EUVD-2026-34977

clash-verge-service-ipc before 2.3.0 has a world-reachable IPC endpoint, leading to local privilege escalation...

CVE-2019-9087

HotelDruid before v2.3.1 has SQL Injection via the /tabtariffe.php numtariffa1 parameter...

CVE-2025-1756 MongoDB Shell may be susceptible to local privilege escalation in Windows

mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privilege, when a crafted file is stored in C:\nodemodules. This issue affects mongosh prior to 2.3.0...

PT-2024-18267 · Oracle · Sqlplus

Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 2.3.0b4 beta, 2.2.0p24, 2.1.0p41 and 2.0.0 EOL Description: The invocation of the sqlplus command with sensitive information in the command line in the mk oracle Checkmk agent plugin allows the extraction of this...

UBUNTU-CVE-2023-4758

Buffer Over-read in GitHub repository gpac/gpac prior to 2.3-DEV...

GPAC security vulnerabilities

GPAC is an open source multimedia framework. A security vulnerability exists in versions prior to GPAC 2.3.0-DEV that stems from the presence of a heap-based buffer overflow...

Cisco Meeting Server Denial of Service Vulnerability (CNVD-2019-16513)

Cisco Meeting Server formerly known as Acano Conferencing Server, CMS is the United States Cisco Cisco company's set of audio and video conferencing server software. A denial of service vulnerability exists in Session Initiation Protocol SIP call processing in Cisco Meeting Server CMS versions...