2872 matches found
PT-2025-4894 · Unknown · Vimal Ghorecha Rss News Scroller
Name of the Vulnerable Software and Affected Versions: Vimal Ghorecha RSS News Scroller versions prior to 2.0.0 Description: The issue is related to a Cross-Site Request Forgery CSRF problem that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a we...
CVE-2024-57768
JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component validRoleKey?sysRole.key...
CVE-2025-22913
RE11S v1.11 was discovered to contain a stack overflow via the rootAPmac parameter in the formStaDrvSetup function...
PT-2025-1663 · Phoenix Contact · Charx Sec-3000 +3
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: An authenticated attacker can use this issue to perform a privilege escalation to gain root access. This allows the attacker to elevate their privileges...
Advisory ROSA-SA-2025-2565
software: mcpp 2.7.2 OS: ROSA-CHROME packageevrstring: mcpp-2.7.2-14 CVE-ID: CVE-2019-14274 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: Heap-based buffer overflow vulnerability in MCPP in domsg in support.c. CVE-STATUS: The vulnerability has been resolved CVE-REV: To close the vulnerability, run the...
CVE-2023-42241
An issue was discovered in Selesta Visual Access Manager VAM prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters of /vam/vamanagraphic.php...
PT-2025-3877 · Unknown · Liujianview Gymxmjpa
Name of the Vulnerable Software and Affected Versions: liujianview gymxmjpa version 1.0 Description: A critical vulnerability has been found in the function SubjectDaoImpl of the file src/main/java/com/liujian/gymxmjpa/controller/SubjectController.java. The manipulation of the argument subname...
Wireshark SEoL (1.10.x)
According to its version, Wireshark is 1.10.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C Tenable...
Mozilla Thunderbird SEoL (52.x)
According to its version, Mozilla Thunderbird version install on the remote host has reached end of support. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may...
Mozilla Thunderbird SEoL (10.x)
According to its version, Mozilla Thunderbird version install on the remote host has reached end of support. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may...
WinZip SEoL (24.0.x)
According to its version, WinZip is 24.0.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C Tenable,...
CVE-2024-13304
Cross-Site Request Forgery CSRF vulnerability in Drupal Minify JS allows Cross Site Request Forgery.This issue affects Minify JS: from 0.0.0 before 3.0.3...
CVE-2024-13300
Vulnerability in Drupal Print Anything.This issue affects Print Anything:...
CVE-2024-13293 POST File - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2024-059
Cross-Site Request Forgery CSRF vulnerability in Drupal POST File allows Cross Site Request Forgery.This issue affects POST File: from 0.0.0 before 1.0.2...
SUSE-SU-2025:0049-1 Security update for python310
This update for python310 fixes the following issues: - Update to 3.10.16...
CVE-2024-13041
Removed by vendor...
PT-2025-3836 · Unknown · Campcodes Computer Laboratory Management System
Name of the Vulnerable Software and Affected Versions: CampCodes Computer Laboratory Management System version 1.0 Description: A critical issue has been found in the system, affecting some unknown functionality of the file /class/edit/edit. The manipulation of the e photo argument leads to...
CVE-2025-0241 Memory corruption when using JavaScript Text Segmentation
When segmenting specially crafted text, segmentation would corrupt memory leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 134, Firefox ESR 128.6, Thunderbird 134, and Thunderbird 128.6...
CVE-2025-21622
CVE-2025-21622 affects ClipBucket V5. The issue arises in the avatar deletion workflow where avatar_url is treated as a file path within the avatars directory without validating path traversal sequences. The final $file variable can be tainted by traversal inputs stored in the DB, enabling deleti...