6389 matches found
PT-2025-36330
Name of the Vulnerable Software and Affected Versions: MongoDB Server versions prior to 6.0.25 MongoDB Server versions prior to 7.0.22 MongoDB Server versions prior to 8.0.12 Description: MongoDB Server may allow upsert operations retried within a transaction to violate unique index constraints,...
Potential iSCSI R2T PDU Vulnerability
...
firmware: cs_dsp: Fix OOB memory read access in KUnit test (wmfw info)
...
nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
...
drm/amd/display: Wrap dcn301_calculate_wm_and_dlg for FPU.
...
iommu/vt-d: Use device rbtree in iopf reporting path
...
iommu: Clear iommu-dma ops on cleanup
...
drm/amd/display: Wake DMCUB before executing GPINT commands
...
drm/amdgpu/pm: fix the null pointer while the smu is disabled
...
CVE-2025-9791
A weakness has been identified in Tenda AC20 16.03.08.05. This vulnerability affects unknown code of the file /goform/fromAdvSetMacMtuWan. This manipulation of the argument wanMTU causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been made availabl...
CVE-2025-9717
CVE-2025-9717 affects O2OA up to version 10.0-410, specifically the Personal Profile Page component. The vulnerability stems from cross-site scripting in the file path /x_organization_assemble_control/jaxrs/unit/, where manipulation of arguments such as name, shortName, distinguishedName, pinyin,...
CVE-2025-9717 O2OA Personal Profile unit cross site scripting
A vulnerability was identified in O2OA up to 10.0-410. Affected by this issue is some unknown functionality of the file /xorganizationassemblecontrol/jaxrs/unit/ of the component Personal Profile Page. Such manipulation of the argument name/shortName/distinguishedName/pinyin/pinyinInitial/levelNa...
CVE-2025-9593
A flaw has been found in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /report/unitstatusinfo.php. Executing manipulation of the argument usid can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...
Apartment Management System unit_status_info.php File SQL Injection Vulnerability
Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter usid in the file /report/unitstatusinfo.php. An attacker can exploit...
O2OA 安全漏洞
O2OA is an enterprise application development platform from O2OA open source. A security vulnerability exists in O2OA 10.0-410 and earlier versions, which originates from a cross-site scripting error in the parameter name/shortName/distinguishedName/pinyin/ in the file...
CVE-2025-25735
Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units RSUs v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were discovered to lack SPI Protected Range Registers PRRs, allowing attackers with software running on the system to modify SPI flash in real-time...
CVE-2025-50974
The Calamaris log exporter CGI /cgi-bin/logs.cgi/calamaris.dat in IPFire 2.29 does not properly sanitize user-supplied input before incorporating parameter values into a shell command. An unauthenticated remote attacker can inject arbitrary OS commands by embedding shell metacharacters in any of...
CVE-2025-9593 itsourcecode Apartment Management System unit_status_info.php sql injection
A flaw has been found in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /report/unitstatusinfo.php. Executing manipulation of the argument usid can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...
CVE-2025-9593
Affected software: itsourcecode Apartment Management System 1.0. The vulnerability is an SQL injection in the /report/unit_status_info.php file caused by unsafely handling the usid parameter. This allows remote exploitation and an exploit has been published. Connected advisories confirm the issue...
itsourcecode Apartment Management System 安全漏洞
Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter usid in the file /report/unitstatusinfo.php. An attacker can exploit...