16949 matches found
CVE-2025-43842 GHSL-2025-012_Retrieval-based-Voice-Conversion-WebUI
Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. Versions 2.2.231006 and prior are vulnerable to command injection. The variables expdir1, np7, trainsetdir4 and sr2 take user input and pass it to the preprocessdataset function, which concatenates them into a...
MAL-2025-3661 Malicious code in @ebay-business-components/marko-rum (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
BELL-CVE-2023-53050
Bulletin has no description...
BELL-CVE-2023-53068
Bulletin has no description...
BELL-CVE-2023-53095
Bulletin has no description...
BELL-CVE-2023-53103
Bulletin has no description...
BELL-CVE-2023-53047
Bulletin has no description...
BELL-CVE-2023-53083
Bulletin has no description...
OSV-2025-324 Index-out-of-bounds in dwg_decode_eed
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=415083665 Crash type: Index-out-of-bounds Crash state: dwgdecodeeed dwgdecodeentity dwgdecodeATTDEFprivate...
PT-2025-19730
Name of the Vulnerable Software and Affected Versions Rhymix version 2.1.22 Description The issue is related to an arbitrary file deletion vulnerability. This vulnerability can be exploited via the procFileAdminEditImage method in the /file/file.admin.controller.php file. Recommendations For Rhym...
PT-2025-19723 · NetGear · Netgear Rax5
Name of the Vulnerable Software and Affected Versions: NETGEAR RAX5 version 1.0.2.26 Description: A command injection issue was discovered in the NETGEAR RAX5 AX1600 WiFi Router via the ifname parameter in the apcli cancel wps function. This allows for potential exploitation. Recommendations: For...
PT-2025-19719 · Unknown · Kashipara Online Service Management Portal
Name of the Vulnerable Software and Affected Versions: kashipara Online Service Management Portal version V1.0 Description: The issue is related to SQL Injection in the osms/Requester/CheckStatus.php file via the checkid parameter. This allows for potential exploitation. Recommendations: For...
PT-2025-19785 · Unknown · Production Ssm
Name of the Vulnerable Software and Affected Versions: production ssm version v0.0.1-SNAPSHOT Description: The issue is related to incorrect access control in the component /user/list, which allows attackers to access sensitive information via a crafted payload. Recommendations: For production ss...
PT-2025-19798 · Ibm · Ibm Db2
Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server versions 11.5.0 through 11.5.9 IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server versions 12.1.0 through 12.1.1 Description: The issue could allow an authenticated...
PT-2025-19340 · Unknown · Phpgurukul Emergency Ambulance Hiring Portal
Name of the Vulnerable Software and Affected Versions: PHPGurukul Emergency Ambulance Hiring Portal version 1.0 Description: A critical vulnerability was found in the PHPGurukul Emergency Ambulance Hiring Portal. The issue affects an unknown functionality of the file /admin/contact-us.php. The...
PT-2025-19765 · Unknown · Retrieval-Based-Voice-Conversion-Webui
Name of the Vulnerable Software and Affected Versions: Retrieval-based-Voice-Conversion-WebUI versions 2.2.231006 and prior Description: Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. The issue arises from unsafe deserialization. The ckpt dir variable takes us...
BELL-CVE-2025-37770
Bulletin has no description...
CVE-2024-52903
IBM Db2 for Linux, UNIX and Windows 12.1.0 and 12.1.1 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query...