22808 matches found
OFFIS DCMTK 代码问题漏洞
OFFIS DCMTK is a collection of libraries and applications that implement most of the DICOM standards from OFFIS Germany. Software for inspecting, building and converting DICOM image files, processing offline media, sending and receiving images over a network connection, and demonstrating image...
PT-2025-52275
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in AmentoTech Tuturn allows Path Traversal.This issue affects Tuturn: from n/a before 3.6...
PT-2025-52201
Insertion of Sensitive Information Into Sent Data vulnerability in UserElements Ultimate Member Widgets for Elementor ultimate-member-widgets-for-elementor allows Retrieve Embedded Sensitive Data.This issue affects Ultimate Member Widgets for Elementor: from n/a through = 2.3...
PT-2025-52001
Name of the Vulnerable Software and Affected Versions The African Boss Get Cash versions through 3.2.3 Description An authorization issue exists in The African Boss Get Cash’s get-cash functionality. This allows exploitation due to incorrectly configured access control security levels...
Fedora 43 : python-django5 (2025-24dfd3b072)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-24dfd3b072 advisory. - Fixes CVE-2025-13372: Potential SQL injection in FilteredRelation column aliases on PostgreSQL - Fixes CVE-2025-64460: Potential denial-of-service...
Fedora 43 : NetworkManager (2025-ceeda3c40d)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-ceeda3c40d advisory. Update to 1.54.3 Partially fixes CVE-2025-9615. To protect totally from it, see:...
Fedora: Security Advisory (FEDORA-2025-d9707059b7)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
WordPress plugin Tuturn 路径遍历漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A path travers...
PT-2025-52277
Improper authentication vulnerability in TP-Link WA850RE httpd modules allows unauthenticated attackers to download the configuration file.This issue affects: ≤ WA850RE V2 160527, ≤ WA850RE V3 160922...
PT-2025-52276
Command Injection vulnerability in TP-Link WA850RE httpd modules allows authenticated adjacent attacker to inject arbitrary commands.This issue affects: ≤ WA850RE V2 160527, ≤ WA850RE V3 160922...
Mozilla Firefox < 3.6
The version of Firefox installed on the remote macOS or Mac OS X host is prior to 3.6. It is, therefore, affected by a vulnerability as referenced in the mfsa2010-05 advisory. - Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the...
CVE-2025-68434
CVE-2025-68434 affects OpenSourcePOS 3.4.0–3.4.1, where CSRF protection was explicitly disabled in the global filters, allowing a logged-in administrator’s browser to be coerced into making state-changing POST requests and silently create a new Administrator account. The issue is fixed in 3.4.2 b...
CVE-2025-68147 opensourcepos has a Cross-site Scripting vulnerability
Open Source Point of Sale opensourcepos is a web based point of sale application written in PHP using CodeIgniter framework. Starting in version 3.4.0 and prior to version 3.4.2, a Stored Cross-Site Scripting XSS vulnerability exists in the "Return Policy" configuration field. The application doe...
CVE-2022-50253
creationtimestamp| type| source ---|---|--- 2025-12-17 21:54:17+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3ma7nldnfv22w 2025-12-18 10:50:03+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3maaywhs5qs2t 2025-12-23 14:57:28+00:00| seen|...
EUVD-2025-204001
ChurchCRM is an open-source church management system. A SQL Injection vulnerability exists in the legacy endpoint /Reports/ConfirmReportEmail.php in ChurchCRM prior to version 6.5.3. Although the feature was removed from the UI, the file remains deployed and reachable directly via URL. This is a...
EUVD-2025-203988
ChurchCRM is an open-source church management system. In versions prior to 6.5.3, a SQL injection vulnerability exists in the eGive.php file within the "ReImport" functionality. An authenticated user with finance privileges can execute arbitrary SQL queries by manipulating the MissingEgiveFamID...
EUVD-2025-203989
ChurchCRM is an open-source church management system. Versions prior to 6.5.3 may disclose database information in an error message including the host, ip, username, and password. Version 6.5.3 fixes the issue...
CVE-2025-68110 ChurchCRM discloses database information on error message
ChurchCRM is an open-source church management system. Versions prior to 6.5.3 may disclose database information in an error message including the host, ip, username, and password. Version 6.5.3 fixes the issue...
CVE-2025-68110
ChurchCRM has an information-disclosure vulnerability: versions prior to 6.5.3 may reveal database credentials (host, IP, username, password) in an error message. The issue is fixed in version 6.5.3. No exploit details are provided in the connected documents; impact is information disclosure. Aff...