1486 matches found
CVE-2025-3887
GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may...
CVE-2011-4941
Unspecified vulnerability in Piwik 1.2 through 1.4 allows remote attackers with the view permission to execute arbitrary code via unknown attack vectors...
PT-2025-22368
Name of the Vulnerable Software and Affected Versions sr feuser register extension for TYPO3 versions through 12.4.8 Description The issue allows remote code execution via unsafe deserialization. There is no information provided about the estimated number of potentially affected devices worldwide...
CVE-2025-47273 setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write
setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with...
CVE-2025-4389 Crawlomatic Multipage Scraper Post Generator <= 2.6.8.1 - Unauthenticated Arbitrary File Upload
The Crawlomatic Multipage Scraper Post Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the crawlomaticgeneratefeaturedimage function in all versions up to, and including, 2.6.8.1. This makes it possible for unauthenticated attackers to...
CVE-2025-47785
CVE-2025-47785 affects Emlog up to version 2.5.9. The issue is a SQL injection in the $origContent parameter of admin/article_save.php, which is accessible to ordinary registered users. This can induce SQL injection when the registered site is enabled, potentially allowing the injection of the ad...
CVE-2025-47785 EMLOG SQL Injection Vulnerability
Emlog is an open source website building system. In versions up to and including 2.5.9, SQL injection occurs because the $origContent parameter in admin/articlesave.php is not strictly filtered. Since admin/articlesave.php can be accessed by ordinary registered users, this will cause SQL injectio...
CVE-2025-26389
A vulnerability has been identified in OZW672 All versions V8.0, OZW772 All versions V8.0. The web service in affected devices does not sanitize the input parameters required for the exportDiagramPage endpoint. This could allow an unauthenticated remote attacker to execute arbitrary code with roo...
CVE-2025-3053
CVE-2025-3053: UiPress lite for WordPress
PT-2025-21257 · WordPress · 百度站长Seo合集
Name of the Vulnerable Software and Affected Versions: 百度站长SEO合集 plugin for WordPress versions up to, and including, 2.0.6 Description: The issue is related to arbitrary file uploads due to missing file type validation in the download remote image to media library function. This allows...
CVE-2025-47292
Cap Collectif's CVE-2025-47292 describes an insecure deserialization flaw in the DebateAlternateArgumentsResolver, where deserializing a Cursor can be controlled by an unauthenticated user and lead to Remote Code Execution. Affected software is Cap Collectif prior to the commit 812f2a7d271b76deab...
PT-2025-21145 · Unknown · Cap Collectif
Name of the Vulnerable Software and Affected Versions: Cap Collectif versions prior to the version including commit 812f2a7d271b76deab1175bdaf2be0b8102dd198 Description: The issue concerns the Cap Collectif online decision-making platform, which has a flaw in the DebateAlternateArgumentsResolver...
CVE-2025-30383 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2025-30381
CVE-2025-30381 is an Excel/Microsoft Office vulnerability describing an out-of-bounds read in Microsoft Office Excel that enables a local attacker to execute arbitrary code on the vulnerable system. The advisory notes a local attack vector and code execution impact, with CVSS v3.1 metrics indicat...
CVE-2025-30379 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2025-29979 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2025-29977 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2025-29969
Technical details about CVE-2025-29969 (affected product/version, root cause, exploitability, and remediation) are not provided in the supplied documents; monitor for updates.
CVE-2025-45857
The EDIMAX CV7428NS (v1.20), an enterprise-grade network video recorder, is vulnerable to Remote Code Execution (RCE) . The root cause is identified as improper control of generation of code (CWE-94) via the command parameter within the mp function. This vulnerability allows an attacker to execut...