| Page(s) : 1 ... 740 741 742 743 744 745 746 747 748 749 [750] 751 752 753 754 755 756 757 758 759 760 ... | Result(s) : 300047 |
Alerts
| DATE | NAME | CATEGORIES | DETAIL | |
|---|---|---|---|---|
| N/A | 2025-03-12 | CVE-2025-0116 | cve | A Denial of Service (DoS) vulnerability in Palo Alto Networks PAN-OS software causes the firewall to unexpectedly reboot when processing a specially crafted LLDP frame sent by a... |
| N/A | 2025-03-12 | CVE-2025-0117 | cve | A reliance on untrusted input for a security decision in the GlobalProtect app on Windows devices potentially enables a locally authenticated non-administrative Windows user to ... |
| 8 | 2025-03-12 | CVE-2025-0118 | cve | A vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a remote attacker to run ActiveX controls within the context of an authenticated Windows user. This... |
| N/A | 2025-03-12 | CVE-2025-22870 | cve | Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.c... |
| N/A | 2025-03-12 | CVE-2025-25975 | cve | An issue in parse-git-config v.3.0.0 allows an attacker to obtain sensitive information via the expandKeys function |
| N/A | 2025-03-12 | CVE-2025-27407 | cve | graphql-ruby is a Ruby implementation of GraphQL. Starting in version 1.11.5 and prior to versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21, loading a malici... |
| N/A | 2025-03-12 | CVE-2024-13870 | cve | An improper access control vulnerability exists in Bitdefender Box 1 (firmware version 1.3.52.928 and below) that allows an unauthenticated attacker to downgrade the device'... |
| N/A | 2025-03-12 | CVE-2024-13871 | cve | A command injection vulnerability exists in the /check_image_and_trigger_recovery API endpoint of Bitdefender Box 1 (firmware version 1.3.11.490). This flaw allows an unauthenti... |
| N/A | 2025-03-12 | CVE-2024-13872 | cve | Bitdefender Box, versions 1.3.11.490 through 1.3.11.505, uses the insecure HTTP protocol to download assets over the Internet to update and restart daemons and detection rules o... |
| 5.4 | 2025-03-12 | CVE-2025-1527 | cve | The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to a Stored DOM-Based Cr... |
| N/A | 2025-03-12 | CVE-2024-10838 | cve | An integer underflow during deserialization may allow any unauthenticated user to read out of bounds heap memory. This may result into secret data or pointers revealing the layo... |
| N/A | 2025-03-12 | CVE-2025-29903 | cve | In JetBrains Runtime before 21.0.6b872.80 arbitrary dynamic library execution due to insecure macOS flags was possible |
| N/A | 2025-03-12 | CVE-2025-29904 | cve | In JetBrains Ktor before 3.1.1 an HTTP Request Smuggling was possible |
| 6.5 | 2025-03-12 | CVE-2024-52362 | cve | IBM App Connect Enterprise Certified Container 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6,... |
| 4.4 | 2025-03-12 | CVE-2025-21590 | cve | An Improper Isolation or Compartmentalization vulnerability in the kernel of Juniper Networks Junos OS allows a local attacker with high privileges to compromise the integrity o... |
| N/A | 2025-03-12 | CVE-2025-25709 | cve | An issue in dtp.ae tNexus Airport View v.2.8 allows a remote attacker to escalate privileges via the addUser and updateUser endpoints |
| 7.5 | 2025-03-12 | CVE-2025-27788 | cve | JSON is a JSON implementation for Ruby. Starting in version 2.10.0 and prior to version 2.10.2, a specially crafted document could cause an out of bound read, most likely result... |
| 6.8 | 2025-03-12 | CVE-2025-27794 | cve | Flarum is open-source forum software. A session hijacking vulnerability exists in versions prior to 1.8.10 when an attacker-controlled authoritative subdomain under a parent dom... |
| N/A | 2025-03-12 | CVE-2024-27763 | cve | XPixelGroup BasicSR through 1.4.2 might locally allow code execution in contrived situations where "scontrol show hostname" is executed in the presence of a crafted SLURM_NODELI... |
| N/A | 2025-03-12 | CVE-2025-22954 | cve | GetLateOrMissingIssues in C4/Serials.pm in Koha before 24.11.02 allows SQL Injection in /serials/lateissues-export.pl via the supplierid or serialid parameter. |
| Page(s) : 1 ... 740 741 742 743 744 745 746 747 748 749 [750] 751 752 753 754 755 756 757 758 759 760 ... | Result(s) : 300047 |
