AZL-57049 CVE-2025-0624 affecting package grub2 for versions less than 2.06-24

A flaw was found in grub2. During the network boot process, when trying to search for the configuration file, grub copies data from a user controlled environment variable into an internal buffer using the grubstrcpy function. During this step, it fails to consider the environment variable length...

PT-2025-6552 · WordPress · Ltl Freight Quotes – Estes Edition

Name of the Vulnerable Software and Affected Versions: LTL Freight Quotes – Estes Edition plugin for WordPress versions up to, and including, 3.3.7 Description: The issue allows unauthenticated attackers to perform SQL Injection via the dropship edit id and edit id parameters due to insufficient...

WordPress LTL Freight Quotes – XPO Edition plugin <= 4.3.7 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Colin Xu in WordPress Plugin LTL Freight Quotes – XPO Edition versions = 4.3.7...

CVE-2023-44322

A vulnerability has been identified in RUGGEDCOM RM1224 LTE4G EU 6GK6108-4AM00-2BA2 All versions V8.0, RUGGEDCOM RM1224 LTE4G NAM 6GK6108-4AM00-2DA2 All versions V8.0, SCALANCE M804PB 6GK5804-0AP00-2AA2 All versions V8.0, SCALANCE M812-1 ADSL-Router 6GK5812-1AA00-2AA2 All versions V8.0, SCALANCE...

CVE-2023-44320

A vulnerability has been identified in RUGGEDCOM RM1224 LTE4G EU 6GK6108-4AM00-2BA2 All versions V7.2.2, RUGGEDCOM RM1224 LTE4G NAM 6GK6108-4AM00-2DA2 All versions V7.2.2, SCALANCE M804PB 6GK5804-0AP00-2AA2 All versions V7.2.2, SCALANCE M812-1 ADSL-Router 6GK5812-1AA00-2AA2 All versions V7.2.2,...

CVE-2024-50561

A vulnerability has been identified in RUGGEDCOM RM1224 LTE4G EU 6GK6108-4AM00-2BA2 All versions V8.2, RUGGEDCOM RM1224 LTE4G NAM 6GK6108-4AM00-2DA2 All versions V8.2, SCALANCE M804PB 6GK5804-0AP00-2AA2 All versions V8.2, SCALANCE M812-1 ADSL-Router 6GK5812-1AA00-2AA2 All versions V8.2, SCALANCE...

SolarWinds Kiwi Syslog Server NG 安全漏洞

SolarWinds Kiwi Syslog Server NG is an application from SolarWinds USA. A security vulnerability exists in SolarWinds Kiwi Syslog Server NG versions prior to 1.3.1, which stems from the fact that sensitive data may be exposed to unprivileged users in configuration files...

WordPress File Manager Plugin < 6.5 Information Disclosure Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:webdesi9:filemanager"; if description...

CVE-2024-43802 affecting package vim for versions less than 9.1.0697-1

CVE-2024-43802 affecting package vim for versions less than 9.1.0697-1. A patched version of the package is available...

CVE-2022-26647

A vulnerability has been identified in SCALANCE X200-4P IRT All versions V5.5.2, SCALANCE X201-3P IRT All versions V5.5.2, SCALANCE X201-3P IRT PRO All versions V5.5.2, SCALANCE X202-2IRT All versions V5.5.2, SCALANCE X202-2IRT All versions V5.5.2, SCALANCE X202-2P IRT All versions V5.5.2, SCALAN...

CVE-2024-23812

A vulnerability has been identified in SINEC NMS All versions V2.0 SP1. The affected application incorrectly neutralizes special elements when creating a report which could lead to command injection...

CVE-2024-31234

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sizam REHub Framework.This issue affects REHub Framework: from n/a before 19.6.2...

CVE-2025-1017

Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 13...

PT-2025-1668

Name of the Vulnerable Software and Affected Versions Authentik versions prior to 2024.10.4 Description The Authentik project is vulnerable to Stored XSS attacks through the upload of crafted SVG files that are used as application icons. This action could only be performed by an authenticated adm...

WordPress WP All Export Pro plugin < 1.9.2 - Unauthenticated Remote Code Execution via Custom Export Fields

Unauthenticated Remote Code Execution via Custom Export Fields vulnerability discovered by ? in WordPress Plugin WP ALL Export Pro versions 1.9.2...

PT-2025-5417 · Unknown · Landing Page Cat

Name of the Vulnerable Software and Affected Versions: Landing Page Cat versions 1.7.7 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting XSS. This means an attacker can inject malicious scripts...

CVE-2020-12762 affecting package json-c for versions less than 0.15-2

CVE-2020-12762 affecting package json-c for versions less than 0.15-2. A patched version of the package is available...

Ollama < 0.1.34 Multiples Vulnerabilities

According to the self-reported version in its response header, the version of Ollama hosted on the remote web server is 0.1.34. It is, therefore, affected by a Multiples vulnerabilities : - A Remote Code Execution through models pulling - An Improper Resource Shutdown or Release through the...

Ollama < 0.4.0 Remote Code Execution

According to the self-reported version in its response header, the version of Ollama hosted on the remote web server is 0.4.0. It is, therefore, affected by a Remote Code Execution. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reporte...

Fortinet FortiVoice Entreprise SQL注入漏洞

Fortinet FortiVoice Entreprise is a suite of enterprise unified communications solutions from Fortinet, Inc. A SQL injection vulnerability exists in Fortinet FortiVoice Entreprise versions 7.0.0 through 7.0.1 and prior to 6.4.8, which stems from improper neutralization of a special element and...