4145 matches found
CVE-2025-54877
Tuleap CVE-2025-54877 affects Community Edition <16.10.99.1754050155 and Enterprise Edition <16.9-8 and
PT-2025-35223
Name of the Vulnerable Software and Affected Versions: Tuleap Community Edition versions prior to 16.10.99.1754050155 Tuleap Enterprise Edition versions prior to 16.9-8 Tuleap Enterprise Edition versions prior to 16.10-5 Description: Tuleap is an Open Source Suite created to facilitate management...
The vulnerability in the web interface for controlling Cisco IOS XE operating systems allows attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of the Cisco IOS XE operating system’s web management interface relates to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality and integrity...
Linux Distros Unpatched Vulnerability : CVE-2023-0302
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Failure to Sanitize Special Elements into a Different Plane Special Element Injection in GitHub repository radareorg/radare2 prior to 5.8.2. CVE-2023-0302 Note...
CVE-2025-4650
Centreon Web SQL Injection (CVE-2025-4650) affects Centreon Web via the Meta Service indicator page. The root cause is improper neutralization of special elements in an SQL command, enabling a high-privilege attacker to perform a SQLi without user interaction. Affected versions include web 23.10....
Security Bulletin: Vulnerability in moment.js affects IBM Integrated Analytics System [CVE-2022-31129]
Summary The moment.js package is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addresed the applicable CVE CVE-2022-31129. Vulnerability Details CVEID:CVE-2022-31129 DESCRIPTION: moment is a JavaScript date library for parsing, validating, manipulating, and formatti...
ROS-20250821-03
EMACS text editor vulnerability exists due to failure to take measures to neutralize special elements. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary commands...
PT-2025-34022
Name of the Vulnerable Software and Affected Versions: JS Archive List affected versions not specified Description: The software contains an Improper Neutralization of Special Elements used in an SQL Command vulnerability, which allows for SQL Injection. Recommendations: At the moment, there is n...
CVE-2024-45062
The CVE-2024-45062 issue affects OpenPrinting ippusbxd 1.34. A stack-based buffer overflow arises in ippusbxd when parsing the media-size-supported attribute during IPP-over-USB setup, potentially allowing arbitrary code execution in a privileged ippusbxd process after a malicious USB device is c...
Wazuh for Regulatory Compliance
Organizations handling various forms of sensitive data or personally identifiable information PII require adherence to regulatory compliance standards and frameworks. These compliance standards also apply to organizations operating in regulated sectors such as healthcare, finance, government...
CVE-2025-49059
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CleverReach® CleverReach® WP cleverreach-wp allows SQL Injection.This issue affects CleverReach® WP: from n/a through = 1.5.20...
CVE-2025-39510
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ValvePress Pinterest Automatic Pin wp-pinterest-automatic allows SQL Injection.This issue affects Pinterest Automatic Pin: from n/a through 4.19.0...
MAL-2025-27349 Malicious code in new-al-bum-av-ailable-532141-nothing-special-3hobm-scpavd (npm)
The package new-al-bum-av-ailable-532141-nothing-special-3hobm-scpavd was found to contain malicious code...
Malicious code in @hishprorg/special-system (npm)
The package @hishprorg/special-system was found to contain malicious code...
Malicious code in @lbnqduy/special-barnacle (npm)
The package @lbnqduy/special-barnacle was found to contain malicious code...
MAL-2025-8349 Malicious code in @lbnqduy/special-barnacle (npm)
The package @lbnqduy/special-barnacle was found to contain malicious code...
MAL-2025-8059 Malicious code in @hishprorg/special-system (npm)
The package @hishprorg/special-system was found to contain malicious code...
CVE-2025-49758
Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...
