Click to open the Alert Filter

 
Year Month
Severity
Categories
Search by Alert Name
Page(s) : 1 ... 812 813 814 815 816 817 818 819 820 821 [822] 823 824 825 826 827 828 829 830 831 832 ... Result(s) : 325976

Alerts Feed Alerts

DATE NAME CATEGORIES DETAIL
N/A 2025-03-04 CVE-2025-27510 cve conda-forge-metadata provides programatic access to conda-forge's metadata. conda-forge-metadata uses an optional dependency - "conda-oci-mirror" which was neither present ...
N/A 2025-03-04 CVE-2024-50705 cve Unauthenticated reflected cross-site scripting (XSS) vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary scripts via the page parameter.
N/A 2025-03-04 CVE-2024-50706 cve Unauthenticated SQL injection vulnerability in Uniguest Tripleplay version 23.1+ allows remote attackers to execute arbitrary SQL queries on the backend database.
8.6 2025-03-04 CVE-2024-9149 cve Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wind Media E-Commerce Website Template allows SQL Injection.This ...
N/A 2025-03-04 CVE-2024-11957 cve Improper verification of the digital signature in ksojscore.dll in Kingsoft WPS Office in versions equal or less than 12.1.0.18276 on Windows allows an attacker to load an arb...
N/A 2025-03-04 CVE-2024-50704 cve Unauthenticated remote code execution vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary code via a specially crafted HTTP POST requ...
N/A 2025-03-04 CVE-2024-50707 cve Unauthenticated remote code execution vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary code via the X-Forwarded-For header in an H...
N/A 2025-03-04 CVE-2025-1424 cve A privilege escalation vulnerability in PocketBook InkPad Color 3 allows attackers to escalate to root privileges if they gain physical access to the device. This issue affects ...
N/A 2025-03-04 CVE-2025-1425 cve A Sudo privilege misconfiguration vulnerability in PocketBook InkPad Color 3 on Linux, ARM allows attackers to read file contents on the device.This issue affects InkPad Color 3...
N/A 2025-03-04 CVE-2025-23368 cve A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed authentication attempts within a short time fram...
N/A 2025-03-04 CVE-2025-26320 cve t0mer BroadlinkManager v5.9.1 was discovered to contain an OS command injection vulnerability via the IP Address parameter at /device/ping.
N/A 2025-03-04 CVE-2025-27111 cve Rack is a modular Ruby web server interface. The Rack::Sendfile middleware logs unsanitised header values from the X-Sendfile-Type header. An attacker can exploit this by inject...
N/A 2025-03-04 CVE-2025-26091 cve A Cross Site Scripting (XSS) vulnerability exists in TeamPasswordManager v12.162.284 and before that could allow a remote attacker to execute arbitrary JavaScript in the web bro...
N/A 2025-03-04 CVE-2025-26182 cve An issue in xxyopen novel plus v.4.4.0 and before allows a remote attacker to execute arbitrary code via the PageController.java file
N/A 2025-03-04 CVE-2025-27150 cve Tuleap is an Open Source Suite to improve management of software developments and collaboration. The password to connect the Redis instance is not purged from the archive genera...
N/A 2025-03-04 CVE-2025-27155 cve Pinecone is an experimental overlay routing protocol suite which is the foundation of the current P2P Matrix demos. The Pinecone Simulator (pineconesim) included in Pinecone up ...
N/A 2025-03-04 CVE-2025-27156 cve Tuleap is an Open Source Suite to improve management of software developments and collaboration. The mass emailing features do not sanitize the content of the HTML emails. A mal...
N/A 2025-03-04 CVE-2025-27401 cve Tuleap is an Open Source Suite to improve management of software developments and collaboration. In a standard usages of Tuleap, the issue has a limited impact, it will mostly l...
N/A 2025-03-04 CVE-2025-27402 cve Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap is missing CSRF protections on tracker fields administrative operations. ...
N/A 2025-03-04 CVE-2025-27507 cve The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. ZITADEL's Admin API contains Insecure Direct Object Re...
Page(s) : 1 ... 812 813 814 815 816 817 818 819 820 821 [822] 823 824 825 826 827 828 829 830 831 832 ... Result(s) : 325976