1689 matches found
CVE-2025-54635
Vulnerability of returning released pointers in the distributed notification service. Impact: Successful exploitation of this vulnerability may affect availability...
PT-2025-31612 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The vulnerability was rejected due to it not being used. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...
CVE-2025-46732
OpenCTI prior to 6.6.6 is affected by an IDOR in GraphQL mutations NotificationLineNotificationMarkReadMutation and NotificationLineNotificationDeleteMutation. An authenticated user can read, modify, or delete another user’s notifications if they know the notification UUID; changing read status m...
CVE-2025-46732 OpenCTI's GraphQL IDOR enables authenticated users to modify or delete notifications of other users
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.6.6, an IDOR vulnerability in the GrapQL NotificationLineNotificationMarkReadMutation and NotificationLineNotificationDeleteMutation mutations of OpenCTI allows an authenticated...
CVE-2025-7574
A vulnerability, which was classified as critical, was found in LB-LINK BL-AC1900, BL-AC2100AZ3, BL-AC3600, BL-AX1800, BL-AX5400P and BL-WR9000 up to 20250702. Affected is the function reboot/restore of the file /cgi-bin/lighttpd.cgi of the component Web Interface. The manipulation leads to...
GHSA-3X8X-79M2-3W2W
creationtimestamp| type| source ---|---|--- 2025-07-16 04:34:54+00:00| seen| https://gist.github.com/safer-bot/65364abe7e289d78f57fa1a0a681a35a 2025-07-16 07:18:43+00:00| seen| https://gist.github.com/safer-bot/5e13e76a11d80f2378b1b43029c98dfc 2025-07-16 08:32:34+00:00| seen|...
BELL-CVE-2025-38275
Bulletin has no description...
PT-2025-29088 · Undefined · Undefined
CVE-2025-53747 Rejected reason https://t.co/df3bzZmSsr Vulnerability Notification: https://t.co/xhLrNnfyrO...
PT-2025-28424 · Undefined · Undefined
CVE-2025-53615 Rejected reason https://t.co/8Lmn9NEBkt Vulnerability Notification: https://t.co/xhLrNnfyrO...
BELL-CVE-2025-38125
Bulletin has no description...
BELL-CVE-2025-38146
Bulletin has no description...
BELL-CVE-2025-38023
Bulletin has no description...
Vulnerability Disclosure or Notification? Best Practices for Reaching Stakeholders at Scale
Security researchers are interested in security vulnerabilities, but these security vulnerabilities create risks for stakeholders. Coordinated Vulnerability Disclosure has been an accepted best practice for many years in disclosing newly discovered vulnerabilities. This practice has mostly worked...
CVE-2025-49583
XWiki is a generic wiki platform. When a user without script right creates a document with an XWiki.Notifications.Code.NotificationEmailRendererClass object, and later an admin edits and saves that document, the email templates in this object will be used for notifications. No malicious code can ...
PT-2025-24350 · Undefined · Undefined
CVE-2025-5223 Rejected reason https://t.co/hNak88ikhK Vulnerability Notification: https://t.co/xhLrNnfyrO...
PT-2025-24351 · Undefined · Undefined
CVE-2025-5242 Rejected reason https://t.co/7tJJDZLcUi Vulnerability Notification: https://t.co/xhLrNnfyrO...
WordPress Broadly for WordPress plugin <= 3.0.2 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin Broadly for WordPress versions = 3.0.2...
BIT-MODSECURITY-2025-47947 ModSecurity Has Possible DoS Vulnerability
ModSecurity is an open source, cross platform web application firewall WAF engine for Apache, IIS and Nginx. Versions up to and including 2.9.8 are vulnerable to denial of service in one special case in stable released versions: when the payload's content type is application/json, and there is at...
CVE-2024-8416
A vulnerability was found in SourceCodester Food Ordering Management System 1.0. It has been classified as critical. This affects an unknown part of the file /routers/ticket-status.php. The manipulation of the argument ticketid leads to sql injection. It is possible to initiate the attack remotel...