42679 matches found
EUVD-2025-40466
Malicious code in bayu-telurtahu17-breki npm...
EUVD-2025-40256
Malicious code in candra-miemee90-riris npm...
EUVD-2025-40059
Malicious code in citra-lengko4-miaww npm...
Apple macOS Sequoia Permission Issue Vulnerability (CNVD-2025-29330)
Apple macOS Sequoia is an operating system announced by Apple on June 10, 2024 at the WWDC24 developer conference. Apple macOS Sequoia has a privilege issue vulnerability that can be exploited by attackers to cause an application to access sensitive user data...
GHSA-PWHC-RPQ9-4C8W vulnerabilities
Vulnerabilities for packages: chartmuseum, steampipe, opa-envoy, kots, spegel, xeol, trivy-operator, trivy, k8ssandra-client, nerdctl, rancher-helm, dagger, kaniko, flux-source-controller, manifest-tool, docker-cli-buildx, helm-operator, wolfictl, k9s, syft, falco-no-driver, rancher-fleet,...
PT-2025-45480
Name of the Vulnerable Software and Affected Versions SourceCodester PQMS version 1.0 Description A SQL injection issue exists in the Patient Queue Management System. The api patient schedule.php endpoint is affected because the appointmentID parameter does not receive proper sanitization,...
EUVD-2025-38161
IBM OpenPages 9.1, and 9.0 with Watson is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site...
EUVD-2025-38172
Advantech WebAccess/VPN versions prior to 1.1.5 contain a stored cross-site scripting XSS vulnerability via StandaloneVpnClientsController.addStandaloneVpnClientAction. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the...
EUVD-2025-37791
The Popup and Slider Builder by Depicter – Add Email collecting Popup, Popup Modal, Coupon Popup, Image Slider, Carousel Slider, Post Slider Carousel plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability checks in the "depicter-media-upload" AJAX route in all...
EUVD-2025-37800
Not used...
EUVD-2025-37805
Not used...
EUVD-2025-37555
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00434422; Issue ID: MSV-395...
EUVD-2025-37670
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.1 and iPadOS 26.1, tvOS 26.1, Safari 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash...
EUVD-2025-37728
This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2. An app may be able to access user-sensitive data...
EUVD-2025-37650
A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2. An app may be able to access sensitive user data...
EUVD-2025-37518
The KMIP response parser built into mongo binaries is overly tolerant of certain malformed packets, and may parse them into invalid objects. Later reads of this object can result in read access violations...
EUVD-2025-37377
Malicious code in sechub-openapi-typescript npm...
PT-2025-44307
Name of the Vulnerable Software and Affected Versions code-projects Online Complaint Site version 1.0 Description A flaw exists in the processing of the file '/cms/admin/subcategory.php' within the software. The issue involves a SQL injection that occurs due to manipulation of the category...