16955 matches found
PT-2025-19957 · Pcvue · Pcvue
Name of the Vulnerable Software and Affected Versions: PcVue affected versions not specified Description: The MQTT add-on of PcVue fails to verify that a remote device’s certificate has not already expired or has not yet become valid. This allows malicious devices to present certificates that are...
CVE-2025-46553 @misskey-dev/summaly Redirect Filter Bypass
@misskey-dev/summaly is a tool for getting a summary of a web page. Starting in version 3.0.1 and prior to version 5.2.1, a logic error in the main summaly function causes the allowRedirects option to never be passed to any plugins, and as a result, isn't enforced. Misskey will follow redirects,...
CVE-2025-43848 GHSL-2025-018_Retrieval-based-Voice-Conversion-WebUI
Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. Versions 2.2.231006 and prior are vulnerable to unsafe deserialization. The ckptpath0 variable takes user input e.g. a path to a model and passes it to the changeinfo function in processckpt.py, which uses it...
CVE-2025-45240
foxcms v1.2.5 was discovered to contain a SQL injection vulnerability via the executeCommand method in DataBackup.php...
CVE-2025-43845 GHSL-2025-015_Retrieval-based-Voice-Conversion-WebUI
Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. Versions 2.2.231006 and prior are vulnerable to code injection. The ckptpath2 variable takes user input e.g. a path to a model and passes it to changeinfo function, which opens and reads the file on the given path...
CVE-2025-43843 GHSL-2025-013_Retrieval-based-Voice-Conversion-WebUI
Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. Versions 2.2.231006 and prior are vulnerable to command injection. The variables expdir1, np7 and f0method8 take user input and pass it into the extractf0feature function, which concatenates them into a command th...
CVE-2025-43842 GHSL-2025-012_Retrieval-based-Voice-Conversion-WebUI
Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. Versions 2.2.231006 and prior are vulnerable to command injection. The variables expdir1, np7, trainsetdir4 and sr2 take user input and pass it to the preprocessdataset function, which concatenates them into a...
MAL-2025-3661 Malicious code in @ebay-business-components/marko-rum (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
BELL-CVE-2023-53050
Bulletin has no description...
BELL-CVE-2023-53068
Bulletin has no description...
BELL-CVE-2023-53095
Bulletin has no description...
BELL-CVE-2023-53103
Bulletin has no description...
BELL-CVE-2023-53047
Bulletin has no description...
BELL-CVE-2023-53083
Bulletin has no description...
OSV-2025-324 Index-out-of-bounds in dwg_decode_eed
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=415083665 Crash type: Index-out-of-bounds Crash state: dwgdecodeeed dwgdecodeentity dwgdecodeATTDEFprivate...
PT-2025-19723 · NetGear · Netgear Rax5
Name of the Vulnerable Software and Affected Versions: NETGEAR RAX5 version 1.0.2.26 Description: A command injection issue was discovered in the NETGEAR RAX5 AX1600 WiFi Router via the ifname parameter in the apcli cancel wps function. This allows for potential exploitation. Recommendations: For...
PT-2025-19730
Name of the Vulnerable Software and Affected Versions Rhymix version 2.1.22 Description The issue is related to an arbitrary file deletion vulnerability. This vulnerability can be exploited via the procFileAdminEditImage method in the /file/file.admin.controller.php file. Recommendations For Rhym...
PT-2025-19798 · Ibm · Ibm Db2
Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server versions 11.5.0 through 11.5.9 IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server versions 12.1.0 through 12.1.1 Description: The issue could allow an authenticated...
PT-2025-19719 · Unknown · Kashipara Online Service Management Portal
Name of the Vulnerable Software and Affected Versions: kashipara Online Service Management Portal version V1.0 Description: The issue is related to SQL Injection in the osms/Requester/CheckStatus.php file via the checkid parameter. This allows for potential exploitation. Recommendations: For...
PT-2025-19785 · Unknown · Production Ssm
Name of the Vulnerable Software and Affected Versions: production ssm version v0.0.1-SNAPSHOT Description: The issue is related to incorrect access control in the component /user/list, which allows attackers to access sensitive information via a crafted payload. Recommendations: For production ss...