| Page(s) : 1 2 3 4 5 6 7 8 9 [10] 11 12 13 14 15 16 17 18 19 20 ... | Result(s) : 299902 |
Alerts
| DATE | NAME | CATEGORIES | DETAIL | |
|---|---|---|---|---|
| N/A | 2025-06-27 | CVE-2025-53094 | cve | ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, RP2040 and RP2350. In versions up to and including 3.7.8, a CRLF (Carriage Return Line... |
| 6.3 | 2025-06-27 | CVE-2025-6774 | cve | A vulnerability was found in gooaclok819 sublinkX up to 1.8. It has been rated as critical. Affected by this issue is the function AddTemp of the file api/template.go. The manip... |
| 6.3 | 2025-06-27 | CVE-2025-6775 | cve | A vulnerability classified as critical has been found in xiaoyunjie openvpn-cms-flask up to 1.2.7. This affects the function create_user of the file /app/api/v1/openvpn.py of th... |
| 7.3 | 2025-06-27 | CVE-2025-6776 | cve | A vulnerability classified as critical was found in xiaoyunjie openvpn-cms-flask up to 1.2.7. This vulnerability affects the function Upload of the file app/plugins/oss/app/cont... |
| 7.3 | 2025-06-27 | CVE-2025-6777 | cve | A vulnerability, which was classified as critical, has been found in code-projects Food Distributor Site 1.0. This issue affects some unknown processing of the file /admin/proce... |
| 2.4 | 2025-06-27 | CVE-2025-6778 | cve | A vulnerability, which was classified as problematic, was found in code-projects Food Distributor Site 1.0. Affected is an unknown function of the file /admin/save_settings.php.... |
| N/A | 2025-06-27 | CVE-2025-36595 | cve | Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerabil... |
| N/A | 2025-06-27 | CVE-2025-44163 | cve | RaspAP raspap-webgui 3.3.1 is vulnerable to Directory Traversal in ajax/networking/get_wgkey.php. An authenticated attacker can send a crafted POST request with a path traversal... |
| N/A | 2025-06-27 | CVE-2025-45729 | cve | D-Link DIR-823-Pro 1.02 has improper permission control, allowing unauthorized users to turn on and access Telnet services. |
| N/A | 2025-06-27 | CVE-2025-46415 | cve | A race condition in the Nix, Lix, and Guix package managers allows the removal of content from arbitrary folders. This affects Nix before 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Li... |
| N/A | 2025-06-27 | CVE-2025-46416 | cve | The Nix, Lix, and Guix package managers allow a bypass of build isolation in which a user can elevate their privileges to the build user account (e.g., nixbld or guixbuild). Thi... |
| N/A | 2025-06-27 | CVE-2025-50528 | cve | A buffer overflow vulnerability exists in the fromNatStaticSetting function of Tenda AC6 |
| N/A | 2025-06-27 | CVE-2025-52991 | cve | The Nix, Lix, and Guix package managers default to using temporary build directories in a world-readable and world-writable location. This allows standard users to deceive the p... |
| N/A | 2025-06-27 | CVE-2025-52992 | cve | The Nix, Lix, and Guix package managers fail to properly set permissions when a derivation build fails. This may allow arbitrary processes to modify the content of a store outsi... |
| N/A | 2025-06-27 | CVE-2025-52993 | cve | A race condition in the Nix, Lix, and Guix package managers enables changing the ownership of arbitrary files to the UID and GID of the build user (e.g., nixbld* or guixbuild*).... |
| N/A | 2025-06-27 | CVE-2025-53193 | cve | Cross-Site Request Forgery (CSRF) vulnerability in Burst Statistics B.V. Burst Statistics allows Cross Site Request Forgery. This issue affects Burst Statistics: from n/a throug... |
| N/A | 2025-06-27 | CVE-2025-53197 | cve | Cross-Site Request Forgery (CSRF) vulnerability in cookiebot Cookiebot allows Cross Site Request Forgery. This issue affects Cookiebot: from n/a through 4.5.8. |
| N/A | 2025-06-27 | CVE-2025-53199 | cve | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HT Plugins HT Slider For Elementor allows DOM-Based XSS. This iss... |
| N/A | 2025-06-27 | CVE-2025-53200 | cve | Missing Authorization vulnerability in QuantumCloud ChatBot allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ChatBot: from n/a through... |
| N/A | 2025-06-27 | CVE-2025-53202 | cve | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CyberChimps Responsive Blocks allows DOM-Based XSS. This issue af... |
| Page(s) : 1 2 3 4 5 6 7 8 9 [10] 11 12 13 14 15 16 17 18 19 20 ... | Result(s) : 299902 |
