17016 matches found
BELL-CVE-2025-40780
Bulletin has no description...
BELL-CVE-2023-53692
Bulletin has no description...
CVE-2025-54966
An issue was discovered in BAE SOCET GXP versions prior to 4.6.0.2 where certain endpoints on the SOCET GXP Job Status Service may return sensitive information, including local file paths and SOCET GXP version information , in certain situations. To mitigate this vulnerability, it is recommended ...
CVE-2025-61885
Vulnerability in the Oracle Life Sciences InForm product of Oracle Health Sciences Applications component: Web Server. The supported version that is affected is 7.0.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Life Sciences...
CVE-2025-62479
...
Security Bulletin: Vulnerability in IBM WebSphere Application (CVE-2025-36000) affects IBM PowerVM Novalink.
Summary IBM WebSphere Libery Profile is used by IBM PowerVM Novalink. IBM PowerVM Novalink has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2025-36000 DESCRIPTION: IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 is vulnerable to stored cross-site scripting. Thi...
BELL-CVE-2025-40011
Bulletin has no description...
CVE-2025-11905
ChanCMS up to version 3.3.2 is affected by a code injection vulnerability in the function getArticle (file app/modules/cms/controller/gather.js). The issue stems from inadequate filtering of special elements in the constructed snippet, enabling arbitrary code execution. The attack can be launched...
EEF-CVE-2025-48044 Authorization bypass when bypass policy condition evaluates to true
Summary Incorrect Authorization vulnerability in ash-project ash allows Authentication Bypass. This issue affects ash: from 3.6.3 before 3.7.1...
BELL-CVE-2025-40000
Bulletin has no description...
BELL-CVE-2025-39987
Bulletin has no description...
BELL-CVE-2025-39967
Bulletin has no description...
ASUS Armoury Crate Stack Buffer Overflow Vulnerability
ASUS Armoury Crate is a utility software developed by ASUS to centrally control and manage ROG Gamerland and some ASUS gaming products. ASUS Armoury Crate suffers from a stack buffer overflow vulnerability that can be exploited by attackers to cause a system crash or other undefined execution...
ASUS Armoury Crate Null Pointer Dereference Vulnerability
ASUS Armoury Crate is a utility software developed by ASUS to centrally control and manage ROG Gamerland and some ASUS gaming products. ASUS Armoury Crate suffers from a null pointer dereference vulnerability that can be exploited by attackers to cause a system crash...
CVE-2025-62407
CVE-2025-62407 affects the Frappe web framework. An open redirect was possible on the login page via the redirect parameter for versions prior to 14.98.0 and 15.83.0 . The issue is fixed in those respective versions (14.98.0 and 15.83.0). As described in connected sources, upgrading to 14.98.0 or...
CVE-2025-62493
A vulnerability exists in the QuickJS engine's BigInt string conversion logic jsbiginttostring1 due to an incorrect calculation of the required number of digits, which in turn leads to reading memory past the allocated BigInt structure. The function determines the number of characters ndigits...
BELL-CVE-2025-55247
Bulletin has no description...
WordPress Voice Feedback plugin <= 1.0.3 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by Denver Jackson in WordPress Plugin Voice Feedback versions = 1.0.3...
K000156767: F5OS vulnerability CVE-2025-61955
Security Advisory Description A vulnerability exists in F5OS-A and F5OS-C systems that may allow an authenticated attacker with local access to escalate their privileges. A successful exploit may allow the attacker to cross a security boundary. CVE-2025-61955 Impact In standard deployments, this...