25005 matches found
PT-2026-2043
Name of the Vulnerable Software and Affected Versions A-Plus Video Technologies NVR models affected versions not specified Description A security issue exists in certain NVR models developed by A-Plus Video Technologies that allows unauthenticated remote attackers to access the debug page...
A-Plus Video多款产品 安全漏洞
The A-Plus Video AP-RM864P, among others, is a network video recorder from A-Plus Video of Taiwan, China. A security vulnerability exists in a number of A-Plus Video products. The vulnerability stems from sensitive data leakage and could allow an unauthenticated, remote attacker to access debug...
CVE-2026-0841
creationtimestamp| type| source ---|---|--- 2026-01-10 17:07:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115871898236647364 2026-01-11 09:00:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mc55yjwiil2u 2026-01-11 09:00:31+00:00| seen|...
CGA-WFGX-X98F-7JMQ
Bulletin has no description...
GHSA-W3G8-FP6J-WVQW
creationtimestamp| type| source ---|---|--- 2026-01-10 07:01:39+00:00| seen| Telegram/i2g9ck4oFpG2FQ6NO-wq7UgJ3FLiFKBZXo4--EYsPHmrFO0 2026-01-24 21:26:26+00:00| seen| https://gist.github.com/alon710/878cd9236baa69530b4f35d4110af1c3 2026-01-24 22:41:48+00:00| seen|...
GHSA-2G22-WG49-FGV5
creationtimestamp| type| source ---|---|--- 2026-01-10 05:02:58+00:00| published-proof-of-concept| Telegram/UDMk206lgQvLt4zm60yBzpmxh6GeqSRvdRaLpn90JAOiIEo 2026-01-24 21:26:05+00:00| seen| https://gist.github.com/alon710/e76d8e58dcc89b6a3002c30580fbeb4c 2026-01-24 22:41:27+00:00| seen|...
CryptoLib 安全漏洞
CryptoLib is a NASA open source application. It is used to provide a software-only solution using the CCSDS space data link security protocol. A security vulnerability exists in CryptoLib versions prior to 1.4.3 that stems from a failure to free an allocated buffer when the KMC server returns a...
GHSA-88Q6-JCJG-HVMW
creationtimestamp| type| source ---|---|--- 2026-01-09 19:48:39+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115866869324784128 2026-01-24 21:26:08+00:00| seen| https://gist.github.com/alon710/7d72130b31a9e6a47f1517e8d0e061e1 2026-01-24 22:41:31+00:00| seen|...
CVE-2025-69542
creationtimestamp| type| source ---|---|--- 2026-01-09 17:43:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115866375540072178 2026-01-09 18:44:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbz5pebl222o 2026-01-09 22:15:47+00:00| published-proof-of-concept|...
CVE-2025-70161
creationtimestamp| type| source ---|---|--- 2026-01-09 16:52:53+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115866178180399766 2026-01-09 18:47:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbz5tto4j62m 2026-01-12 18:01:14+00:00| seen|...
CVE-2025-13717
creationtimestamp| type| source ---|---|--- 2026-01-09 13:26:56+00:00| seen| https://gist.github.com/Darkcrai86/1d69ce62eb6a596f6b8c86840faa80a0 2026-01-09 15:24:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbysk5s5ma2e...
CVE-2023-49410
Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function via the function setwanstatus...
CVE-2023-31851
Cudy LT400 1.13.4 is has a cross-site scripting XSS vulnerability in /cgi-bin/luci/admin/network/wireless/status via the iface parameter...
CVE-2023-31114
An issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300. Incorrect resource transfer between spheres can cause unintended querying of the SIM status via a crafted application...
CVE-2021-28703
grant table v2 status pages may remain accessible after de-allocation take two Guest get permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated / associated with a guest for its entire lifetime. Grant table v2 status pages, however, get de-allocated whe...
CVE-2022-23232
StorageGRID formerly StorageGRID Webscale versions prior to 11.6.0 are susceptible to a vulnerability which when successfully exploited could allow disabled, expired, or locked external user accounts to access S3 data to which they previously had access. StorageGRID 11.6.0 obtains the user accoun...
CVE-2022-42990
Food Ordering Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /foms/all-orders.php?status=Cancelled%20by%20Customer...
CVE-2022-31021
Ursa is a cryptographic library for use with blockchains. A weakness in the Hyperledger AnonCreds specification that is not mitigated in the Ursa and AnonCreds implementations is that the Issuer does not publish a key correctness proof demonstrating that a generated private key is sufficient to...
CVE-2022-0421
The Five Star Restaurant Reservations WordPress plugin before 2.4.12 does not have authorisation when changing whether a payment was successful or failed, allowing unauthenticated users to change the payment status of arbitrary bookings. Furthermore, due to the lack of sanitisation and escaping,...