1261 matches found
CVE-2024-23764
Certain WithSecure products allow Local Privilege Escalation. This affects WithSecure Client Security 15 and later, WithSecure Server Security 15 and later, WithSecure Email and Server Security 15 and later, and WithSecure Elements Endpoint Protection 17 and later...
CVE-2022-30421
Improper Authentication vulnerability in Toshiba Storage Security Software V1.2.0.7413 is that allows for sensitive information to be obtained vialocal password authentication module...
CVE-2003-5004
creationtimestamp| type| source ---|---|--- 2025-05-22 23:53:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpscrssa7m2k...
MAL-2025-4150 Malicious code in @dailyapy-rn/rn-push-provisioning (npm)
--- -= Per source details. Do not edit below this line.=-...
BELL-CVE-2025-37926
Bulletin has no description...
MAL-2025-5124 Malicious code in pyfiglets (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 66caa962e9fedf67dff7c9da840c4a4dcdca71f237d2e36f332f5b5bd32750bc Malicious clone of pyfiglet. Importing the package starts a series of downloading and executing of obfuscated malicious scripts, partially identified by AVs. -...
The vulnerability of Qualcomm’s security microprogramming software, related to unvalidated array indexing, allows attackers to influence the integrity, accessibility, and confidentiality of protected information.
The vulnerability of Qualcomm’s security microprogramming software relates to unverified array indexing. Exploiting this vulnerability could allow attackers to influence the integrity, accessibility, and confidentiality of the protected information...
BELL-CVE-2023-53092
Bulletin has no description...
Google Reports 75 Zero-Days Exploited in 2024 — 44% Targeted Enterprise Security Products
Google has revealed that it observed 75 zero-day vulnerabilities exploited in the wild in 2024, down from 98 in 2023 but an increase from 63 the year before. Of the 75 zero-days, 44% of them targeted enterprise products. As many as 20 flaws were identified in security software and appliances...
MAL-2025-6609 Malicious code in tronlid (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 387ea56c726485890b55cce5a96c6381e248be3c8eba22c22ead08e4b30db3b1 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...
WordPress Site Search 360 plugin <= 2.1.8 - Cross Site Request Forgery (CSRF) to stored XSS vulnerability
Cross Site Request Forgery CSRF to stored XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Site Search 360 versions = 2.1.8...
CVE-2025-30728
...
CVE-2025-30699
CVE-2025-30699 affects Oracle MySQL Server, component: Server: Stored Procedure. Affected versions: 8.0.0–8.0.41, 8.4.0–8.4.4, 9.0.0–9.2.0. An attacker with high privileges and network access via multiple protocols can exploit this to cause a hang or a complete denial of service on MySQL Server. ...
CVE-2025-30696
CVE-2025-30696 affects Oracle MySQL Server (component: Server: PS). Affected versions are 8.0.0–8.0.41, 8.4.0–8.4.4 and 9.0.0–9.2.0. The vulnerability can be exploited remotely over multiple protocols by a high-privilege attacker to cause a hang or a frequently repeatable crash (Denial of Service...
CVE-2025-32036 DNN allows the possibility of bypassing Captcha
DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. The algorithm used to generate the captcha image shows the least complexity of the desired image. For this reason, the created image can be easily read by OCR tools, and the intruder can send...
CGA-PHHC-5PH5-WHJ8
Bulletin has no description...
CGA-8W9G-4337-7W2R
Bulletin has no description...
BELL-CVE-2023-53001
Bulletin has no description...