CVE-2025-22997 15 Jan 2025
A stored cross-site scripting (XSS) vulnerability in the prf_table_content component of Linksys E5600 Router Ver. 1.1.0.26 allows attackers to execute... Read more ➔
CVE-2025-22996 15 Jan 2025
A stored cross-site scripting (XSS) vulnerability in the spf_table_content component of Linksys E5600 Router Ver. 1.1.0.26 allows attackers to execute... Read more ➔
CVE-2024-57767 15 Jan 2025
MSFM before v2025.01.01 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /file/download. Read more ➔
CVE-2024-57766 15 Jan 2025
MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/editField. Read more ➔
CVE-2024-57765 15 Jan 2025
MSFM before 2025.01.01 was discovered to contain a SQL injection vulnerability via the s_name parameter at table/list. Read more ➔
CVE-2024-57764 15 Jan 2025
MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/add. Read more ➔
CVE-2024-57763 15 Jan 2025
MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/addField. Read more ➔
CVE-2024-57762 15 Jan 2025
MSFM before v2025.01.01 was discovered to contain a deserialization vulnerability via the pom.xml configuration file. Read more ➔
CVE-2024-57761 15 Jan 2025
An arbitrary file upload vulnerability in the parserXML() method of JeeWMS before v2025.01.01 allows attackers to execute arbitrary code via uploading... Read more ➔
CVE-2024-57760 15 Jan 2025
JeeWMS before v2025.01.01 was discovered to contain a SQL injection vulnerability via the ReportId parameter at /core/CGReportDao.java. Read more ➔
CVE-2024-57757 15 Jan 2025
JeeWMS before v2025.01.01 was discovered to contain a permission bypass in the component /interceptors/AuthInterceptor.cava. Read more ➔
CVE-2024-57473 14 Jan 2025
H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the mac address editing function. Attackers who su... Read more ➔
CVE-2024-54142 14 Jan 2025
Discourse AI is a Discourse plugin which provides a number of AI features. When sharing Discourse AI Bot conversations into posts, if the conversation... Read more ➔
CVE-2024-53277 14 Jan 2025
Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In some cases, form messages can contain HTML markup. This is an intentio... Read more ➔
CVE-2024-47605 14 Jan 2025
silverstripe-asset-admin is a silverstripe assets gallery for asset management. When using the "insert media" functionality, the linked oEmbed JSON in... Read more ➔
CVE-2024-42911 14 Jan 2025
ECOVACS Robotics Deebot T20 OMNI and T20e OMNI before 1.24.0 was discovered to contain a WiFi Remote Code Execution vulnerability. Read more ➔
CVE-2024-57482 14 Jan 2025
H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the 5G wireless network processing function. Attac... Read more ➔
CVE-2024-57480 14 Jan 2025
H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the AP configuration function. Attackers who succe... Read more ➔
CVE-2024-57479 14 Jan 2025
H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the mac address update function. Attackers who suc... Read more ➔
CVE-2024-57471 14 Jan 2025
H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the 2.4G wireless network processing function. Att... Read more ➔
CVE-2024-50861 14 Jan 2025
The ip_mod_dns_key_form.cgi request in GestioIP v3.5.7 is vulnerable to Stored XSS. An attacker can inject malicious code into the "TSIG Key" field, w... Read more ➔
CVE-2024-50859 14 Jan 2025
The ip_import_acl_csv request in GestioIP v3.5.7 is vulnerable to Reflected XSS. When a user uploads an improperly formatted file, the content may be... Read more ➔
CVE-2024-50858 14 Jan 2025
Multiple endpoints in GestioIP v3.5.7 are vulnerable to Cross-Site Request Forgery (CSRF). An attacker can execute actions via the admin's browser by... Read more ➔