2461 matches found
CVE-2021-31514
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2021-31484
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2019-2725
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services. Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2024-39774
A buffer overflow vulnerability exists in the adm.cgi setsysadm functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability...
CVE-2024-39288
A buffer overflow vulnerability exists in the internet.cgi setaddrouting functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability...
CVE-2013-7372
The engineNextBytes function in classlib/modules/security/src/main/java/common/org/apache/harmony/security/provider/crypto/SHA1PRNGSecureRandomImpl.java in the SecureRandom implementation in Apache Harmony through 6.0M3, as used in the Java Cryptography Architecture JCA in Android before 4.4 and...
CVE-2019-7909
A stored cross-site scripting vulnerability exists in the admin panel of Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by an authenticated user with...
From Rookie to Expert: Manipulating LLMs for Automated Vulnerability Exploitation in Enterprise Software
LLMs democratize software engineering by enabling non-programmers to create applications, but this same accessibility fundamentally undermines security assumptions that have guided software engineering for decades. We show in this work how publicly available LLMs can be socially engineered to...
PT-2025-53298
Name of the Vulnerable Software and Affected Versions affected versions not specified Description A successful exploitation could result in access to the device. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...
PT-2025-52402
Name of the Vulnerable Software and Affected Versions versions prior to 2025-52692 Description Exploitation of this issue could allow an attacker with local network access to access certain administration functions without login credentials by sending a specially crafted URL. Recommendations At t...
EUVD-2025-204052
Missing Authorization vulnerability in InstaWP InstaWP Connect instawp-connect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects InstaWP Connect: from n/a through = 0.1.1.9...
EUVD-2025-203904
Successful exploitation of these vulnerabilities could allow an attacker to modify firmware and gain full access to the device...
EUVD-2025-203896
Successful exploitation of this vulnerability could result in the product failing to re-establish communication once the certificate expires...
PT-2025-51838
Successful exploitation of these vulnerabilities could allow an attacker to modify firmware and gain full access to the device...
Adobe DNG Software Development Kit (SDK) Denial of Service Vulnerability
Adobe DNG Software Development Kit SDK is a software development kit from the American company Audobee Adobe. A denial of service vulnerability exists in Adobe DNG Software Development Kit SDK, which can be exploited by attackers to cause a denial of service...
The vulnerability in the acpi/pfr_update.c driver of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability in the acpi/pfrupdate.c driver of the Linux operating system is related to the comparison using incorrect factors. Exploiting this vulnerability allows an attacker to cause a service failure...
The vulnerability of the Linux operating system’s kernel, related to improper checking of the return value of a function, allows a hacker to trigger a service failure.
The vulnerability of the Linux operating system’s kernel is related to improper checking of the return value of a function. Exploiting this vulnerability allows an attacker to cause service failures...
CVE-2025-64597 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...
