2873 matches found
PT-2025-46157
Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2025.3.104432 Description A missing VCS URL validation in JetBrains YouTrack allows delegation to unauthorized repositories through the Junie widget. This issue affects versions prior to 2025.3.104432...
PT-2025-45358
Name of the Vulnerable Software and Affected Versions Advantech WebAccess/VPN versions prior to 1.1.5 Description The software contains a SQL injection issue in the AjaxDeviceController.ajaxDeviceAction function. An authenticated, low-privileged user can inject SQL code through datatable search...
CVE-2025-63248
DWSurvey 6.14.0 is vulnerable to Incorrect Access Control. When deleting a questionnaire, replacing the questionnaire ID with the ID of another questionnaire can enable the deletion of other questionnaires...
CVE-2025-45378
CVE-2025-45378 (Dell CloudLink) affects Dell CloudLink running versions 8.0–8.1.2, with a vulnerability in the restricted shell that allows a privileged user with a known password to break into the CloudLink server command shell and escalate privileges, gaining unauthorized system access. If SSH ...
Abis BAPSIS SQL注入漏洞
Abis BAPSIS is a subject management system from Abis Turkey. An SQL injection vulnerability exists in versions prior to Abis BAPSIS 202510271606, which stems from improper neutralization of special elements and could lead to a blind SQL injection attack...
CVE-2016-15053 Nagios XI < 5.2.4 XSS via “My Reports” Listing
Nagios XI versions prior to 5.2.4 are vulnerable to cross-site scripting XSS via the “My Reports” listing of the web interface. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...
[SECURITY] Fedora 42 Update: zeal-0.7.2-14.fc42
Zeal is a simple offline documentation browser inspired by Dash...
PT-2025-44259
Name of the Vulnerable Software and Affected Versions Evergreen Content Poster versions through 1.4.5 Description An authorization issue exists in Evergreen Content Poster, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Evergreen Content...
PT-2025-43841
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in XLPlugins NextMove Lite woo-thank-you-page-nextmove-lite allows Stored XSS.This issue affects NextMove Lite: from n/a through = 2.21.0...
CVE-2025-54966
An issue was discovered in BAE SOCET GXP before 4.6.0.2. Some endpoints on the SOCET GXP Job Status Service may return sensitive information in certain situations, including local file paths and SOCET GXP version information...
CVE-2025-55096 Inadequate bounds check and potential underflow in _ux_host_class_hid_report_descriptor_get()
In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in uxhostclasshidreportdescriptorget when parsing a descriptor of an USB HID device...
Siemens SINEC NMS
SUMMARY SINEC NMS is affected by SQL injection vulnerability that could allow an authenticated low privileged attacker to exploit by inserting malicious data and achieve privilege escalation. Siemens has released a new version for SINEC NMS and recommends to update to the latest version. 2...
PT-2025-41587
Name of the Vulnerable Software and Affected Versions JeeWMS version 20250820 Description An arbitrary file upload issue exists due to insufficient file validation within the saveFiles function located at the /jeewms/cgUploadController.do endpoint. An attacker with standard user privileges can...
CVE-2025-60868
The CVE-2025-60868 entry concerns the Alt Redirect 1.6.3 addon for Statamic. The vulnerability arises from incomplete query string parameter cleanup when the Query String Strip option is enabled: case variations, encoded keys, and duplicate parameters are not consistently removed, potentially ena...
PT-2025-41491
Name of the Vulnerable Software and Affected Versions Confidential Containers Trustee versions prior to 0.15.0 Description The Confidential Containers Trustee project, which includes tools for attesting confidential guests and providing secrets, had a flaw in the attestation-policy endpoint. Befo...
CVE-2025-60316
CVE-2025-60316 affects SourceCodester Pet Grooming Management Software 1.0. The vulnerability is an SQL injection in the admin/view_customer.php script via the ID parameter, caused by improper handling of input. Impact includes potential unauthorized data access or modification. Public documents ...
CVE-2025-61524
An issue in the permission verification module and organization/application editing interface in Casdoor v2.26.0 and before, and fixed in v.2.63.0, allows remote authenticated administrators of any organization within the system to bypass the system's permission verification mechanism by directly...
EUVD-2017-4093
Malware in sbrugna...