373 matches found
CVE-2025-20295
A vulnerability in the CLI of Cisco UCS Manager Software could allow an authenticated, local attacker with administrative privileges to read or create a file or overwrite any file on the file system of the underlying operating system of an affected device, including system files. This vulnerabili...
Cisco Nexus Dashboard 路径遍历漏洞
Cisco Nexus Dashboard is a single console from Cisco, Inc. It can simplify the operation and management of data center networks. A path traversal vulnerability exists in Cisco Nexus Dashboard, which stems from insufficient validation of backup file content and could lead to a path traversal attac...
ROS-20250821-08
A vulnerability in the TCPDF PHP library is related to reading arbitrary files from the server's file system via the src tag. Exploitation of the vulnerability could allow an attacker to gain access to sensitive information. information Vulnerability in TCPDF PHP library is related to improper...
CVE-2025-57791
CVE-2025-57791 is an argument-injection vulnerability in Commvault components, enabling remote injection/manipulation of command-line arguments due to insufficient input validation. Exploitation can yield a valid session for a low-privilege user, and is part of an exploit chain including CVE-2025...
Adobe Experience Manager 跨站脚本漏洞
Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...
PT-2025-33901 · Commvault · Commvault
Name of the Vulnerable Software and Affected Versions: Commvault versions prior to 11.36.60 Description: A security issue exists in Commvault that allows remote attackers to inject or manipulate command-line arguments passed to internal components due to insufficient input validation. Successful...
CVE-2025-8357
The CVE-2025-8357 entry concerns the WordPress plugin Media Library Assistant. It describes a vulnerability in versions up to 3.27 where insufficient file path validation and inadequate user-capability checks in the _process_mla_download_file function allow authenticated users with Author-level a...
CVE-2025-40758
CVE-2025-40758 concerns the Mendix SAML module. Affected: Mendix SAML (Mendix 10.12 compatible) < 4.0.3; Mendix SAML (Mendix 10.21 compatible) < 4.1.2; Mendix SAML (Mendix 9.24 compatible)
Tenda G1 数据伪造问题漏洞
Tenda G1 is an Enterprise Ap Management Router from Tenda China. A data forgery issue vulnerability exists in Tenda G1 version 16.01.7.83660, which stems from insufficient data authenticity validation of the function checkuploadfile in the firmware update processing component...
Cisco Secure Firewall Management Center 命令注入漏洞
Cisco Secure Firewall Management Center is a powerful network security management tool from Cisco. A command injection vulnerability exists in Cisco Secure Firewall Management Center that stems from insufficient validation of HTTP request parameters and could lead to the execution of arbitrary...
The vulnerability of the JSE component of Oracle Java SE software allows a perpetrator to gain unauthorized access to modify, delete, and read protected information.
The vulnerability of the JSE software platform from Oracle involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to modify, delete, and read protected information using the TLS protocol...
The vulnerability of Websoft HCM’s automation software for HR processes stems from insufficient validation of input data, allowing attackers to disclose protected information.
The vulnerability of Websoft HCM’s automation software for HR processes is related to insufficient verification of entered data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information...
The vulnerability of the OpenSynergy BlueSDK Bluetooth protocol stack allows a hacker to circumvent existing security restrictions and create a L2CAP channel.
The vulnerability of the OpenSynergy BlueSDK Bluetooth protocol lies in insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and create a L2CAP channel...
git: Git arbitrary file writes
A bundled uri handling flaw was found in Git. When cloning a repository, Git knows to optionally fetch a bundle advertised by the remote server, which allows the server side to offload parts of the clone to a CDN. The Git client does not perform sufficient validation of the advertised bundles,...
Eluktronics Control Center 数据伪造问题漏洞
Eluktronics Control Center is a control center software from Eluktronics Corporation. A data forgery issue vulnerability exists in Eluktronics Control Center version 5.23.51.41, which stems from insufficient validation of data authenticity in the REG File Handler component...
Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases, which allows attackers to gain full control over the application
Vulnerability of the Cluster component: General database management systems like MySQL Cluster are vulnerable due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain full control over the application...
DRUPAL-CONTRIB-2025-090
This module allows you to define custom attributes for a block. You can specify an attribute name to be added to the block in a predefined format. The module does not sufficiently validate the provided attributes, which makes it possible to insert JavaScript event attributes such as onmouseover,...
CVE-2025-34092
This CVE ID is rejected/not used and does not represent an active vulnerability entry.
The vulnerability of the `usb_get_bos_descriptor()` function in the drivers/usb/core/config.c file of the Linux kernel allows a hacker to gain access to confidential data.
The vulnerability of the usbgetbosdescriptor function in the drivers/usb/core/config.c file of the Linux kernel is related to insufficient input validation. Exploiting this vulnerability could allow an attacker to access confidential data...