2002 matches found
UBUNTU-CVE-2025-47910
When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended. CrossOriginProtection then skips validation, but forwards the original request path, which may be served by a different handler without the intended security protections...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an improperly protected access to exptasks by the rcuprinttaskexpstall function, which could result in a nul...
ROS-20250912-06
Vulnerability of pgdump utility of PostgreSQL database management system is related to failure to take measures to protect SQL query structure. protection of SQL query structure. Exploitation of the vulnerability could allow an attacker acting remotely, execute arbitrary code...
CVE-2025-8716
In Content Management versions 20.4- 25.3 authenticated attackers may exploit a complex cache poisoning technique to download unprotected files from the server if the filenames are known...
CVE-2025-8716
Mode C (normal): CVE-2025-8716 affects OpenText Content Management versions 20.4–25.3. The vulnerability involves a complex cache poisoning technique that, if filenames are known, allows authenticated attackers to download unprotected files from the server. According to the CVSS 4.0 metrics, the ...
CVE-2025-8716 Cache exploitation vulnerability
In Content Management versions 20.4- 25.3 authenticated attackers may exploit a complex cache poisoning technique to download unprotected files from the server if the filenames are known...
OpenText Content Management 代码问题漏洞
OpenText Content Management is an enterprise content management software from OpenText Canada. A code issue vulnerability exists in OpenText Content Management versions 20.4 through 25.3, which stems from a sophisticated cache poisoning technique that could lead to an authenticated attacker...
The vulnerability of the SuiteCRM software solution for managing customer relationships lies in its lack of measures to protect SQL query structures, allowing attackers to gain unauthorized access to protected information.
The vulnerability of the SuiteCRM software solution for managing customer relationships is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
CVE-2025-42929 Missing input validation vulnerability in SAP Landscape Transformation Replication Server
Due to missing input validation, an attacker with high privilege access to ABAP reports could delete the content of arbitrary database tables, if the tables are not protected by an authorization group. This leads to a high impact on integrity and availability of the database...
CVE-2025-42916 Missing input validation vulnerability in SAP S/4HANA (Private Cloud or On-Premise)
Due to missing input validation, an attacker with high privilege access to ABAP reports could delete the content of arbitrary database tables, if the tables are not protected by an authorization group. This leads to a high impact on integrity and availability of the database but no impact on...
The vulnerability of the pREST component of the PostgreSQL database management system allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the pREST component of the PostgreSQL database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the Microsoft SQL Server database management system lies in the lack of measures taken to protect SQL query structures, allowing attackers to increase their privileges.
The vulnerability of the Microsoft SQL Server database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor to gain elevated privileges...
The vulnerabilities in the software for developing and executing applications in the ABAP language of SAP NetWeaver Application Server ABAP (BIC Document) allow attackers to carry out cross-site scripting attacks and gain unauthorized access to protected information.
The vulnerability of the software used for developing and executing applications in the ABAP language of SAP NetWeaver Application Server ABAP BIC Document is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform...
The vulnerability of the PQescapeIdentifier() function in the PHP programming language allows a hacker to trigger a service failure.
The vulnerability of the PQescapeIdentifier function in the PHP programming language is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
CVE-2024-13807
The Xagio SEO plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.1.0.5 via the backup functionality due to weak filename structure and lack of protection in the directory. This makes it possible for unauthenticated attackers to extract...
CVE-2024-13807
CVE-2024-13807 affects Xagio SEO for WordPress up to version 7.1.0.5. Root cause: backup functionality creates unprotected backups due to weak filename structure and missing directory protections, enabling unauthenticated attackers to exfiltrate sensitive data (entire database and site files). Pu...
CVE-2024-13807 Xagio SEO <= 7.1.0.5 - Unauthenticated Sensitive Information Exposure via Unprotected Back-Up Files
The Xagio SEO plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.1.0.5 via the backup functionality due to weak filename structure and lack of protection in the directory. This makes it possible for unauthenticated attackers to extract...
The vulnerability of the Microsoft SQL Server database management system lies in the lack of measures taken to protect SQL query structures, allowing attackers to enhance their privileges.
The vulnerability of the Microsoft SQL Server database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...
CVE-2025-38587 ipv6: fix possible infinite loop in fib6_info_uses_dev()
In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible infinite loop in fib6infousesdev fib6infousesdev seems to rely on RCU without an explicit protection. Like the prior fix in rt6nlmsgsize, we need to make sure fib6delroute or fib6addrt2node have not removed the...
