17029 matches found
BELL-CVE-2025-4207
Bulletin has no description...
BELL-CVE-2025-37823
Bulletin has no description...
BELL-CVE-2025-37834
Bulletin has no description...
BELL-CVE-2025-37820
Bulletin has no description...
BELL-CVE-2025-37805
Bulletin has no description...
BELL-CVE-2025-37803
Bulletin has no description...
BELL-CVE-2025-37806
Bulletin has no description...
BELL-CVE-2025-37807
Bulletin has no description...
BELL-CVE-2025-37800
Bulletin has no description...
BELL-CVE-2025-37814
Bulletin has no description...
CVE-2025-47737
lib.rs in the trailer crate through 0.1.2 for Rust mishandles allocating with a size of zero...
PT-2025-22456 · Zohocorp · Zoho Manageengine Adaudit Plus
Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine ADAudit Plus versions 8510 and prior Description: The issue concerns an authenticated SQL injection in the logon events aggregate report. Recommendations: For Zohocorp ManageEngine ADAudit Plus versions 8510 and prior,...
PT-2025-20544 · Code Projects · Code-Projects Jewelery Store Management System
Name of the Vulnerable Software and Affected Versions: code-projects Jewelery Store Management system version 1.0 Description: A critical issue has been found in the Search Item View component, where the manipulation of the str2 argument leads to a stack-based buffer overflow. This issue can be...
IBM Engineering Requirements Management DOORS Registration Information Disclosure
The vulnerability of the IBM Engineering Requirements Management DOORS Next software lies in the insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information remotely...
WordPress ELEX HelpDesk & Customer Ticketing System plugin <= 3.2.9 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin ELEX WordPress HelpDesk & Customer Ticketing System versions = 3.2.9...
Improper Certificate Validation
org.keycloak:keycloak-services is vulnerable to Improper Certificate Validation. The vulnerability is due to insecure default configuration due to setting the verification policy to 'ALL', which unintentionally skips trust store certificate verification...
CVE-2025-37830 cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()
In the Linux kernel, the following vulnerability has been resolved: cpufreq: scmi: Fix null-ptr-deref in scmicpufreqgetrate cpufreqcpugetraw can return NULL when the target CPU is not present in the policy-cpus mask. scmicpufreqgetrate does not check for this case, which results in a NULL pointer...
BIT-MASTODON-2023-49952
Mastodon 4.1.x before 4.1.17 and 4.2.x before 4.2.9 allows a bypass of rate limiting via a crafted HTTP request header...
PT-2025-20399 · Trix · Trix
Name of the Vulnerable Software and Affected Versions: Trix versions prior to 2.1.15 Description: The issue allows an attacker to execute arbitrary JavaScript code within the context of a user's session by tricking the user into copying and pasting malicious code. This could potentially lead to...