277951 matches found
CVE-2025-10876
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Talent Software e-BAP Automation allows Cross-Site Scripting XSS. This issue affects e-BAP Automation: from 1.8.96 before v.41815...
CVE-2025-40801
The CVE-2025-40801 family describes a vulnerability where the SALT (Siemens Advanced Licensing Toolkit) SDK omits server certificate validation when establishing TLS connections to the authorization server. This allows potential man-in-the-middle attacks affecting Siemens products such as COMOS, ...
CVE-2025-66334
Denial of service DoS vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-14253
Vitals ESP developed by Galaxy Software Services has an Arbitrary File Read vulnerability, allowing privileged remote attackers to exploit Absolute Path Traversal to download arbitrary system files...
CVE-2025-14254
Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...
CVE-2025-14255
Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...
Description of the security update for SharePoint Server 2016: December 9, 2025 (KB5002821)
None None...
CVE-2025-14308
An integer overflow vulnerability exists in the write method of the Buffer class in Robocode version 1.9.3.6. The method fails to properly validate the length of data being written, allowing attackers to cause an overflow, potentially leading to buffer overflows and arbitrary code execution. This...
Prototype Pollution zrender Dependency in Jira Software Data Center and Server
This is a vulnerability in a non-Atlassian Jira Software dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This Critical severity Prototype Pollution vulnerability known as CVE-2021-39227 was introduced in 10.3.0, and 11.0.0 of Jira Software Data...
BELL-CVE-2025-40265
Bulletin has no description...
BELL-CVE-2025-40255
Bulletin has no description...
BELL-CVE-2025-40256
Bulletin has no description...
BELL-CVE-2025-40326
Bulletin has no description...
BELL-CVE-2025-40299
Bulletin has no description...
BELL-CVE-2025-40291
Bulletin has no description...
BELL-CVE-2025-40290
Bulletin has no description...
BELL-CVE-2025-40267
Bulletin has no description...
CVE-2025-67504
creationtimestamp| type| source ---|---|--- 2025-12-09 03:38:40+00:00| seen| https://bsky.app/profile/potato.software/post/3m7jmmwjypo22 2025-12-09 04:34:10+00:00| seen| https://infosec.exchange/users/offseq/statuses/115687741812939306 2025-12-09 04:34:12+00:00| seen|...
CVE-2025-66508 1Panel IP Access Control Bypass via Untrusted X-Forwarded-For Headers
1Panel is an open-source, web-based control panel for Linux server management. Versions 2.0.14 and below use Gin's default configuration which trusts all IP addresses as proxies TrustedProxies = 0.0.0.0/0, allowing any client to spoof the X-Forwarded-For header. Since all IP-based access controls...
CVE-2023-53794
creationtimestamp| type| source ---|---|--- 2025-12-09 00:41:24+00:00| seen| https://bsky.app/profile/potato.software/post/3m7jcpwzro42t 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-07 18:00:00+00:00| seen|...