17029 matches found
PT-2025-28181 · Mediawiki · Mediawiki Quiz Extension
Name of the Vulnerable Software and Affected Versions: Mediawiki - Quiz Extension versions 1.39.X through 1.39.12 Mediawiki - Quiz Extension versions 1.42.X through 1.42.6 Mediawiki - Quiz Extension versions 1.43.X through 1.43.1 Description: The issue is related to Improper Neutralization of Inp...
CVE-2024-25177
LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IRFSTORE for NULL metatable, which leads to Denial of Service DoS...
PT-2025-28147 · Unknown · Gavias Halpes
Name of the Vulnerable Software and Affected Versions: Gavias Halpes versions prior to 1.2.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...
PT-2025-28219 · Wegia · Wegia
Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.4.3 Description: A critical issue was identified in WeGIA, a web manager for charitable institutions. The /html/funcionario/profile funcionario.php endpoint is vulnerable due to the id funcionario parameter not being...
CVE-2025-47479
Weak Authentication vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Authentication Abuse.This issue affects WP Compress: from n/a through = 6.30.30...
OSV-2025-525 UNKNOWN READ in std::__1::__function::__func<cv::PngDecoder::compose_frame
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=429429085 Crash type: UNKNOWN READ Crash state: std::1::function::funccv::PngDecoder::composeframe cv::ParallelLoopBodyWrapper::operator cv::ThreadPool::run...
BELL-CVE-2025-38177
Bulletin has no description...
BELL-CVE-2025-38201
Bulletin has no description...
BELL-CVE-2025-38191
Bulletin has no description...
BELL-CVE-2025-38204
Bulletin has no description...
BELL-CVE-2025-38192
Bulletin has no description...
BELL-CVE-2025-38180
Bulletin has no description...
Rust Web Push is vulnerable to a DoS attack via a large integer in a Content-Length header
The web-push crate before 0.10.4 for Rust allows a denial of service memory consumption in the built-in clients via a large integer in a Content-Length header. The patch was initially made available in version 0.10.3, but version 0.10.3 has since been yanked...
PT-2025-28033
Name of the Vulnerable Software and Affected Versions: Dradis versions through 4.16.0 Description: Dradis allows referencing external images over HTTPS instead of requiring the use of embedded images. This can be exploited by an authorized author to attempt to steal the Net-NTLM hashes of other...
CVE-2025-53603
In Alinto SOPE SOGo 2.0.2 through 5.12.2, sope-core/NGExtensions/NGHashMap.m allows a NULL pointer dereference and SOGo crash via a request in which a parameter in the query string is a duplicate of a parameter in the POST body...
BELL-CVE-2025-38160
Bulletin has no description...
BELL-CVE-2025-38107
Bulletin has no description...
BELL-CVE-2025-38129
Bulletin has no description...