Click to open the Alert Filter

 
Year Month
Severity
Categories
Search by Alert Name
Page(s) : 1 ... 67 68 69 70 71 72 73 74 75 76 [77] 78 79 80 81 82 83 84 85 86 87 ... Result(s) : 324225

Alerts Feed Alerts

DATE NAME CATEGORIES DETAIL
N/A 2025-06-10 CVE-2025-4954 cve The Axle Demo Importer WordPress plugin through 1.0.3 does not validate files to be uploaded, which could allow authenticated users (author and above) to upload arbitrary files ...
N/A 2025-06-10 CVE-2025-27817 cve A possible arbitrary file read and SSRF vulnerability has been identified in Apache Kafka Client. Apache Kafka Clients accept configuration data for setting the SASL/OAUTHBEARER...
N/A 2025-06-10 CVE-2025-27818 cve A possible security vulnerability has been identified in Apache Kafka. This requires access to a alterConfig to the cluster resource, or Kafka Connect worker, and the ability to...
N/A 2025-06-10 CVE-2025-27819 cve In CVE-2023-25194, we announced the RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration in Kafka Connect API. But not only Kafka Connect API is vulnerable t...
N/A 2025-06-10 CVE-2025-5945 cve Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
N/A 2025-06-10 CVE-2025-3112 cve CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause Denial of Service when an authenticated malicious user sends manipulated HTTPS Content-Length he...
N/A 2025-06-10 CVE-2025-3116 cve CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated malicious user sends special malformed HTTPS request containing i...
N/A 2025-06-10 CVE-2025-3117 cve CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists impacting configuration file paths that could cause a...
N/A 2025-06-10 CVE-2025-3898 cve CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated malicious user sends HTTPS request containing invalid data type t...
N/A 2025-06-10 CVE-2025-3899 cve CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in Certificates page on Webserver that could cause an...
N/A 2025-06-10 CVE-2025-3905 cve CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists impacting PLC system variables that could cause an un...
N/A 2025-06-10 CVE-2025-4680 cve Improper Input Validation vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Exploiting Incorrectly Configured Access Control Security Levels.This issu...
N/A 2025-06-10 CVE-2025-4681 cve Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Abuse.This issue affects upKeeper Instant Privilege Access: ...
N/A 2025-06-10 CVE-2025-5740 cve CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause arbitrary file writes when an unauthentica...
N/A 2025-06-10 CVE-2025-5741 cve CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause arbitrary file reads from the charging sta...
N/A 2025-06-10 CVE-2025-5742 cve CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability exists when an authenticated user modifies configuration parameters on...
N/A 2025-06-10 CVE-2025-5743 cve CWE-78: I Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote control over the char...
N/A 2025-06-10 CVE-2025-0036 cve In AMD Versal Adaptive SoC devices, the incorrect configuration of the SSS during runtime (post-boot) cryptographic operations could cause data to be incorrectly written to and ...
N/A 2025-06-10 CVE-2025-0037 cve In AMD Versal Adaptive SoC devices, the lack of address validation when executing PLM runtime services through the PLM firmware can allow access to isolated or protected memory ...
N/A 2025-06-10 CVE-2025-5903 cve A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been classified as critical. Affected is the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi of the comp...
Page(s) : 1 ... 67 68 69 70 71 72 73 74 75 76 [77] 78 79 80 81 82 83 84 85 86 87 ... Result(s) : 324225