| Page(s) : 1 ... 1146 1147 1148 1149 1150 1151 1152 1153 1154 1155 [1156] 1157 1158 1159 1160 1161 1162 1163 1164 1165 1166 ... | Result(s) : 301597 |
Alerts
| DATE | NAME | CATEGORIES | DETAIL | |
|---|---|---|---|---|
| N/A | 2025-01-22 | CVE-2023-37777 | cve | A SQL injection vulnerability exists in Synnefo Internet Management Software (IMS) version 2023 and earlier. This vulnerability occurs due to improper input validation in a spec... |
| N/A | 2025-01-22 | CVE-2024-10929 | cve | In certain circumstances, an issue in Arm Cortex-A72 (revisions before r1p0), Cortex-A73 and Cortex-A75 may allow an adversary to gain a weak form of control over the victim... |
| N/A | 2025-01-22 | CVE-2024-24429 | cve | A reachable assertion in the nas_eps_send_emm_to_esm function of Open5GS |
| 8.8 | 2025-01-22 | CVE-2024-31903 | cve | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 allow an attacker on the local network to execute arbitrary code on the system, ... |
| N/A | 2025-01-22 | CVE-2024-42012 | cve | GRAU DATA Blocky before 3.1 stores passwords encrypted rather than hashed. At the login screen, the user's password is compared to the user's decrypted cleartext passw... |
| N/A | 2025-01-22 | CVE-2024-42013 | cve | In GRAU DATA Blocky before 3.1, Blocky-Gui has a Client-Side Enforcement of Server-Side Security vulnerability. An attacker with Windows administrative or debugging privileges c... |
| N/A | 2025-01-22 | CVE-2024-55488 | cve | A stored cross-site scripting (XSS) vulnerability in Umbraco CMS v14.3.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. NOTE: This has been dis... |
| N/A | 2025-01-22 | CVE-2025-0638 | cve | The initial code parsing the manifest did not check the content of the file names yet later code assumed that it was checked and panicked when encountering illegal characters, r... |
| N/A | 2025-01-22 | CVE-2025-23809 | cve | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Blue Wrench Video Widget allows Reflected XSS. This issu... |
| N/A | 2025-01-22 | CVE-2025-23914 | cve | Deserialization of Untrusted Data vulnerability in NotFound Muzaara Google Ads Report allows Object Injection. This issue affects Muzaara Google Ads Report: from n/a through 3.1. |
| N/A | 2025-01-22 | CVE-2025-23992 | cve | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leetoo Toocheke Companion allows Stored XSS. This issue affects T... |
| N/A | 2025-01-22 | CVE-2024-51457 | cve | IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.19 and 23.0.0 through 23.0.19 is vulnerable to cross-site scripting. This vulnerability allows an authenticate... |
| N/A | 2025-01-22 | CVE-2025-20128 | cve | A vulnerability in the Object Linking and Embedding 2 (OLE2) decryption routine of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) cond... |
| N/A | 2025-01-22 | CVE-2025-20156 | cve | A vulnerability in the REST API of Cisco Meeting Management could allow a remote, authenticated attacker with low privileges to elevate privileges to administrator on an affecte... |
| N/A | 2025-01-22 | CVE-2025-20165 | cve | A vulnerability in the SIP processing subsystem of Cisco BroadWorks could allow an unauthenticated, remote attacker to halt the processing of incoming SIP requests, resulting in... |
| N/A | 2025-01-22 | CVE-2025-23028 | cve | Cilium is a networking, observability, and security solution with an eBPF-based dataplane. A denial of service vulnerability affects versions 1.14.0 through 1.14.7, 1.15.0 throu... |
| N/A | 2025-01-22 | CVE-2025-24397 | cve | An incorrect permission check in Jenkins GitLab Plugin 1.9.6 and earlier allows attackers with global Item/Configure permission (while lacking Item/Configure permission on any p... |
| N/A | 2025-01-22 | CVE-2025-24398 | cve | Jenkins Bitbucket Server Integration Plugin 2.1.0 through 4.1.3 (both inclusive) allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins. |
| N/A | 2025-01-22 | CVE-2025-24399 | cve | Jenkins OpenId Connect Authentication Plugin 4.452.v2849b_d3945fa_ and earlier, except 4.438.440.v3f5f201de5dc, treats usernames as case-insensitive, allowing attackers on Jenki... |
| N/A | 2025-01-22 | CVE-2025-24400 | cve | Jenkins Eiffel Broadcaster Plugin 2.8.0 through 2.10.2 (both inclusive) uses the credential ID as the cache key during signing operations, allowing attackers able to create a cr... |
| Page(s) : 1 ... 1146 1147 1148 1149 1150 1151 1152 1153 1154 1155 [1156] 1157 1158 1159 1160 1161 1162 1163 1164 1165 1166 ... | Result(s) : 301597 |
