5.1

CVSS4.0

CVE-2025-8743 - Scada-LTS Virtual Data Source Property data_source_edit.shtm cross site scripting

A vulnerability classified as problematic has been found in Scada-LTS up to 2.7.8.1. This affects an unknown part of the file /data_source_edit.shtm of the component Virtual Data Source Property Handler. The manipulation of the argument Name leads to cross site scripting. It is possible to initiate…

πŸ“… Published: Aug. 8, 2025, 11:02 p.m. πŸ”„ Last Modified: Aug. 12, 2025, 2:15 p.m.

6.3

CVSS4.0

CVE-2025-8742 - macrozheng mall Admin Login excessive authentication

A vulnerability was found in macrozheng mall 1.0.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Admin Login. The manipulation leads to improper restriction of excessive authentication attempts. The attack may be launched remotely. The comp…

πŸ“… Published: Aug. 8, 2025, 10:02 p.m. πŸ”„ Last Modified: Aug. 12, 2025, 3:15 p.m.

6.3

CVSS4.0

CVE-2025-8741 - macrozheng mall login cleartext transmission

A vulnerability was found in macrozheng mall up to 1.0.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/login. The manipulation leads to cleartext transmission of sensitive information. The attack can be launched remotely. The com…

πŸ“… Published: Aug. 8, 2025, 9:32 p.m. πŸ”„ Last Modified: Aug. 12, 2025, 3:15 p.m.

4.8

CVSS4.0

CVE-2025-8740 - zhenfeng13 My-Blog Category save cross site scripting

A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0. It has been classified as problematic. Affected is an unknown function of the file /admin/categories/save of the component Category Handler. The manipulation of the argument categoryName leads to cross site scripting. It is possible to la…

πŸ“… Published: Aug. 8, 2025, 9:02 p.m. πŸ”„ Last Modified: Aug. 12, 2025, 3:15 p.m.

5.3

CVSS4.0

CVE-2025-8739 - zhenfeng13 My-Blog save cross-site request forgery

A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0 and classified as problematic. This issue affects some unknown processing of the file /admin/tags/save. The manipulation of the argument tagName leads to cross-site request forgery. The attack may be initiated remotely. The exploit has bee…

πŸ“… Published: Aug. 8, 2025, 8:32 p.m. πŸ”„ Last Modified: Aug. 12, 2025, 3:15 p.m.

0.0

CVE-2025-8771 -

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: This affects a legitimate feature. The cause of the issue is an insecure database configuration established by the …

πŸ“… Published: Aug. 8, 2025, 8:09 p.m. πŸ”„ Last Modified: Aug. 9, 2025, 5:15 a.m.

6.9

CVSS4.0

CVE-2025-8738 - zlt2000 microservices-platform Spring Actuator Interface actuator information disclosure

A vulnerability has been found in zlt2000 microservices-platform up to 6.0.0 and classified as problematic. This vulnerability affects unknown code of the file /actuator of the component Spring Actuator Interface. The manipulation leads to information disclosure. The attack can be initiated remotel…

πŸ“… Published: Aug. 8, 2025, 8:02 p.m. πŸ”„ Last Modified: Aug. 12, 2025, 11:47 a.m.

5.1

CVSS4.0

CVE-2025-8737 - zlt2000 microservices-platform OauthLogoutSuccessHandler.java onLogoutSuccess redirect

A vulnerability, which was classified as problematic, was found in zlt2000 microservices-platform up to 6.0.0. This affects the function onLogoutSuccess of the file src/main/java/com/central/oauth/handler/OauthLogoutSuccessHandler.java. The manipulation of the argument redirect_url leads to open re…

πŸ“… Published: Aug. 8, 2025, 7:32 p.m. πŸ”„ Last Modified: Aug. 12, 2025, 11:47 a.m.

4.8

CVSS4.0

CVE-2025-8736 - GNU cflow Lexer c.c yylex buffer overflow

A vulnerability, which was classified as critical, has been found in GNU cflow up to 1.8. Affected by this issue is the function yylex of the file c.c of the component Lexer. The manipulation leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclosed …

πŸ“… Published: Aug. 8, 2025, 7:02 p.m. πŸ”„ Last Modified: Aug. 12, 2025, 7:48 a.m.

4.8

CVSS4.0

CVE-2025-8735 - GNU cflow Lexer c.c yylex null pointer dereference

A vulnerability classified as problematic was found in GNU cflow up to 1.8. Affected by this vulnerability is the function yylex of the file c.c of the component Lexer. The manipulation leads to null pointer dereference. An attack has to be approached locally. The exploit has been disclosed to the …

πŸ“… Published: Aug. 8, 2025, 6:32 p.m. πŸ”„ Last Modified: Aug. 12, 2025, 7:48 a.m.
Total resulsts: 305204
Page 54 of 30,521
Β« previous page Β» next page
Filters