerabilities
SAP NetWeaver AS Java is a platform system from SAP, a German company. A security vulnerability exists in SAP NetWeaver AS Java that stems from a lack of randomness and could lead to predictive identifiers...
BELL-CVE-2025-38697
Bulletin has no description...
PT-2025-35569
Name of the Vulnerable Software and Affected Versions Undertow affected versions not specified Description A flaw exists in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, known as the “MadeYouReset” attack, allows...
Simple Grading System edit_account.php File SQL Injection Vulnerability
Simple Grading System is a simple grading system. Simple Grading System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter ID in the file /editaccount.php. An attacker can exploit this vulnerability to execute...
CVE-2025-9326: Out-of-bounds Read
Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a...
PT-2025-54974
Уязвимость функции nvme fc create association модуля drivers/nvme/host/fc.c драйвера NVME ядра операционной системы Linux связана с отсутствием синхронизации. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
CVE-2025-41030: Incorrect Authorization
Lack of authorisation in Deporsite by T-INNOVA. This vulnerability allows an unauthenticated attacker to obtain information from other users via GET ‘/ajax/TInnovav2/IntegrantesRecursov21/llamadaAjax/buscarPersona’ using the ‘dni’ parameter...
CVE-2025-50565: Improper Neutralization of Special Elements used in an SQL Command
Doubo ERP 1.0 has an SQL injection vulnerability due to a lack of filtering of user input, which can be remotely initiated by an attacker...
SAP NetWeaver ABAP Platform Authentication Bypass Data Compromise
The vulnerability of SAP NetWeaver and ABAP Platform software integration platforms is related to the absence of authentication. Exploiting this vulnerability allows a malicious actor to remotely compromise the confidentiality of protected information...
ABAP Application Server Authentication Bypass Data Compromise
The vulnerability of the software used for developing and executing applications in the ABAP language of SAP NetWeaver Application Server is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to potentially compromise the confidentiality of protected...
SAP NetWeaver Authentication Bypass Data Compromise
The vulnerability of the SAP NetWeaver software integration platform is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to remotely influence the confidentiality of the protected information...
SAP S/4HANA Manage Central Purchase Contract Data Compromise
The vulnerability of the Manage Central Purchase Contract component in the SAP S/4HANA software platform is related to the absence of authentication. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and accessibility of the protected information...
EPC2 Component Data Compromise
The vulnerability of the EPC2 component in the Windows microprogramming software of the industrial digital gas analyzer MEAC300-FNADE4 is related to the absence of authentication. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of...
CVE-2025-31972
HCL BigFix SM is affected by a Sensitive Information Exposure vulnerability where internal connections do not use TLS encryption which could allow an attacker unauthorized access to sensitive data transmitted between internal components...