405,427 results · Feed
-
High 8.8
Privilege escalation in Firefox for iOS
Privilege escalation in Firefox for iOS. This vulnerability was fixed in Firefox for iOS 160.0.
-
High 7.3
Other issue in Firefox for iOS
Other issue in Firefox for iOS. This vulnerability was fixed in Firefox for iOS 160.0.
-
High 8.8
Privilege escalation in the Reader View component in Firefox for iOS
Privilege escalation in the Reader View component in Firefox for iOS. This vulnerability was fixed in Firefox for iOS 160.0.
-
High 8.8
Command Injection in Osbil Technology's Ltd's oPanel
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Osbil Technology Ltd.Osbil Technology Ltd. OPanel allows OS Command Injection. This issue affects oPanel: before 1.20.66.
-
Medium 4.8
pdfmake < 0.3.14 Shared Cache Access Policy Bypass
pdfmake before 0.3.14 contains a shared resource caching vulnerability that allows attackers to access cross-document cached resources by exploiting a process-wide virtual file system keyed only by URL without request headers or per-document access enforcemen…
-
Medium 4.8
Infoblox NIOS version upto 9.1.0 contain a vulnerability related to improper input validation that allows a stored XSS
-
Medium 5.3
PipraPay pp-token anti-CSRF pp-adapter.php hash_hmac hard-coded credentials
A weakness has been identified in PipraPay 3.0.0. Affected by this vulnerability is the function hash_hmac of the file pp-content/pp-include/pp-adapter.php of the component pp-token anti-CSRF Handler. Executing a manipulation can lead to hard-coded credential…
-
Medium 5.3
AshAi sends unrecognized tool errors verbatim to MCP clients and the model, disclosing internal details
Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_ai allows a caller of an AshAi tool to read internal error details, including module names and data values, by making a tool call fail. AshAi.ToToolError gained an i…
-
Medium 6.5
Gstreamer1-plugins-bad-free: gst-plugins-bad: use of uninitialized gsth265hrdparams in gst_h265_parse_vps() multi-hrd workaround loop
A flaw was found in GStreamer's gst-plugins-bad package. A use of uninitialized memory vulnerability exists in the H.265 (HEVC) bitstream parser when processing Video Parameter Sets that declare more than one HRD (Hypothetical Reference Decoder) parameter set…
-
Medium 6.1
Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: out-of-bounds read in mxfdemux via unchecked delta_id and slice index
A flaw was found in GStreamer's MXF demuxer plugin (gst-plugins-bad). When processing a specially crafted MXF media file, the demuxer indexes its internal delta-entry and slice-offset tables using values from the file without validating that they are within t…
-
High 8.2
Gstreamer1-plugins-good: gstreamer1-plugins-good: out-of-bounds heap read in mtap16/mtap24 h.264 rtp depayloader via signed/unsigned underflow
A flaw was found in GStreamer's gst-plugins-good, specifically in the H.264 RTP depayloader element. When processing MTAP16 or MTAP24 multi-time aggregation RTP packets, a signed/unsigned integer conversion error causes the remaining-length counter to underfl…
-
Medium 4.7
PipraPay ZIP Archive system-settings-import unrestricted upload
A security flaw has been discovered in PipraPay 3.0.0. Affected is the function system-settings-import of the file /sumo166/CVE-apply/blob/main/PipraPay/PipraPay/system-settings-import of the component ZIP Archive Handler. Performing a manipulation results in…
-
Medium 6.5
WordPress ShopEngine plugin <= 4.9.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wpmet ShopEngine shopengine allows Stored XSS.This issue affects ShopEngine: from n/a through 4.9.8.
-
Medium 6.9
Bruteforce Protection Bypass in WidzialniCMS
WidzialniCMS is vulnerable to Bruteforce Protection Bypass in the login functionality. The cookie-based lockout can be bypassed by omitting the login_count and login_timeout cookies, allowing an unauthenticated attacker to perform an unlimited number of login…
-
Medium 5.1
Reflected XSS in WidzialniCMS
WidzialniCMS is vulnerable to Reflected XSS in the /index.php endpoint. An attacker can prepare an URL that, when opened, results in arbitrary JavaScript execution in the victim's browser, allowing e.g session cookie theft. This issue has been fixed in versio…
-
Critical 10.0
Remote Code Execution via Unrestricted File Upload in WidzialniCMS
WidzialniCMS is vulnerable to Unrestricted File Upload in the /panel/upload.php endpoint. Due to a client-controlled permission check parameter and insufficient validation of the uploadPath parameter, an unauthenticated attacker can upload arbitrary files to …
-
Critical 10.0CVE-2026-110468 Public exploit
Remote Code Execution via Unrestricted File Upload in WidzialniCMS
WidzialniCMS is vulnerable to Unrestricted File Upload in the /panel/controllers/save_photo.php endpoint. Due to a client-controlled permission check parameter and insufficient validation of the currentpath parameter, an unauthenticated attacker can upload ar…
-
Medium 5.3
olivier-ls PHP-FTS Storage.php open toctou
A vulnerability was identified in olivier-ls PHP-FTS up to 1.1.3. This impacts the function TrigramIndex::open of the file Storage.php. Such manipulation leads to time-of-check time-of-use. The attack needs to be performed locally. Upgrading to version 1.1.4 …
-
Medium 4.4
SQL injection vulnerability in Magistra software
An attacker can inject malicious SQL statements through user-controlled input, allowing unauthorized access to, modification of, or disclosure of database data.
