25066 matches found
CVE-2012-6705
Cross Site Scripting XSS exists in Jamroom before 4.2.7 via the Status Update field...
CVE-2019-6794
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Information Disclosure issue 5 of 6. A project guest user can view the last commit status of the default branch...
CVE-2012-6461
The X.509 certificate-validation functionality in the https implementation in Opera before 12.10 allows remote attackers to trigger a false indication of successful revocation-status checking by causing a failure of a single checking service...
CVE-2018-20333
An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can request /updateapplist.asp to see if a USB device is attached to the router and if there are apps installed on the router...
CVE-2013-5187
The Screen Lock implementation in Apple Mac OS X before 10.9 does not immediately accept Keychain Status menu Lock Screen commands, and instead incorrectly relies on a certain timeout setting, which allows physically proximate attackers to obtain sensitive information by reading a screen that...
CVE-2011-3819
WoW Server Status 4.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by status.php and certain other files...
CVE-2010-3903
Unspecified vulnerability in OpenConnect before 2.23 allows remote AnyConnect SSL VPN servers to cause a denial of service application crash via a 404 HTTP status code...
ABB Cylon Aspect 3.08.03 (logYumLookup.php) Hybrid Path Traversal
Summary ASPECT is an award-winning scalable building energy management and control solution designed to allow users seamless access to their building data through standard building protocols including smart devices. Description The ABB Cylon Aspect BAS controller is vulnerable to an authenticated...
ABB Cylon Aspect Studio 3.08.03 Insecure Permissions
Summary ABB Cylon ASPECT Studio is a graphical programming tool and integrated development environment IDE for ABB Cylon ASPECT products. It's used to engineer comprehensive area control and graphical user interface GUI solutions, containing a library of logical and graphical widgets. It allows...
CVE-2025-47947
creationtimestamp| type| source ---|---|--- 2025-05-21 22:41:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17210 2025-05-21 23:26:56+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114548409339459848 2025-05-22 01:21:11+00:00| seen|...
CVE-2025-34025
creationtimestamp| type| source ---|---|--- 2025-05-21 22:41:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17208 2025-05-21 23:25:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114548404428327018 2025-05-22 01:24:12+00:00| seen|...
CVE-2004-2710
Multiple buffer overflows in Gyach Enhanced Gyach-E before 1.0.3 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to 1 sending certain typing statuses or 2 setting the chat room status bar to the current chat room name...
CVE-2022-49111
creationtimestamp| type| source ---|---|--- 2025-05-21 18:53:33+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lppbklk2i22g...
DRUPAL-CONTRIB-2025-067
This module enables you to pay for Commerce order to an environment provided and secured by the bank The module doesn't sufficiently verify the payment status on canceled orders. An attacker can issue a specially crafted request to update the order status to completed...
DRUPAL-CONTRIB-2025-066
This module enables you to pay for Commerce order to an environment provided and secured by the bank The module doesn't sufficiently verify the payment status on canceled orders. An attacker can issue a specially crafted request to update the order status to completed...
CVE-2025-47277
A flaw was found in vLLM. This vulnerability allows unauthorized access to key-value caches via network exposure of the TCPStore interface when using the PyNcclPipe KV cache transfer integration with the V0 engine. Mitigation No mitigation is currently available that meets Red Hat Product...
SUSE CVE-2025-37991
In the Linux kernel, the following vulnerability has been resolved: parisc: Fix double SIGFPE crash Camm noticed that on parisc a SIGFPE exception will crash an application with a second SIGFPE in the signal handler. Dave analyzed it, and it happens because glibc uses a double-word floating-point...
Commerce Alphabank Redirect - Moderately critical - Access bypass - SA-CONTRIB-2025-067
This module enables you to pay for Commerce order to an environment provided and secured by the bank The module doesn't sufficiently verify the payment status on canceled orders. An attacker can issue a specially crafted request to update the order status to completed...
Commerce Eurobank (Redirect) - Moderately critical - Access bypass - SA-CONTRIB-2025-066
This module enables you to pay for Commerce order to an environment provided and secured by the bank The module doesn't sufficiently verify the payment status on canceled orders. An attacker can issue a specially crafted request to update the order status to completed...