784 matches found
CVE-2025-43939
Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privilege...
CVE-2025-61876
Insecure Direct Object Reference IDOR in /tenants/id API endpoint in Inforcer Platform version 2.0.153 allows an authenticated user with low privileges to enumerate and access tenant information belonging to other clients via modification of the tenant ID in the request URL...
CVE-2025-22176
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view audit log items...
CVE-2025-22173
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view certain sprint data without the required permission...
PT-2025-43371
Name of the Vulnerable Software and Affected Versions NVIDIA Bluefield and ConnectX affected versions not specified Description A security issue exists within the management interface of NVIDIA Bluefield and ConnectX. A malicious actor with high privilege access could potentially execute arbitrar...
Oracle ZFS Storage Appliance Kit 安全漏洞
Oracle ZFS Storage Appliance Kit is a storage appliance from Oracle Corporation that supports flash memory, petabytes of file storage and has a built-in Oracle database. A security vulnerability exists in Oracle Systems' Oracle ZFS Storage Appliance Kit version 8.8, which originates from an attac...
ETERNUS SF vulnerable to incorrect default permissions
Overview ETERNUS SF provided by Fsas Technologies Inc. contains the following vulnerability. Incorrect default permissions CWE-276 - CVE-2025-62577 Fsas Technologies Inc. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Fsas Technologies Inc...
CVE-2025-9804 Improper Access Control in Multiple WSO2 Products via Internal SOAP Admin Services and System REST APIs
An improper access control vulnerability exists in multiple WSO2 products due to insufficient permission enforcement in certain internal SOAP Admin Services and System REST APIs. A low-privileged user may exploit this flaw to perform unauthorized operations, including accessing server-level...
CVE-2025-42909
CVE-2025-42909 (SAP Cloud Appliance Library Appliances) : A high-privilege attacker can exploit an insecure S/4HANA default profile setting in existing SAP CAL appliances to access other appliances. The impact is described as low for confidentiality with no impact on integrity or availability. Th...
EUVD-2017-14251
Malware in sbrugna...
EUVD-2019-4589
Malware in sbrugna...
EUVD-2020-30075
Malware in sbrugna...
EUVD-2021-11273
Malware in sbrugna...
EUVD-2019-16084
Malware in sbrugna...
EUVD-2019-14851
Malware in sbrugna...
EUVD-2017-12629
Malware in sbrugna...
EUVD-2020-5725
Malware in sbrugna...
EUVD-2020-6799
Malware in sbrugna...