CVE-2025-55637

The CVE affects Reolink Smart 2K+ Plug‑in Wi‑Fi Video Doorbell with Chime (firmware 3.0.0.4662_2503122283). A command injection flaw exists in the setddns_pip_system() function. Exploitation status is not provided in the sources; CVSS vectors indicate high impact to confidentiality, integrity, an...

Linux Distros Unpatched Vulnerability : CVE-2018-16648

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Artifex MuPDF 1.13.0, the fzappendbyte function in fitz/buffer.c allows remote attackers to cause a denial of service segmentation fault via a crafted pdf...

Linux Distros Unpatched Vulnerability : CVE-2016-6525

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in the pdfloadmeshparams function in pdf/pdf-shade.c in MuPDF allows remote attackers to cause a denial of service crash or execute...

Linux Distros Unpatched Vulnerability : CVE-2023-26819

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as a: true, b:...

CVE-2025-43750

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.1, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allows remote unauthenticated users guests to upload files via th...

CVE-2025-43741

creationtimestamp| type| source ---|---|--- 2025-08-20 12:08:29+00:00| seen| Telegram/OBEmwvjAIDyxVOwqRICy4WobqeV76wqKIypjYagpBb-F2w...

CVE-2025-48297

CVE-2025-48297 is a reflected XSS in WordPress Simple Link Directory prior to 14.8.1 caused by improper input neutralization during web page generation. Affected plugin versions are older than 14.8.1; CVSS v3.1 base score 7.1 (HIGH). Remediation: update to WordPress Simple Link Directory 14.8.1 o...

Linux Distros Unpatched Vulnerability : CVE-2023-22064

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.34 and prior. Easily...

Linux Distros Unpatched Vulnerability : CVE-2018-3062

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Memcached. Supported versions that are affected are 5.6.40 and prior, 5.7.22 a...

Linux Distros Unpatched Vulnerability : CVE-2025-43857

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.5.7, 0.4.20, 0.3.9, and 0.2.5, there is a possibili...

CVE-2025-55032

creationtimestamp| type| source ---|---|--- 2025-08-19 21:07:43+00:00| seen| Telegram/9x2b25Q9oxA5v4NKTQg1ZN757ANbjfwFo4ZXYsSvv4ZVM...

CVE-2025-54881

Mermaid is a JavaScript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify complex diagrams. In the default configuration of mermaid 10.9.0-rc.1 to 11.9.0, user supplied input for sequence diagram labels is passed to innerHTML duri...

编号撤回

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux in the United States. This CVE number has been withdrawn...

CVE-2025-55284

Claude Code prior to 1.0.4 contains an overly broad default allowlist of safe commands, enabling reading a local file and exfiltrating its contents over the network without user confirmation if untrusted content is injected into the Claude Code context window. The root cause is a permissive allow...

CVE-2025-8924

A vulnerability was identified in Campcodes Online Water Billing System 1.0. This issue affects some unknown processing of the file /viewbill.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may...

CVE-2025-9050 projectworlds Travel Management System addcategory.php sql injection

A vulnerability was found in projectworlds Travel Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /addcategory.php. The manipulation of the argument t1 leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the...

CVE-2025-20224

creationtimestamp| type| source ---|---|--- 2025-08-15 11:00:11+00:00| seen| https://t.me/truesecator/7332...

CVE-2025-24923

creationtimestamp| type| source ---|---|--- 2025-08-15 04:04:01+00:00| seen| Telegram/B3SiXLJkzaRLS6dgKF-9ZyJEtvR0R0J9CsRHsiTYNLJIYys...

Open5GS has an unspecified vulnerability (CNVD-2025-18543)

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS has a security vulnerability that can be exploited by an attacker to cause local manipulation...

Linux Distros Unpatched Vulnerability : CVE-2022-50088

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm/damon/reclaim: fix potential memory leak in damonreclaiminit damonreclaiminit allocates a...