-
Medium 6.3
Improper verification of downloaded upgrades
The software downloads upgrade files without performing integrity checks, allowing the installation of tampered updates.
-
Medium 6.1
Undocumented backdoor allows authentication bypass in Magistra software
Magistra software contains undocumented backdoor functionality that allows authentication bypass and the creation of a privileged user account without credential verification.
-
Medium 6.0
Multiple embedded secrets and weak algorithms in Magistra
The Magistra software uses weak custom encryption, relies on an outdated compression algorithm to protect the database, and contains embedded secrets.
-
High 8.1
Privilege Escalation in C-Prot's C-Prot AppDefense
Improperly controlled modification of Dynamically-Determined object attributes vulnerability in C-Prot Inc. C-Prot AppDefense allows Privilege Escalation. This issue affects C-Prot AppDefense: before 1.0.2729.
-
Critical 9.3CVE-2026-124079 Public exploit
rConfig Core 8.0.0 before 8.2.19 and rConfig Pro before 8.4.1 contain a deserialization of untrusted data vulnerability…
-
High 8.8CVE-2026-94434 Public exploit
OS Command Injection Leading to Root Code Execution in TÜBİTAK BİLGEM's Pardus Boot Repair
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: from 1.0…
-
High 7.1
WordPress Invoice Gateway for WooCommerce – Invoice Payment Gateway plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rymera Web Co Invoice Gateway for WooCommerce – Invoice Payment Gateway invoice-gateway-for-woocommerce allows Reflected XSS.This issue affects Invoice Gatew…
-
High 7.5
WordPress iubenda plugin <= 3.13.6 - Denial of Service Attack vulnerability
Allocation of Resources Without Limits or Throttling vulnerability in iubenda iubenda iubenda-cookie-law-solution allows HTTP DoS.This issue affects iubenda: from n/a through 3.13.6.
-
Medium 4.4
Multiple sensitive authentication data exposed
Multiple sensitive authentication data, including credentials, OAuth-related secrets, session information, and authentication artifacts, are exposed through application logs and persistent client-side storage, enabling unauthorized access and session compromi…
-
Medium 5.9
AIS stores authorization state in locally modifiable databases
Administrative roles and module permissions are stored in mutable local database fields, allowing privilege escalation for attackers with database write access.
-
Medium 6.1
Default ODBC credentials
Default credentials permit access through AcuXDBC.
-
High 7.2
Insecure software update mechanism
The application implements software update functionality without adequate authenticity and integrity validation, allowing update packages to be accepted without sufficient cryptographic verification.
-
High 7.2
Multiple Hardcoded Credentials
Multiple hardcoded credentials are embedded within product components and administrative functionalities. These credentials may enable unauthorized access to privileged accounts, services, or application features across affected deployments.
-
High 7.2
AIS XML parsers allow external entity resolution
XML parsers process attacker-influenced update manifests or network responses with external entity resolution enabled, potentially allowing XML External Entity (XXE) attacks.
-
Medium 4.3
AIS products expose clinical and personal data via logs and telemetry
Shared telemetry and logging components store or transmit patient and doctor identifiers, clinical information, and low-entropy identifiers without adequate pseudonymization or protection.
-
Medium 5.8
AIS products use vendor-wide hard-coded database credentials
Shared components expose hard-coded Access, workgroup, CCBasic, DBISAM, and related database credentials that are identical across installations.
-
Medium 5.8
AIS shared cryptographic services use fixed cryptographic secrets
Shared cryptographic services use fixed vendor-wide secrets, deterministic IVs, null salts, and reversible transformations to protect credentials, IPC data, configuration values, and clinical fields.
-
Critical 9.2
AIS update mechanism executes unverified code
Update components download and execute code without proper authenticity verification, relying on ignored hashes or forgeable checksums. Some update paths also permit archive traversal or script execution.
-
High 8.0
AIS PersonnelService client performs unauthenticated doctor-specific operations
The shared client accepts caller-controlled doctor identifiers for read and write operations without requiring authentication or authorization credentials.
-
High 8.0
AIS embedded private keys enable practitioner impersonation
Embedded private keys protected by a shared password can be used to sign practitioner assertions for arbitrary practitioner identifiers, enabling unauthorized practitioner token requests.
-
Medium 6.3
AIS PasswordSOS permits authentication without legitimate credentials
A time-derived emergency password can be derived from publicly available application code, enabling authentication without legitimate credentials.