83170 matches found
CVE-2010-2517
Multiple unspecified vulnerabilities in IBM Rational ClearQuest before 7.1.1.02 have unknown impact and attack vectors, as demonstrated by an AppScan report...
CVE-2019-19909
An issue was discovered in Public Knowledge Project PKP pkp-lib before 3.1.2-2, as used in Open Journal Systems OJS before 3.1.2-2. Code injection can occur in the OJS report generator if an authenticated Journal Manager user visits a crafted URL, because unserialize is used...
CVE-2019-17634
Eclipse Memory Analyzer version 1.9.1 and earlier is subject to a cross site scripting XSS vulnerability when generating an HTML report from a malicious heap dump. The user must chose todownload, open the malicious heap dump and generate an HTML report for the problem to occur. The heap dump coul...
CVE-2019-14221
1CRM On-Premise Software 8.5.7 allows XSS via a payload that is mishandled during a Run Report operation...
CVE-2012-0950
The Apport hook DistUpgradeApport.py in Update Manager, as used by Ubuntu 12.04 LTS, 11.10, and 11.04, uploads the /var/log/dist-upgrade directory when reporting bugs to Launchpad, which allows remote attackers to read repository credentials by viewing a public bug report. NOTE: this vulnerabilit...
CVE-2025-3887
GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may...
CVE-2012-5176
Cross-site scripting XSS vulnerability in KENT-WEB ACCESS REPORT 5.02 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to tag embedding...
CVE-2013-1195
The time-based ACL implementation on Cisco Adaptive Security Appliances ASA devices, and in Cisco Firewall Services Module FWSM, does not properly handle periodic statements for the time-range command, which allows remote attackers to bypass intended access restrictions by sending network traffic...
OSV-2025-396 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=419059436 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/sun.nio.cs.UTF8$Encoder.encodeArrayLoop java.base/sun.nio.cs.UTF8$Encoder.encodeLoop...
Content Security Policy Missing 'Report-To'
Content Security Policy CSP is a web security standard that helps to mitigate attacks like cross-site scripting XSS, clickjacking or mixed content issues. CSP provides mechanisms to websites to restrict content that browsers will be allowed to load. The 'report-to' directive allows websites to...
Daily Expense Tracker System SQL Injection Vulnerability (CNVD-2025-31000)
Daily Expense Tracker System is a PHP and MySQL based daily expense tracking system. Daily Expense Tracker System suffers from a SQL injection vulnerability, which originates from the lack of validation of the fromdate/todate parameter in the file /expense-monthwise-reports-detailed.php with...
PT-2025-23420 · Git +1 · Checkstyle
Name of the Vulnerable Software and Affected Versions: Checkstyle affected versions not specified Description: The software experiences a security exception during parsing of Java expressions within the com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr component. The crash stat...
CVE-2025-48070
creationtimestamp| type| source ---|---|--- 2025-05-21 22:41:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17209 2025-05-22 01:27:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lppxlfcpza27...
CVE-2025-44083
creationtimestamp| type| source ---|---|--- 2025-05-21 21:56:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpplreochm2j...
CVE-2008-7250
Cross-site scripting XSS vulnerability in Squid Analysis Report Generator Sarg 2.2.4 allows remote attackers to inject arbitrary web script or HTML via a JavaScript onload event in the User-Agent header, which is not properly handled when displaying the Squid proxy log. NOTE: this issue exists...
Exploit for Use of Less Trusted Source in Apache Http_Server
CVE-2022-31813 Vulnerability Checker Author: Derek Odiorn...
CVE-2025-48206
creationtimestamp| type| source ---|---|--- 2025-05-21 17:18:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpp4anyvkp2n 2025-05-21 20:41:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17201...
CVE-2025-44892
creationtimestamp| type| source ---|---|--- 2025-05-21 17:18:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpp4anoq4i2h...