16949 matches found
The vulnerability of Intel graphics processor microsoftware, related to the execution of operations beyond buffer boundaries in memory, allows attackers to trigger system failures.
The vulnerability of Intel graphics processor microsoftware is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
PT-2025-22550 · Ocuco · Ocuco Innovation Tracking.Exe
Name of the Vulnerable Software and Affected Versions: Ocuco Innovation Tracking.exe version 2.10.24.51 Description: The issue allows a local attacker to escalate privileges via the modification of TCP packets. Recommendations: For Ocuco Innovation Tracking.exe version 2.10.24.51, at the moment,...
PT-2025-22560 · Wso2 · Wso2 Identity Server
Name of the Vulnerable Software and Affected Versions: WSO2 Identity Server version 7.0.0 Description: An improper authentication issue exists due to an implementation flaw, allowing app-native authentication to be bypassed when an invalid object is passed. This could enable malicious actors to...
The vulnerability of Intel graphics processor microprogramming software, related to deficiencies in access control, allows attackers to enhance their privileges.
The vulnerability of Intel graphics processor microsoftware is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2009-4917
Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5580 series devices with software before 8.12 allows remote attackers to cause a denial of service device reload via a high volume of SIP traffic, aka Bug ID CSCsr65901...
CVE-2002-2068
Eraser 5.3 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted...
GHSA-QFM8-78QF-P75J The Front End User Registration extension for TYPO3 (sr_feuser_register) Remote Code Execution
The srfeuserregister extension through 12.4.8 for TYPO3 allows Remote Code Execution via unsafe deserialization...
Deserialization of Untrusted Data
Overview sjbr/sr-feuser-register is an A self-registration variant of Kasper Skårhøj's Front End User Admin extension for TYPO3 CMS. Affected versions of this package are vulnerable to Deserialization of Untrusted Data via an unsafe uploaded file without proper validation. An attacker can execute...
CVE-2025-40775
When an incoming DNS protocol message includes a Transaction Signature TSIG, BIND always checks it. If the TSIG contains an invalid value in the algorithm field, BIND immediately aborts with an assertion failure. This issue affects BIND 9 versions 9.20.0 through 9.20.8 and 9.21.0 through 9.21.7...
Privilege Escalation
cocotais-bot is vulnerable to Privilege Escalation. The vulnerability is due to improper sanitization and permission validation in the command echoing feature, which allows user-supplied input to be interpreted as privileged commands...
BIT-NODE-MIN-2025-23122
Rejected reason: This CVE record has been withdrawn due to a duplicate entry CVE-2025-23165...
PT-2025-22409
Name of the Vulnerable Software and Affected Versions jq versions up to and including 1.7.1 Description The issue is a heap-buffer-overflow present in the function jv string vfmt in the jq fuzz execute harness from oss-fuzz. This crash occurs in the file jv.c. No information is provided about the...
PT-2025-22366
Name of the Vulnerable Software and Affected Versions jq versions up to and including 1.7.1 Description The issue arises from an integer overflow when assigning a value using an index of 2147483647, which is the signed integer limit. This causes a denial of service. Recommendations For versions u...
The vulnerability of the software for managing VMware vCenter Server’s virtual infrastructure lies in the lack of measures taken to neutralize special elements used in the operating system commands, allowing attackers to execute arbitrary commands.
The vulnerability of the software for managing VMware vCenter Server lies in the lack of measures taken to neutralize the special elements used in the operating system’s command set. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...
PT-2025-22507 · Ibm · Ibm Aspera Faspex
Name of the Vulnerable Software and Affected Versions: IBM Aspera Faspex versions 5.0.0 through 5.0.12 Description: The issue allows a remote attacker to inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site...
PT-2025-22459 · Gitlab · Gitlab Ce/Ee
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions prior to 17.10.7 GitLab CE/EE version 17.11 prior to 17.11.3 GitLab CE/EE version 18.0 prior to 18.0.1 Description: An issue has been discovered in GitLab CE/EE that could allow an authenticated attacker to cause a denia...
PT-2025-22402
Name of the Vulnerable Software and Affected Versions Vasco versions 3.14 and earlier Description The issue allows a remote attacker to obtain sensitive information via the help menu. This is due to a Local File Inclusion vulnerability. Recommendations For versions 3.14 and earlier, consider...
jq 安全漏洞
jq is a lightweight and flexible command-line JSON processor from jqlang open source. A security vulnerability exists in jq 1.7.1 and earlier versions, which stems from a heap buffer overflow in the jvstringvfmt function...
WordPress Splitit plugin <= 4.2.8 - Missing Authorization to Multiple Administrative Actions vulnerability
Missing Authorization to Multiple Administrative Actions vulnerability discovered by Sushi Com Abacate in WordPress Plugin Splitit versions = 4.2.8...