121 matches found
CVE-2025-29868 Apache Answer: Using externally referenced images can leak user privacy.
Private Data Structure Returned From A Public Method vulnerability in Apache Answer. This issue affects Apache Answer: through 1.4.2. If a user uses an externally referenced image, when a user accesses this image, the provider of the image may obtain private information about the ip address of th...
CVE-2025-1917
creationtimestamp| type| source ---|---|--- 2025-03-05 04:32:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6482 2025-03-05 06:04:07+00:00| seen| https://t.me/cvedetector/19579 2025-03-05 07:19:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljmgv4iuta22 2025-03-11...
Syncfusion Essential Studio for ASP.NET MVC 安全漏洞
Syncfusion Essential Studio for ASP.NET MVC is a set of server-side wrappers powered by Essential JavaScript from Syncfusion. A security vulnerability exists in Syncfusion Essential Studio for ASP.NET MVC prior to version 27.1.55, which stems from an XML exception being thrown when re-saving a DO...
Nextcloud 安全漏洞
Nextcloud is an open source suite of self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability exists in Nextcloud that stems from a malicious user being able to upload a manipulated SVG file with a referenced path after an...
TYPO3 Access Control Error Vulnerability
TYPO3 is a free and open source content management system framework CMS/CMF from the Swiss TYPO3 Association. An access control error vulnerability exists in TYPO3 that stems from improper access control of referenced resources...
SUSE CVE-2023-26938
REJECT DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2019-9587. Reason: This record is a reservation duplicate of CVE-2019-9587. Notes: All CVE users should reference CVE-2019-9587 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage...
The mitigation does not sufficiently address the bug report M-02
Lines of code Vulnerability details Impact M-02: The mitigation does not sufficiently address the bug report M-02 Proof of Concept If we look into the M-02 report code-423n4/2022-12-gogopool-findings742 The report points out two issues: Implication 1 The above function upgradeExistingContract...
se.huaruileddriver.com Cross Site Scripting vulnerability OBB-2535762
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Information Disclosure
github.com/helm/helm is vulnerable to information disclosure. The vulnerability exists because it does not limit passing of credentials such as the username and password associated with a Helm repository to another domain referenced by that Helm repository...
Design/Logic Flaw
OX App Suite through 7.10.4 allows XSS via JavaScript in a Note referenced by a mail:// URL...
rkprivat.sk Cross Site Scripting vulnerability OBB-1408618
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Huawei Data Communication: Multiple Vulnerabilities (huawei-sa-20200101-01-name)
Huawei Eudemon1000E-X devices are prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
CVE-2017-13711
A use-after-free issue was found in the Slirp networking implementation of the Quick emulator QEMU. It occurs when a Socket referenced from multiple packets is freed while responding to a message. A user/process could use this flaw to crash the QEMU process on the host resulting in denial of...
Windows Kernel - Out-of-Bounds Read in nt!MiParseImageLoadConfig While Parsing Malformed PE File
We have encountered a Windows kernel crash in memcpy called by nt!MiParseImageLoadConfig while trying to load a malformed PE image into the process address space as a data file i.e. LoadLibraryExLOADLIBRARYASDATAFILE | LOADLIBRARYASIMAGERESOURCE. An example crash log generated after triggering th...
Microsoft Windows Kernel - Out-of-Bounds Read in CI!HashKComputeFirstPageHash While Parsing Malformed PE File
We have encountered a Windows kernel crash in CI!HashKComputeFirstPageHash while trying to load a malformed PE image into the process address space as a data file i.e. LoadLibraryExLOADLIBRARYASDATAFILE | LOADLIBRARYASIMAGERESOURCE. An example crash log generated after triggering the bug is shown...
Robber - Tool For Finding Executables Prone To DLL Hijacking
Robber is a free open source tool developed using Delphi XE2 without any 3rd party dependencies. What is DLL hijacking ?! Windows has a search path for DLLs in its underlying architecture. If you can figure out what DLLs an executable requests without an absolute path triggering this search...
CVE-2018-17254
creationtimestamp| type| source ---|---|--- 2018-09-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45423 2024-11-14 06:08:15+00:00| seen| MISP/d314eb11-81e9-4d90-b43a-b17c0d47f952 2025-09-17 21:02:34+00:00| seen|...
Drupal Entity API Module Security Bypass Vulnerability
Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community. entity API is one of the API modules that can handle entities and attributes in a unified way. entity wrapper access API is one of the entity wrapper access API application program...
Fedora Update for firefox FEDORA-2018-a068ade416
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DRUPAL-CONTRIB-2018-008
This module enables you to show referenced entities in tabs. The module doesn't sufficiently sanitize the body fields of the referenced entities when it prints them to the tabs. This vulnerability is mitigated by the fact that an attacker must have a role with the permission create/edit content o...