5.3

CVSS4.0

CVE-2025-1357 - Seventh D-Guard HTTP GET Request path traversal

A vulnerability classified as problematic has been found in Seventh D-Guard up to 20250206. This affects an unknown part of the component HTTP GET Request Handler. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public …

πŸ“… Published: Feb. 16, 2025, 6:31 p.m. πŸ”„ Last Modified: April 15, 2026, 12:35 a.m.

5.3

CVSS4.0

CVE-2025-1356 - needyamin Library Card System card.php sql injection

A vulnerability was found in needyamin Library Card System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file card.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed t…

πŸ“… Published: Feb. 16, 2025, 5:31 p.m. πŸ”„ Last Modified: Feb. 25, 2025, 3:40 a.m.

6.9

CVSS4.0

CVE-2025-1355 - needyamin Library Card System Add Picture signup.php unrestricted upload

A vulnerability was found in needyamin Library Card System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /signup.php of the component Add Picture. The manipulation leads to unrestricted upload. The attack can be launched remotely. The …

πŸ“… Published: Feb. 16, 2025, 5 p.m. πŸ”„ Last Modified: Feb. 25, 2025, 3:41 a.m.

4.8

CVSS4.0

CVE-2025-1354 -

A cross-site scripting (XSS) vulnerability in the RT-N10E/ RT-N12E 2.0.0.x firmware . This vulnerability caused by improper input validation and can be triggered via the manipulation of the SSID argument in the sysinfo.asp file, leading to disclosure of sensitive information. Note: All versions of…

πŸ“… Published: Feb. 16, 2025, 3:31 p.m. πŸ”„ Last Modified: April 15, 2026, 12:35 a.m.

7.3

CVSS4.0

CVE-2025-1353 - Kong Insomnia profapi.dll untrusted search path

A vulnerability was found in Kong Insomnia up to 10.3.0 and classified as critical. This issue affects some unknown processing in the library profapi.dll. The manipulation leads to untrusted search path. An attack has to be approached locally. The complexity of an attack is rather high. The exploit…

πŸ“… Published: Feb. 16, 2025, 3 p.m. πŸ”„ Last Modified: April 15, 2026, 12:35 a.m.

2.3

CVSS4.0

CVE-2025-1352 - GNU elfutils eu-readelf libdw_alloc.c __libdw_thread_tail memory corruption

A vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function __libdw_thread_tail in the library libdw_alloc.c of the component eu-readelf. The manipulation of the argument w leads to memory corruption. The attack can be initiated remotely.…

πŸ“… Published: Feb. 16, 2025, 2:31 p.m. πŸ”„ Last Modified: Nov. 3, 2025, 8:34 p.m.

6.3

CVSS4.0

CVE-2025-1341 - PMWeb Setting weak password

A vulnerability, which was classified as problematic, was found in PMWeb 7.2.0. This affects an unknown part of the component Setting Handler. The manipulation leads to weak password requirements. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploi…

πŸ“… Published: Feb. 16, 2025, 2 p.m. πŸ”„ Last Modified: Oct. 16, 2025, 7:48 p.m.

8.7

CVSS4.0

CVE-2025-1340 - TOTOLINK X18 cstecgi.cgi setPasswordCfg stack-based overflow

A vulnerability classified as critical has been found in TOTOLINK X18 9.1.0cu.2024_B20220329. Affected is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi. The manipulation as part of String leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit …

πŸ“… Published: Feb. 16, 2025, 1:31 p.m. πŸ”„ Last Modified: July 13, 2025, 11:07 a.m.

5.3

CVSS4.0

CVE-2025-1339 - TOTOLINK X18 cstecgi.cgi setL2tpdConfig os command injection

A vulnerability was found in TOTOLINK X18 9.1.0cu.2024_B20220329. It has been rated as critical. This issue affects the function setL2tpdConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument enable leads to os command injection. The attack may be initiated remotely. The exploit …

πŸ“… Published: Feb. 16, 2025, noon πŸ”„ Last Modified: July 12, 2025, 3:26 p.m.

6.9

CVSS4.0

CVE-2025-1338 - NUUO Camera handle_config.php print_file command injection

A vulnerability was found in NUUO Camera up to 20250203. It has been declared as critical. This vulnerability affects the function print_file of the file /handle_config.php. The manipulation of the argument log leads to command injection. The attack can be initiated remotely. The exploit has been d…

πŸ“… Published: Feb. 16, 2025, 11 a.m. πŸ”„ Last Modified: April 15, 2026, 12:35 a.m.
Total resulsts: 349182
Page 6719 of 34,919
Β« previous page Β» next page
Filters