CVE-2025-58178

CVE-2025-58178 affects SonarQube-related tooling: the SonarQube Scan GitHub Action (versions up to 5.3.0) is vulnerable to command injection because untrusted input arguments are treated as shell expressions. This can lead to execution of arbitrary commands with local privileges. A fix is release...

PT-2025-35545

Name of the Vulnerable Software and Affected Versions: Endress+Hauser Promag 10 versions affected versions not specified Description: A low-privileged attacker within Bluetooth range may be able to access the password of a higher-privilege user Maintenance by viewing the device’s event log. This...

PT-2025-35567

Name of the Vulnerable Software and Affected Versions: Akinsoft ProKuafor versions s1.02.08 through versions prior to 1.02.08 Description: An improper restriction of excessive authentication attempts exists in Akinsoft ProKuafor, allowing for authentication bypass. Recommendations: Update Akinsof...

Akinsoft OctoCloud 安全漏洞

Akinsoft OctoCloud is an online platform from Akinsoft Turkey with the ability to manage financial transactions, record receipts and inventory, issue invoices, and generate reports. Akinsoft OctoCloud versions prior to s1.09.02 through v1.11.01 contain a security bypass vulnerability that can be...

PT-2025-35584

Name of the Vulnerable Software and Affected Versions: SunPower PVS6 affected versions not specified Description: The SunPower PVS6’s BluetoothLE interface is vulnerable due to the use of hardcoded encryption parameters and publicly accessible protocol details. An attacker within Bluetooth range...

CVE-2025-33102 IBM Concert Software information disclosure

IBM Concert Software 1.0.0 through 1.1.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

CVE-2025-2412

CVE-2025-2412 affects Akinsoft QR Menü (QR Menu) versions s1.05.07 through s1.05.11. The root cause is an improper restriction of excessive authentication attempts, which can lead to an authentication bypass. Practical impact is that an attacker could bypass login controls against the affected QR...

CVE-2025-0610

CVE-2025-0610 describes a Cross-Site Request Forgery (CSRF) vulnerability in Akınsoft QR Menü. Affected versions are s1.05.06 through v1.05.12, where improper validation of user-supplied input enables CSRF actions on behalf of authenticated users. The root cause is insufficient input validation, ...

Akınsoft QR Menü 跨站请求伪造漏洞

Akinsoft QR Menü is a digitized QR code menu system from Akinsoft Turkey. Akinsoft QR Menü versions prior to s1.05.06 through v1.05.12 are vulnerable to a cross-site request forgery vulnerability that is caused by improper validation of user-supplied input. No detailed vulnerability details are...

IBM Concert Software 加密问题漏洞

IBM Concert Software is an application lifecycle risk identification software from International Business Machines IBM. An encryption issue vulnerability exists in IBM Concert Software versions 1.0.0 through 1.1.0 that stems from not properly enabling HTTP Strict Transport Security, which could...

CVE-2025-25735

Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units RSUs v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to lack SPI Protected Range Registers PRRs, allowing attackers with software running on the system to modify SPI flash in real-time...

CVE-2025-51667

An issue was discovered in simple-admin-core v1.2.0 thru v1.6.7. The /sys-api/role/update interface in the simple-admin-core system has a limited SQL injection vulnerability, which may lead to partial data leakage or disruption of normal system operations...

CVE-2025-9481

A security vulnerability has been detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This affects the function setIpv6 of the file /goform/setIpv6. The manipulation of the argument tunrdPrefix leads to stack-based buffer...

Linux Distros Unpatched Vulnerability : CVE-2021-21273

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In...

Linux Distros Unpatched Vulnerability : CVE-2021-37150

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Input Validation vulnerability in header parsing of Apache Traffic Server allows an attacker to request secure resources. This issue affects Apache...

Linux Distros Unpatched Vulnerability : CVE-2019-11027

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ruby OpenID aka ruby-openid through 2.8.0 has a remotely exploitable flaw. This library is used by Rails web applications to integrate with OpenID Providers...

Linux Distros Unpatched Vulnerability : CVE-2022-4730

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Graphite Web. It has been classified as problematic. Affected is an unknown function of the component Absolute Time Range Handler...

Linux Distros Unpatched Vulnerability : CVE-2024-6287

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect Calculation vulnerability in Renesas arm-trusted-firmware allows Local Execution of Code. When checking whether a new image invades/overlaps with a...

Linux Distros Unpatched Vulnerability : CVE-2020-24379

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebDAV implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to XXE injection. CVE-2020-24379 Note that Nessus relies on the presence of the...

-shaz-react-rich-text-editor (>=0.1.0, <=0.1.1), 0xmugitea (0.1.0) +1084 more potentially affected by CVE-2025-55173 via next (>=15.0.0, <=15.4.4)

next NPM version =15.0.0, =0.1.0, =0.1.0, =0.1.12, =0.1.0, =1.5.0-beta.1, =0.1.0, =0.1.0, =0.0.3-alpha-20241021184442-252a149a89c221b28ae459807869535922e67185, =0.0.5-alpha-20250505070314-fe37055a9f31a5579df0224dd5a16cce090d542b and more Source cves: CVE-2025-55173 Source advisory:...