13241 matches found
CVE-2025-52991
The Nix, Lix, and Guix package managers default to using temporary build directories in a world-readable and world-writable location. This allows standard users to deceive the package manager into using directories with pre-existing content, potentially leading to unauthorized actions or data...
PT-2025-27043
Name of the Vulnerable Software and Affected Versions: HDF5 version 1.14.6 Description: A heap-based buffer overflow issue has been found in the function H5O mtime new encode of the file src/H5Omtime.c. The manipulation leads to this issue, and attacking locally is a requirement. The exploit has...
Nix、lix和GNU Guix 安全漏洞
GNU Guix is a product of the U.S. et all is a product of the U.S. GNU community. gnu guix is an open source, cross-platform program package manager. lix et all is a product of the lix open source. lix is a package manager. nix et all is a product of the nix open source. nix is a powerful package...
PT-2025-27165 · Wow Company · Hover Effects
Name of the Vulnerable Software and Affected Versions: Wow-Company Hover Effects versions n/a through 2.1.2 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...
PT-2025-27147 · Unknown · Sfturing Hosp Order
Name of the Vulnerable Software and Affected Versions: sfturing hosp order versions up to 627f426331da8086ce8fff2017d65b1ddef384f8 Description: A critical issue was found in the getOfficeName function of the OfficeServiceImpl.java file, which is vulnerable to SQL injection through the manipulatio...
PT-2025-27145 · Hikvision · Hikvision Ds-2Cd1321-I
Name of the Vulnerable Software and Affected Versions: Hikvision DS-2CD1321-I version 5.7.21 build 230819 Description: The issue allows attackers to cause a Denial of Service DoS via sending a crafted POST request to the endpoint "/ISAPI/Security/challenge". Recommendations: For Hikvision...
PT-2025-27063 · WordPress · A/B Testing For Wordpress
Name of the Vulnerable Software and Affected Versions: A/B Testing for WordPress plugin versions up to and including 1.18.2 Description: The issue is related to stored cross-site scripting due to insufficient input sanitization and output escaping on the id parameter in the...
CVE-2015-0849
pycode-browser before version 1.0 is prone to a predictable temporary file vulnerability...
CVE-2015-0849
pycode-browser before version 1.0 is prone to a predictable temporary file vulnerability...
DEBIAN-CVE-2015-0849
pycode-browser before version 1.0 is prone to a predictable temporary file vulnerability...
CVE-2015-0849
pycode-browser before version 1.0 is prone to a predictable temporary file vulnerability...
UBUNTU-CVE-2015-0849
pycode-browser before version 1.0 is prone to a predictable temporary file vulnerability...
CVE-2015-0849
pycode-browser before version 1.0 is prone to a predictable temporary file vulnerability...
CVE-2015-0849
pycode-browser before version 1.0 is prone to a predictable temporary file vulnerability...
PT-2025-26975 · Unknown · Netbox Community
Name of the Vulnerable Software and Affected Versions: Netbox Community versions 4.1.7 through 4.2.1 Description: The issue is related to Cross Site Scripting XSS via the RSS feed widget. This allows for potential malicious script execution. Recommendations: For Netbox Community version 4.1.7,...
pycode‑browser 安全漏洞
pycode-browser is a Python learning tool from pycode-browser open source. A security vulnerability exists in pycode-browser versions prior to 1.0 that stems from temporary files being predictable...
PT-2025-27005
Name of the Vulnerable Software and Affected Versions: Himmelblau versions 0.9.10 through 0.9.16 Description: A vulnerability in Himmelblau allows a user to authenticate to a Linux host using an invalid Linux Hello PIN when the host is offline. This issue arises from an incorrect assumption in th...
PT-2025-26981 · Unknown · Labredescefetrj Wegia
Name of the Vulnerable Software and Affected Versions: LabRedesCefetRJ WeGIA version 3.4.0 Description: A vulnerability was found in the Cadastro de Atendio component, specifically in the file /html/atendido/Cadastro Atendido.php. The manipulation of the Nome/Sobrenome argument leads to cross-sit...
PT-2025-28076 · Belkin · Belkin F9K1122
Name of the Vulnerable Software and Affected Versions: Belkin F9K1122 version 1.00.33 Description: A critical issue was found, affecting the function formBSSetSitesurvey of the file /goform/formBSSetSitesurvey in the component webs. The manipulation of the arguments wan ipaddr, wan netmask, wan...
PT-2025-28087 · Belkin · Belkin F9K1122
Name of the Vulnerable Software and Affected Versions: Belkin F9K1122 version 1.00.33 Description: A critical vulnerability has been found, affecting the function formSetLanguage of the file /goform/formSetLanguage in the component webs. The manipulation of the argument webpage leads to a...