5.3

CVSS4.0

CVE-2025-3686 - misstt123 oasys show image path traversal

A vulnerability classified as problematic was found in misstt123 oasys 1.0. Affected by this vulnerability is the function image of the file /show. The manipulation leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This produ…

📅 Published: April 16, 2025, 11:31 a.m. 🔄 Last Modified: June 25, 2025, 6:53 p.m.

5.3

CVSS4.0

CVE-2025-3685 - code-projects Patient Record Management System edit_fpatient.php sql injection

A vulnerability classified as critical has been found in code-projects Patient Record Management System 1.0. Affected is an unknown function of the file /edit_fpatient.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been…

📅 Published: April 16, 2025, 11 a.m. 🔄 Last Modified: May 28, 2025, 9:09 p.m.

5.3

CVSS4.0

CVE-2025-3684 - Xianqi Kindergarten Management System Child Management stu_list.php sql injection

A vulnerability was found in Xianqi Kindergarten Management System 2.0 Bulid 20190808. It has been rated as critical. This issue affects some unknown processing of the file stu_list.php of the component Child Management. The manipulation of the argument sex leads to sql injection. The attack may be…

📅 Published: April 16, 2025, 11 a.m. 🔄 Last Modified: April 24, 2025, 12:58 p.m.

6.9

CVSS4.0

CVE-2025-3683 - PCMan FTP Server SIZE Command buffer overflow

A vulnerability was found in PCMan FTP Server 2.0.7. It has been declared as critical. This vulnerability affects unknown code of the component SIZE Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may…

📅 Published: April 16, 2025, 10:31 a.m. 🔄 Last Modified: April 29, 2025, 8:18 p.m.

6.9

CVSS4.0

CVE-2025-3682 - PCMan FTP Server PASV Command buffer overflow

A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as critical. This affects an unknown part of the component PASV Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and ma…

📅 Published: April 16, 2025, 10:31 a.m. 🔄 Last Modified: April 29, 2025, 8:17 p.m.

0.0

CVE-2025-30960 - WordPress FS Poster plugin <= 6.5.8 - Subscriber+ Site Wide Broken Access Control vulnerability

Missing Authorization vulnerability in fs-code FS Poster fs-poster.This issue affects FS Poster: from n/a through <= 6.5.8.

📅 Published: April 16, 2025, 10:23 a.m. 🔄 Last Modified: April 1, 2026, 5:20 p.m.

6.9

CVSS4.0

CVE-2025-3681 - PCMan FTP Server MODE Command buffer overflow

A vulnerability was found in PCMan FTP Server 2.0.7 and classified as critical. Affected by this issue is some unknown functionality of the component MODE Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public an…

📅 Published: April 16, 2025, 10 a.m. 🔄 Last Modified: April 29, 2025, 8:17 p.m.

6.9

CVSS4.0

CVE-2025-3680 - PCMan FTP Server LANG Command buffer overflow

A vulnerability has been found in PCMan FTP Server 2.0.7 and classified as critical. Affected by this vulnerability is an unknown functionality of the component LANG Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to th…

📅 Published: April 16, 2025, 9:31 a.m. 🔄 Last Modified: April 29, 2025, 8:21 p.m.

6.9

CVSS4.0

CVE-2025-3679 - PCMan FTP Server HOST Command buffer overflow

A vulnerability, which was classified as critical, was found in PCMan FTP Server 2.0.7. Affected is an unknown function of the component HOST Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and ma…

📅 Published: April 16, 2025, 9:31 a.m. 🔄 Last Modified: April 23, 2025, 3:55 p.m.

5.3

CVSS3.1

CVE-2025-27936 - Webhook Secret Exposure via Timing attack in MSteams plugin

Mattermost Plugin MSTeams versions <2.1.0 and Mattermost Server versions 10.5.x <=10.5.1 with the MS Teams plugin enabled fail to perform constant time comparison on a MSTeams plugin webhook secret which allows an attacker to retrieve the webhook secret of the MSTeams plugin via a timing attack dur…

📅 Published: April 16, 2025, 9:14 a.m. 🔄 Last Modified: Jan. 14, 2026, 2:29 p.m.
Total resulsts: 343924
Page 5252 of 34,393
« previous page » next page
Filters