479 matches found
Linux Distros Unpatched Vulnerability : CVE-2022-21254
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.27 and prior. Difficult to...
CVE-2025-50101 affecting package mysql for versions less than 8.0.43-1
CVE-2025-50101 affecting package mysql for versions less than 8.0.43-1. An upgraded version of the package is available that resolves this issue...
Student Attendance Management System 安全漏洞
Student Attendance Management System is a student attendance management system developed by rickxy. A security vulnerability exists in Student Attendance Management System v1. The vulnerability stems from SQL injection due to incorrect manipulation of the classId and classArmName parameters in th...
BentoML 1.x < 1.4.8 Insecure Deserialization
According to its banner, the version of BentoML running on the remote host is 1.x 1.4.8. It is, therefore, affected by an Insecure Deserialization vulnerability. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No...
Synology Router Manager 跨站脚本漏洞
Synology Router Manager SRM is a software used to configure and manage Synology routers from China-based Synology. A cross-site scripting vulnerability exists in Synology Router Manager versions prior to 1.3.1-9346-11, which originates from cross-site scripting and could lead to the injection of...
Code-Projects AVL Rooms 安全漏洞
Code-Projects AVL Rooms is an AVL room system from Code-Projects open source. A security vulnerability exists in Code-Projects AVL Rooms version 1.0, which stems from SQL injection due to incorrect manipulation of the parameter firstname in the file /profile.php...
CVE-2024-47065 Traceroute_APP responses are not rate-limited.
Meshtastic is an open source mesh networking solution. Prior to 2.5.1, traceroute responses from the remote node are not rate limited. Given that there are SNR measurements attributed to each received transmission, this is a guaranteed way to get a remote station to reliably and continuously...
CVE-2025-53629 cpp-httplib Unbounded Memory Allocation in Chunked/No-Length Requests Vulnerability
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.23.0, incoming requests using Transfer-Encoding: chunked in the header can allocate memory arbitrarily in the server, potentially leading to its exhaustion. This vulnerability is fixed in 0.23.0. NOTE: Th...
CVE-2025-53625
The DynamicPageList3 extension is a reporting tool for MediaWiki, listing category members and intersections with various formats and details. Several dpl parameters can leak usernames that have been hidden using revision deletion, suppression, or the hideuser block flag. The vulnerability is fix...
Comodo Internet Security Premium 安全漏洞
Comodo Internet Security Premium is a suite of computer security software from Comodo, Inc. that focuses on Internet security. A security vulnerability exists in Comodo Internet Security Premium version 12.3.4.8162 that stems from improper validation of the integrity check value of the file...
Naver Whale browser for iOS 安全漏洞
Naver Whale browser for iOS is a browser from the South Korean company Naver. A security vulnerability exists in Naver Whale browser for iOS prior to version 3.9.1.4206, which originates from a specially crafted JavaScript scheme that could lead to the execution of malicious scripts...
WordPress Radio Station plugin <= 2.5.12 - Cross Site Request Forgery (CSRF) Vulnerability
Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Ngoc Quang Bach maysbachs in WordPress Plugin Radio Station versions = 2.5.12...
CVE-2025-53290
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in anonymized-15272943 WP Visual Sitemap wp-visual-sitemap allows Stored XSS.This issue affects WP Visual Sitemap: from n/a through = 1.0.2...
PT-2025-26631 · Dromara · Dromara Maxkey
Name of the Vulnerable Software and Affected Versions: Dromara MaxKey versions up to 4.1.7 Description: A critical issue affects the function Add of the SAML20DetailsController.java file in the Meta URL Handler component. The manipulation of the post argument leads to server-side request forgery,...
CVE-2025-50027
CVE-2025-50027 refers to a Cross-Site Scripting (stored XSS) vulnerability in the xootix WordPress Login/Signup Popup. Public records indicate the issue affects versions n/a through 2.9.4 of the Login/Signup Popup plugin and arises from improper input neutralization during web page generation. Im...
CVE-2025-50047
CVE-2025-50047 affects the WordPress plugin Sitekit (WordPress Sitekit) up to version 1.9 . The issue is an improper input neutralization in web page generation, causing Stored XSS . Exploitation could allow an attacker to inject malicious scripts into pages viewed by other users. According to mu...
CVE-2025-6273
A vulnerability was found in WebAssembly wabt up to 1.0.37 and classified as problematic. This issue affects the function LogOpcode of the file src/binary-reader-objdump.cc. The manipulation leads to reachable assertion. Local access is required to approach this attack. The exploit has been...
CVE-2025-50201
WeGIA is a web manager for charitable institutions. Prior to version 3.4.2, an OS Command Injection vulnerability was identified in the /html/configuracao/debuginfo.php endpoint. The branch parameter is not properly sanitized before being concatenated and executed in a shell command on the server...
CVE-2025-32510 WordPress Ovatheme Events Manager plugin <= 1.8.4 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in ovatheme Ovatheme Events Manager ova-events-manager allows Using Malicious Files.This issue affects Ovatheme Events Manager: from n/a through = 1.8.4...
