90761 matches found
CVE-2025-8589: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in AKCE Software Technology R&D Industry and Trade Inc. SKSPro allows Reflected XSS. This issue affects SKSPro: through 07012026...
CVE-2026-24449: Use of Weak Credentials
For WRC-X1500GS-B and WRC-X1500GSA-B, the initial passwords can be calculated easily from the system information...
CVE-2025-61639: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/logging/ManualLogEntry.Php, includes/recentchanges/RecentChangeFactory.Php, includes/recentchanges/RecentChangeStore.Php. This...
CVE-2026-24938: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ajay Better Search better-search allows Stored XSS.This issue affects Better Search: from n/a through = 4.2.1...
CVE-2025-67484: Improper Input Validation
Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiFormatXml.Php. This issue affects MediaWiki: from before 1.39.16, 1.43.6, 1.44.3, 1.45.1...
CVE-2026-25023: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in mdedev Run Contests, Raffles, and Giveaways with ContestsWP contest-code-checker allows Retrieve Embedded Sensitive Data.This issue affects Run Contests, Raffles, and Giveaways with ContestsWP: from n/a...
CVE-2026-1814: Insufficient Entropy
Rapid7 Nexpose versions 6.4.50 and later are vulnerable to an insufficient entropy issue in the CredentialsKeyStorePassword.generateRandomPassword method. When updating legacy keystore passwords, the application generates a new password with insufficient length 7-12 characters and a static prefix...
Linux Distros Unpatched Vulnerability : CVE-2025-15537
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in Mapnik up to 4.2.0. This issue affects the function mapnik::dbffile::stringvalue of the file...
Exploit for Argument Injection in Gnu Inetutils
CVE-2026-24061 Telnet Root Exploit & Scanner A robust, multit...
CVE-2022-50976: Improper Validation of Consistency within Input
A local attacker could cause a full device reset by resetting the device passwords using an invalid reset file via USB...
CVE-2025-47399: Buffer Copy without Checking Size of Input
Memory Corruption while processing IOCTL call to update sensor property settings with invalid input parameters...
CVE-2025-6593: Exposure of Sensitive Information to an Unauthorized Actor
Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/user/User.Php. This issue affects MediaWiki: from 1.27.0 before 1.39.13, 1.42.7 1.43.2, 1.44.0...
CVE-2025-47402: Buffer Over-read
Transient DOS when processing a received frame with an excessively large authentication information element...
CVE-2026-25202: Use of Hard-coded Credentials
The database account and password are hardcoded, allowing login with the account to manipulate the database in MagicInfo9 Server.This issue affects MagicINFO 9 Server: less than 21.1090.1...
CVE-2026-0924: Time-of-check Time-of-use (TOCTOU) Race Condition
BuhoCleaner contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root via insecure functions.This issue affects BuhoCleaner: 1.15.2...
CVE-2026-22225: Improper Neutralization of Special Elements used in an OS Command
A command injection vulnerability may be exploited after the admin's authentication in the VPN Connection Service on the Archer BE230 v1.2 and Archer AXE75 v1.0. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of...
CVE-2025-47364: Integer Overflow or Wraparound
Memory corruption while calculating offset from partition start point...
CVE-2025-47363: Integer Overflow or Wraparound
Memory corruption when calculating oversized partition sizes without proper checks...