90942 matches found
CVE-2025-60564: Stack-based Buffer Overflow
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetLog...
CVE-2025-46183: Deserialization of Untrusted Data
The Utils.deserialize function in pgCodeKeeper 10.12.0 processes serialized data from untrusted sources. If an attacker provides a specially crafted .ser file, deserialization may result in unintended code execution or other malicious behavior on the target system...
CVE-2025-60801: Improper Neutralization of Special Elements used in a Command
jshERP up to commit fbda24da was discovered to contain an unauthenticated remote code execution RCE vulnerability via the jsherp function...
Rapid7 Velociraptor Installed (Linux)
Binary data rapid7velociraptornixinstalled.nbin...
CVE-2025-10727: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ArkSigner Software and Hardware Inc. AcBakImzala allows Reflected XSS. This issue affects AcBakImzala: before v5.1.4...
MCP JSON Config Detected (Windows)
Binary data mcpjsonconfigdetectedwin.nbin...
CVE-2025-6978: Improper Neutralization of Special Elements used in an OS Command
Diagnostics command injection vulnerability...
CVE-2025-10914: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Proliz Software Ltd. Co. OBS Student Affairs Information System allows Reflected XSS. This issue affects OBS Student Affairs Information System: before V26.0401...
CVE-2025-62398: Improper Authentication
A serious authentication flaw allowed attackers with valid credentials to bypass multi-factor authentication under certain conditions, potentially compromising user accounts...
CVE-2025-62393: Improper Access Control
A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view information about courses they should not have access to, potentially exposing limited course details...
CVE-2025-62395: Improper Access Control
A flaw in the cohort search web service allowed users with permissions in lower contexts to access cohort information from the system context, revealing restricted administrative data...
GHSA-25QH-J22F-PWP8 vulnerabilities
Vulnerabilities for packages: cassandra, apache-nifi-registry, zookeeper, trino, cassandra-reaper, sonar-scanner-cli, thingsboard, kserve-modelmesh, management-api-for-apache-cassandra-5.0, apache-nifi, akhq, keycloak-config-cli, dependency-track, nextflow...
CVE-2025-11226 vulnerabilities
Vulnerabilities for packages: cassandra, apache-nifi-registry, zookeeper, trino, cassandra-reaper, sonar-scanner-cli, thingsboard, kserve-modelmesh, management-api-for-apache-cassandra-5.0, apache-nifi, akhq, keycloak-config-cli, dependency-track, nextflow...
GHSA-25QH-J22F-PWP8 vulnerabilities
Vulnerabilities for packages: nacos, trino, zookeeper, nacos-docker, kayenta-fips, hadoop-fips, knative-kafka-broker-fips, management-api-for-apache-cassandra-5.0, nextflow, ontop-fips, cassandra-reaper, kayenta, ontop, zookeeper-fips, thingsboard, knative-kafka-broker, apache-nifi-registry,...
CVE-2025-11226 vulnerabilities
Vulnerabilities for packages: nacos, trino, zookeeper, nacos-docker, kayenta-fips, hadoop-fips, knative-kafka-broker-fips, management-api-for-apache-cassandra-5.0, nextflow, ontop-fips, cassandra-reaper, kayenta, ontop, zookeeper-fips, thingsboard, knative-kafka-broker, apache-nifi-registry,...
CVE-2025-41723: Path Traversal: '.../...//'
The importFile SOAP method is vulnerable to a directory traversal attack. An unauthenticated remote attacker bypass the path restriction and upload files to arbitrary locations...
CVE-2025-41721: Improper Neutralization of Special Elements used in a Command
A high privileged remote attacker can influence the parameters passed to the openssl command due to improper neutralization of special elements when adding a password protected self-signed certificate...
CVE-2025-62775: Incorrect Resource Transfer Between Spheres
Mercku M6a devices through 2.1.0 allow root TELNET logins via the web admin password...