430 matches found
CVE-2025-30762
CVE-2025-30762 affects Oracle WebLogic Server (Oracle Fusion Middleware), component: Core. Affected versions are 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0. The vulnerability enables an unauthenticated attacker over network access via T3 or IIOP to compromise WebLogic Server, potentially leading to u...
CVE-2025-30746
...
CVE-2025-30746
...
CVE-2025-30745
Oracle E-Business Suite: Oracle MES for Process Manufacturing (Device Integration) is affected in versions 12.2.12–12.2.13 by a cross-site request forgery vulnerability (CSRF). The issue is exploitable remotely over HTTP; exploitation requires interaction from a user other than the attacker. Succ...
CVE-2025-30744
...
BELL-CVE-2025-5351
Bulletin has no description...
PT-2025-27277 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: Marvell QConvergeConsole affected versions not specified Description: The issue is related to the deserialization of untrusted data in the readNICParametersFromFile function, which can lead to remote code execution. Recommendations: At the...
BELL-CVE-2025-38051
Bulletin has no description...
BELL-CVE-2025-38007
Bulletin has no description...
CVE-2025-49001 Dataease Authentication Bypass Vulnerability
DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.10, secret verification does not take effect successfully, so a user can use any secret to forge a JWT token. The vulnerability has been fixed in v2.10.10. No known workarounds are available...
PT-2025-22923 · Unknown · Summer Pearl Group Vacation Rental Management Platform
Name of the Vulnerable Software and Affected Versions: Summer Pearl Group Vacation Rental Management Platform version 1.0.1 Description: A vulnerability was found in the Summer Pearl Group Vacation Rental Management Platform, affecting an unknown part of the file /spgpm/updateListing. The...
BELL-CVE-2025-37942
Bulletin has no description...
CVE-2025-47930 Zulip Server has access control bypass for restrictions on creation of specific channel types
Zulip is an open-source team chat application. Starting in version 10.0 and prior to version 10.3, the "Who can create public channels" access control mechanism can be circumvented by creating a private or web-public channel, and then changing the channel privacy to public. A similar technique...
CVE-2025-44831
EngineerCMS v1.02 through v2.0.5 has a SQL injection vulnerability in the /project/addproject interface...
BELL-CVE-2025-37879
Bulletin has no description...
PT-2025-20392 · Totolink · Totolink Nr1800X
Name of the Vulnerable Software and Affected Versions: TOTOLINK NR1800X version 9.1.0u.6681 B20230703 Description: The issue is an authenticated stack overflow that occurs via the ssid parameter in the setWiFiGuestCfg function. This allows for potential exploitation. Recommendations: For TOTOLINK...
PT-2025-20074 · Lemesconsultoria · Lemesconsultoria Hcm Galera.App
Name of the Vulnerable Software and Affected Versions: lemesconsultoria HCM galera.app version 4.58.0 Description: The issue allows an attacker to execute arbitrary code via multiple API endpoints, including "/ted/solicitacao treinamento/", "/rh/metas/perspectiva estrategica/edicao/",...