CVE-2025-2529: Improper Handling of Syntactically Invalid Structure

Applications using affected versions of Ehcache 3.x can experience degraded cache-write performance if the application using Ehcache utilizes keys sourced from malicious external parties in an unfiltered/unsalted way...

The vulnerability of the Ivanti Endpoint Manager software management tool lies in the lack of security measures for the SQL query structure, allowing attackers to read arbitrary data.

The vulnerability of the Ivanti Endpoint Manager software management tool is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to read arbitrary data remotely...

The vulnerability of the Ivanti Endpoint Manager software management tool lies in the lack of security measures for the SQL query structure, allowing attackers to read arbitrary data.

The vulnerability of the Ivanti Endpoint Manager software management tool is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to read arbitrary data remotely...

The vulnerability of the eProcurement component of the SAP S/4HANA Finance software allows a attacker to execute XSS attacks.

The vulnerability of the eProcurement component of the SAP S/4HANA Finance financial management software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

The vulnerability of the Ivanti Endpoint Manager software management tool lies in the lack of security measures for the SQL query structure, allowing attackers to read arbitrary data.

The vulnerability of the Ivanti Endpoint Manager software management tool is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to read arbitrary data remotely...

The vulnerability of the Ivanti Endpoint Manager software management tool lies in the lack of security measures for the SQL query structure, allowing attackers to read arbitrary data.

The vulnerability of the Ivanti Endpoint Manager software management tool is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to read arbitrary data remotely...

Improper Handling of Syntactically Invalid Structure

Overview github.com/cometbft/cometbft/consensus is a Byzantine Fault Tolerant BFT middleware that takes a state transition machine - written in any programming language - and securely replicates it on many machines. Affected versions of this package are vulnerable to Improper Handling of...

ROS-20251014-05

A vulnerability in the interface of the Grafana monitoring and surveillance platform is related to the failure to take measures to protect the web page structure when processing the /swagger endpoint. web page structure when processing the /swagger endpoint. Exploitation of the vulnerability coul...

[SECURITY] Fedora 41 Update: valkey-8.0.6-1.fc41

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...

The vulnerability of Juniper Networks’ Junos Space network resource management platform, related to the lack of protection for the website structure, allows a hacker to execute arbitrary code with administrator privileges.

The vulnerability of the Juniper Networks Junos Space network resource management platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with administrator privileges...

The vulnerability of AndSoft e-TMS software management system for transportation transportations lies in the improper restriction of path names to the catalog, without taking measures to protect the website structure. This allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of AndSoft e-TMS software management system for transportation transport is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of AndSoft e-TMS software management system for transportation operations lies in the lack of protective measures for the SQL query structure, allowing attackers to gain access to create, update, and delete data in the database.

The vulnerability of the AndSoft e-TMS transportation management software lies in the lack of measures taken to protect the SQL query structure during the processing of the SessionID parameter. Exploiting this vulnerability allows an attacker to gain access to create, update, and delete databases...

The vulnerability of the Zimbra Collaboration Suite’s email management system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the Zimbra Collaboration Suite email management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of Websoft HCM’s automation software for HR processes allows attackers to carry out cross-site scripting attacks.

The vulnerability of Websoft HCM’s automation software for HR processes is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows attackers to perform cross-site scripting attacks remotely...

The vulnerability of Websoft HCM’s automation software for HR processes allows attackers to carry out cross-site scripting attacks.

The vulnerability of Websoft HCM’s automation software for HR processes is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows attackers to perform cross-site scripting attacks remotely...

The vulnerability of Websoft HCM’s automation software for HR processes allows attackers to carry out cross-site scripting attacks.

The vulnerability of Websoft HCM’s automation software for HR processes is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows attackers to perform cross-site scripting attacks remotely...

The vulnerability of Websoft HCM’s automation software for HR processes allows attackers to carry out cross-site scripting attacks.

The vulnerability of Websoft HCM’s automation software for HR processes is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows attackers to perform cross-site scripting attacks remotely...

The vulnerability of the Zimbra Collaboration Suite’s email management system, related to the lack of measures taken to protect the website structure, allows attackers to execute arbitrary code and gain unauthorized access to protected information.

The vulnerability of the Zimbra Collaboration Suite email management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and gain unauthorized access to protected information...

The vulnerability of AndSoft e-TMS software management system for transportation transportations lies in the improper restriction of path names to the catalog, without taking measures to protect the website structure. This allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of AndSoft e-TMS software management system for transportation transport is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of Websoft HCM’s automation software for HR processes allows attackers to carry out cross-site scripting attacks.

The vulnerability of Websoft HCM’s automation software for HR processes is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows attackers to perform cross-site scripting attacks remotely...