4408 matches found
CVE-2024-49336
IBM Security Guardium 11.5 and 12.0 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...
PT-2025-14278 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the pick task scx function picking non-queued tasks when called without balance. The issue arises from a fair class bu...
Siemens SIMATIC Devices Linux Kernel Use After Free (CVE-2022-42719)
A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers able to inject WLAN frames to crash the kernel and potentially execute code. This plugin only works with Tenable.ot. Please visit...
CVE-2023-52926 io_uring/rw: split io_read() into a helper
In the Linux kernel, the following vulnerability has been resolved: IORINGOPREAD did not correctly consume the provided buffer list when read i/o returned 0 except for -EAGAIN and -EIOCBQUEUED return. This can lead to a potential use-after-free when the completion via iorwdone runs at separate...
The vulnerability of the Linux operating system’s Bluetooth kernel component, which allows a hacker to trigger a service failure
The vulnerability of the Linux operating system’s Bluetooth kernel component is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2024-13789
The ravpage plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.31 via deserialization of untrusted input from the 'paramsv2' parameter. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the...
CVE-2024-13636
The Brooklyn theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.9.9.2 via deserialization of untrusted input in the otdecode function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject a PHP Object...
CERTFR-2025-CTI-001
creationtimestamp| type| source ---|---|--- 2025-02-20 10:14:20+00:00| seen| https://bsky.app/profile/anssi-fr.bsky.social/post/3lim2lhmwh22r 2025-02-20 12:47:55+00:00| seen| https://bsky.app/profile/ilumium.eupolicy.social.ap.brid.gy/post/3limd54mdlcb2 2025-02-20 14:14:57+00:00| seen|...
CVE-2024-39328
creationtimestamp| type| source ---|---|--- 2025-02-18 18:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lihukyouae2y 2025-02-18 21:33:52+00:00| seen|...
WordPress Minimal Coming Soon - Coming Soon Page Plugin < 6.15.22 Missing Authorization Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:webfactoryltd:minimalcomingsoon"; if description...
CVE-2025-1373
A flaw was found in FFmpeg. This vulnerability allows a null pointer dereference function in libavformat/mov.c, leading to potential crashes when processing maliciously crafted MOV files. Mitigation Mitigation for this issue is either not available or the currently available options do not meet t...
CVE-2025-1380 Codezips Gym Management System del_plan.php sql injection
A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /dashboard/admin/delplan.php. The manipulation of the argument name leads to sql injection. The attack may be launched remotely. The exploit...
CVE-2025-25526
Buffer overflow vulnerability in Mercury MIPC552W Camera v1.0 due to the lack of length verification, which is related to the configuration of the PPTP server. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands...
CVE-2024-39606
Improper input validation in some IntelR PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access...
Dahua Security NVR NVR50XX, NVR52XX, NVR54XX, and NVR58XX Improper Authentication (CVE-2017-9314)
Authentication vulnerability found in Dahua NVR models NVR50XX, NVR52XX, NVR54XX, NVR58XX with software before DHNVR5xxxEngPV2.616.0000.0.R.20171102. Attacker could exploit this vulnerability to gain access to additional operations by means of forging json message. This plugin only works with...
CVE-2025-0907
PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...
Azure Linux 3.0 Security Update: mysql (CVE-2024-21196)
The version of mysql installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-21196 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: X Plugin. Supported versions tha...
Azure Linux 3.0 Security Update: hdf5 (CVE-2024-29165)
The version of hdf5 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-29165 advisory. - HDF5 through 1.14.3 contains a buffer overflow in H5Zfilterfletcher32, resulting in the corruption of the...
Azure Linux 3.0 Security Update: kernel (CVE-2024-42153)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42153 advisory. - In the Linux kernel, the following vulnerability has been resolved: i2c: pnx: Fix potential deadlock warning...