BELL-CVE-2025-22067

Bulletin has no description...

The vulnerability of the graphical interface of the Fortinet FortiPorta security analysis and management tool allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Fortinet FortiPortal graphical interface for security analysis and management lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to gain unauthorized access to protected information by...

BELL-CVE-2025-21900

Bulletin has no description...

CGA-CQJR-RGH5-8R4G

Bulletin has no description...

The vulnerability in the DNN CMS system’s script execution scenario /Activity-Feed/userId/{user_id}, which allows a attacker to perform XSS attacks.

Vulnerability of the DNN CMS system’s /Activity-Feed/userId/userid endpoint: no measures taken to protect the website structure. Exploitation of this vulnerability allows a malicious actor to perform XSS attacks remotely...

The vulnerability of the Wallos financial management web application, related to the lack of protective measures for the website structure, allows a hacker to execute arbitrary code.

The vulnerability of the Wallos financial management web application is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Linux Distros Unpatched Vulnerability : CVE-2024-29068

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In snapd versions prior to 2.62, snapd failed to properly check the file type when extracting a snap. The snap format is a squashfs file-system image and so can...

PT-2025-7412 · Hitachi Vantara · Hitachi Vantara Pentaho Business Analytics Server

Name of the Vulnerable Software and Affected Versions: Hitachi Vantara Pentaho Business Analytics Server versions prior to 10.2.0.0 and 9.3.0.8, including 8.3.x Description: The product does not perform an authorization check when an actor attempts to access a resource or perform an action. This...

The vulnerability of the web interface of the IBM QRadar SIEM system allows a perpetrator to execute arbitrary code and gain unauthorized access to protected information.

The vulnerability of the IBM QRadar SIEM web interface relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and gain unauthorized access to protected information...

The vulnerability of the application software interface of the Knowledge Space integrated planning platform lies in the lack of verification of the user’s authority to access the object. This allows a malicious actor to gain access to configuration information.

The vulnerability of the application programming interface of the Knowledge Space integrated planning platform is related to the lack of verification of the user’s authority to access the object. Exploiting this vulnerability allows a malicious actor to obtain access to configuration information ...

CVE-2025-23771 WordPress Push Notification for Post and BuddyPress plugin <= 2.11 - Settings Change vulnerability

Missing Authorization vulnerability in Murali Push Notification for Post and BuddyPress push-notification-for-post-and-buddypress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Push Notification for Post and BuddyPress: from n/a through = 2.11...

CGA-VQWW-F92J-QGRX

Bulletin has no description...

The vulnerability in the web server of Cisco Adaptive Security Appliance (ASA), a microprogramming-based network device, allows attackers to execute XSS attacks.

The vulnerability of Cisco Adaptive Security Appliance ASA’s microprogramming-based web server exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

Online Shoe Store details.php File SQL Injection Vulnerability

Online Shoe Store is an online shoe store system. Online Shoe Store suffers from a SQL injection vulnerability that originates from the id parameter in the /details.php page that lacks validation of externally entered SQL statements. An attacker can exploit this vulnerability to execute illegal S...

BELL-CVE-2024-53207

Bulletin has no description...

TCPDF 安全漏洞

TCPDF is an open source library from Tecnick. It is used to generate PDF documents and barcodes. TCPDF version before 6.8.0 has a security vulnerability , the vulnerability stems from the Error function lacks htmlspecialchars call for error messages...

CGA-RGFV-47QF-P5PQ

Bulletin has no description...

CGA-XFW9-2FVM-J9X5

Bulletin has no description...

BELL-CVE-2024-53069

Bulletin has no description...

DEBIAN-CVE-2024-53074

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't leak a link on AP removal Release the link mapping resource in AP removal. This impacted devices that do not support the MLD API 9260 and down. On those devices, we couldn't start the AP again after the ...