Archive
18 February 2025
Vulnerabilities first published on this day (UTC), newest first.
162 results · Feed
-
High 7.3
The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection …
-
High 7.3
The LuxCal Web Calendar prior to 5.3.3M (MySQL version) and prior to 5.3.3L (SQLite version) contains an SQL injection …
-
Medium 6.4
The administrative web interface of a Netgear C7800 Router running firmware version 6.01.07 (and possibly others) authe…
-
Critical 9.8
A time-based SQL injection vulnerability in the login page of BoardRoom Limited Dividend Distribution Tax Election Syst…
-
High 7.5
An issue was discovered in Fluent Bit 3.1.9. When the Prometheus Remote Write input plugin is running and listening on …
-
High 7.5
An issue was discovered in Fluent Bit 3.1.9. When the OpenTelemetry input plugin is running and listening on an IP addr…
-
Medium 6.8
Insecure Permissions in Atos Eviden IDRA and IDCA before 2.7.0. A highly trusted role (Config Admin) could exceed their…
-
Critical 9.9
Incorrect Access Control vulnerability in Atos Eviden IDRA before 2.6.1 could allow the possibility to obtain CA signin…
-
High 8.8CVE-2024-57046 Scanner template
A vulnerability in the Netgear DGN2200 router with firmware version v1.0.0.46 and earlier permits unauthorized individu…
-
Low 2.0
A stack consumption issue in sqfs_size in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with d…
-
Critical 9.8
A vulnerability in the D-Link DIR-859 router with firmware version A3 1.05 and earlier permits unauthorized individuals…
-
High 7.1
An integer overflow in sqfs_inode_size in Das U-Boot before 2025.01-rc1 occurs in the symlink size calculation via a cr…
-
High 7.1
An integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem w…
-
Medium 5.0
Server-Side Access Control Bypass vulnerability in WombatDialer before 25.02 could allow unauthorized users to potentia…
-
High 7.1
An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 va…
-
Medium 5.4
Incorrect cookie session handling in WombatDialer before 25.02 results in the full session identity being written to sy…
-
High 7.1
sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for …
-
High 7.1
Integer overflows in memory allocation in Das U-Boot before 2025.01-rc1 occur for a crafted squashfs filesystem via sbr…
-
High 8.0
An issue was discovered in Atos Eviden IDRA before 2.7.1. A highly trusted role (Config Admin) could leverage a race co…
-
High 7.8
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleI…
-
Medium 5.4CVE-2024-56882 Public exploit
Sage DPW before 2024_12_000 is vulnerable to Cross Site Scripting (XSS). Low-privileged Sage users with employee role p…
-
High 8.1CVE-2024-56883 Public exploit
Sage DPW before 2024_12_001 is vulnerable to Incorrect Access Control. The implemented role-based access controls are n…
-
High 7.8
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To…
-
Low 2.9
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.
-
Medium 5.7
A buffer overflow vulnerability was discovered in D-Link DSL-3782 v1.01 via the destination, netmask, and gateway param…
-
Medium 6.5
FFmpeg git-master before commit d5873b was discovered to contain a memory leak in the component libavutil/mem.c.
-
Medium 5.7
A buffer overflow vulnerability was discovered in D-Link DSL-3782 v1.01, triggered by the destination, netmask and gate…
-
High 8.0
An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the inIP, insPort, inePort, exsPort, …
-
Medium 5.3
FFmpeg git master before commit c08d30 was discovered to contain a memory leak in the avformat_free_context function in…
-
High 7.5
A NULL pointer dereference in the component /libsrc/dcrleccd.cc of DCMTK v3.6.9+ DEV allows attackers to cause a Denial…
-
Medium 4.3
FFmpeg git master before commit fd1772 was discovered to contain a NULL pointer dereference via the component libavform…
-
Medium 6.5
DCMTK v3.6.9+ DEV was discovered to contain a buffer overflow via the component /dcmimgle/diinpxt.h.
-
Medium 5.7
A buffer overflow vulnerability was discovered in D-Link DSL-3782 v1.01 via the sstartip, sendip, dstartip, and dendip …
-
High 8.8
FFmpeg git-master before commit d5873b was discovered to contain a memory leak in the component libavutil/iamf.c.
-
High 8.0
An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the samba_wg and samba_nbn parameters…
-
Medium 5.3
A buffer overflow in DCMTK git master v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DCM…
-
High 8.0
An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the public_type parameter. This vulne…
-
Critical 9.8
Insufficient tracking and releasing of allocated used memory in libx264 git master allows attackers to execute arbitrar…
-
Medium 5.3
A heap buffer overflow vulnerability in FFmpeg before commit 4bf784c allows attackers to trigger a memory corruption vi…
-
Medium 6.5
A reachable assertion in FFmpeg git-master commit N-113007-g8d24a28d06 allows attackers to cause a Denial of Service (D…