21658 matches found
CVE-2025-50255
Cross Site Request Forgery CSRF vulnerability in Smartvista BackOffice SmartVista Suite 2.2.22 via crafted GET request...
CVE-2025-50255
Cross Site Request Forgery CSRF vulnerability in Smartvista BackOffice SmartVista Suite 2.2.22 via crafted GET request...
BPC Banking SmartVista Suite 安全漏洞
BPC Banking SmartVista Suite is a payment software from BPC Banking, USA. A security vulnerability exists in BPC Banking SmartVista Suite version 2.2.22 that originates from a specially crafted GET request and could lead to a cross-site request forgery attack...
PT-2025-38415
Name of the Vulnerable Software and Affected Versions Smartvista BackOffice SmartVista Suite version 2.2.22 Description The software contains a Cross Site Request Forgery CSRF flaw. A crafted GET request can trigger the flaw. Recommendations Apply any available updates to address the issue in...
CVE-2025-50255
CVE-2025-50255 describes a Cross Site Request Forgery (CSRF) vulnerability in Smartvista BackOffice SmartVista Suite 2.2.22 exploitable via a crafted GET request. The CVSS v3.1 base score is 7.8 (HIGH), with local attack vector, no privileges required, user interaction required, and impacts to co...
CVE-2025-8057
CVE-2025-8057 concerns an authorization bypass in Patika Global Technologies’ HumanSuite. The issue arises from a user‑controlled key that enables an externally controlled reference to a resource in another sphere, leading to improper authorization. Affected product/version: HumanSuite prior to 5...
CVE-2025-8057 IDOR in Patika Global Technologies' HumanSuite
Authorization Bypass Through User-Controlled Key, Externally Controlled Reference to a Resource in Another Sphere, Improper Authorization vulnerability in Patika Global Technologies HumanSuite allows Exploiting Trust in Client. This issue affects HumanSuite: before 53.21.0...
PT-2025-38010
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel related to encryption within the CIFS implementation. Specifically, an oops condition can occur during encryption processes, potentially triggered whe...
PT-2025-37991
Name of the Vulnerable Software and Affected Versions Patika Global Technologies HumanSuite versions prior to 53.21.0 Description HumanSuite contains an authorization issue related to user-controlled keys, externally controlled references to resources, and improper authorization. This allows for...
Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses crypto/x509 which is vulnerable to this CVE-2025-22874
Summary Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses crypto/x509 which is vulnerable to this CVE-2025-22874 Vulnerability Details CVEID:CVE-2025-22874 DESCRIPTION: Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally...
gosec
This is a Go AST Abstract Syntax Tree scanner for identifying security vulnerabilities in Go code. The scanner is called "gosec" and is part of the GolangCI project. It can be installed using the command "go get github.com/golangci/gosec/cmd/gosec/...". The scanner can be configured to run a subs...
CVE-2025-9059 Elevation of Privileges Vulnerability in IT Management Suite
The Altiris Core Agent Updater package AeXNSC.exe is prone to an elevation of privileges vulnerability through DLL hijacking...
CVE-2025-9059 Elevation of Privileges Vulnerability in IT Management Suite
The Altiris Core Agent Updater package AeXNSC.exe is prone to an elevation of privileges vulnerability through DLL hijacking...
Microsoft Excel Information Disclosure Vulnerability (CNVD-2025-21393)
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. An information disclosure vulnerability exists in Microsoft Excel. An attacker could exploit this vulnerability to obtain sensitive information...
Broadcom Symantec IT Management Suite 安全漏洞
Broadcom Symantec IT Management Suite is a software from Broadcom Corporation USA that manages the configuration of repair applications and operating systems. A security vulnerability exists in Broadcom Symantec IT Management Suite that stems from vulnerability to DLL hijacking attacks that could...
Microsoft Excel Code Execution Vulnerability (CNVD-2025-21397)
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute arbitrary code on a system...
K7 Security Anti-Malware suite 安全漏洞
K7 Security Anti-Malware suite is a comprehensive security protection software from K7 Security India. A security vulnerability exists in K7 Security Anti-Malware suite version 23.0.0.10, which stems from insufficient caller authentication and could lead to a denial of service attack...
PT-2025-36460
CVE ID: CVE-2025-0003 Published: 2025-03-05T00:00:00.000Z Severity: HIGH 8.8/10 Description SQL injection vulnerability in the reporting module of Business Analytics Suite v4.5.0 allows authenticated users to execute arbitrary SQL commands. Root Cause Improper neutralization of special elements i...
Security Bulletin: There is a vulnerability in urllib3-2.4.0-py3-none-any.whl used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2025-50181,CVE-2025-50182)
Summary There is a vulnerability in urllib3-2.4.0-py3-none-any.whl used by IBM Maximo Manage application in IBM Maximo Application Suite. Vulnerability Details CVEID:CVE-2025-50181 DESCRIPTION: urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable...
