6.9

CVSS4.0

CVE-2025-3371 - PCMan FTP Server DELETE Command buffer overflow

A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unknown processing of the component DELETE Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the pub…

πŸ“… Published: April 7, 2025, 2:31 p.m. πŸ”„ Last Modified: May 16, 2025, 3:01 p.m.

9.8

CVSS3.1

CVE-2025-3248 - Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code

Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.

πŸ“… Published: April 7, 2025, 2:22 p.m. πŸ”„ Last Modified: Nov. 29, 2025, 2:05 a.m.

6.9

CVSS4.0

CVE-2025-3370 - PHPGurukul Men Salon Management System admin-profile.php sql injection

A vulnerability classified as critical has been found in PHPGurukul Men Salon Management System 1.0. This affects an unknown part of the file /admin/admin-profile.php. The manipulation of the argument contactnumber leads to sql injection. It is possible to initiate the attack remotely. The exploit …

πŸ“… Published: April 7, 2025, 2 p.m. πŸ”„ Last Modified: May 7, 2025, 4:07 p.m.

5.3

CVSS4.0

CVE-2025-3369 - xxyopen Novel-Plus list sql injection

A vulnerability was found in xxyopen Novel-Plus 5.1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /novel/friendLink/list. The manipulation of the argument sort leads to sql injection. The attack may be launched remotely. The exploit has been disc…

πŸ“… Published: April 7, 2025, 1:31 p.m. πŸ”„ Last Modified: Oct. 10, 2025, 4:49 p.m.

7.5

CVSS3.1

CVE-2025-30195 - A crafted zone can lead to an illegal memory access in the PowerDNS Recursor

An attacker can publish a zone containing specific Resource Record Sets. Processing and caching results for these sets can lead to an illegal memory accesses and crash of the Recursor, causing a denial of service. The remedy is: upgrade to the patched 5.2.1 version. We would like to thank Volodym…

πŸ“… Published: April 7, 2025, 1:24 p.m. πŸ”„ Last Modified: April 15, 2026, 12:35 a.m.

2.7

CVSS3.1

CVE-2025-27686 -

Dell Unisphere for PowerMax, version(s) prior to 10.2.0.9 and PowerMax version(s) prior to PowerMax 9.2.4.15, contain an Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this v…

πŸ“… Published: April 7, 2025, 1:23 p.m. πŸ”„ Last Modified: Jan. 12, 2026, 7:02 p.m.

6.9

CVSS4.0

CVE-2025-3353 - PHPGurukul Men Salon Management System add-services.php sql injection

A vulnerability was found in PHPGurukul Men Salon Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/add-services.php. The manipulation of the argument cost leads to sql injection. It is possible to initiate the attack remotely. The exploit ha…

πŸ“… Published: April 7, 2025, 1 p.m. πŸ”„ Last Modified: April 11, 2025, 12:55 p.m.

6.9

CVSS4.0

CVE-2025-3352 - PHPGurukul Old Age Home Management System edit-scdetails.php sql injection

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit-scdetails.php. The manipulation of the argument contnum leads to sql injection. The attack may be launched remotely. Th…

πŸ“… Published: April 7, 2025, 12:31 p.m. πŸ”„ Last Modified: May 7, 2025, 4:14 p.m.

5.9

CVSS3.1

CVE-2025-0050 - Mali GPU Userspace Driver allows an Out-of-Bounds access

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to make valid GPU processing operations, in…

πŸ“… Published: April 7, 2025, 12:02 p.m. πŸ”„ Last Modified: Dec. 18, 2025, 3:27 p.m.

6.9

CVSS4.0

CVE-2025-3351 - PHPGurukul Old Age Home Management System login.php sql injection

A vulnerability has been found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/login.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely.…

πŸ“… Published: April 7, 2025, noon πŸ”„ Last Modified: May 7, 2025, 4:46 p.m.
Total resulsts: 345142
Page 5581 of 34,515
Β« previous page Β» next page
Filters