5.3

CVSS4.0

CVE-2025-8171 - code-projects Document Management System insert.php unrestricted upload

A vulnerability, which was classified as critical, has been found in code-projects Document Management System 1.0. This issue affects some unknown processing of the file /insert.php. The manipulation of the argument uploaded_file leads to unrestricted upload. The attack may be initiated remotely. T…

πŸ“… Published: July 25, 2025, 9:32 p.m. πŸ”„ Last Modified: July 29, 2025, 2:14 p.m.

8.7

CVSS4.0

CVE-2025-8170 - TOTOLINK T6 MQTT Packet meshSlaveDlfw tcpcheck_net buffer overflow

A vulnerability classified as critical was found in TOTOLINK T6 4.1.5cu.748_B20211015. This vulnerability affects the function tcpcheck_net of the file /router/meshSlaveDlfw of the component MQTT Packet Handler. The manipulation of the argument serverIp leads to buffer overflow. The attack can be i…

πŸ“… Published: July 25, 2025, 9:02 p.m. πŸ”„ Last Modified: July 29, 2025, 2:14 p.m.

8.7

CVSS4.0

CVE-2025-8169 - D-Link DIR-513 HTTP POST Request formSetWanPPTPpath formSetWanPPTPcallback buffer overflow

A vulnerability classified as critical has been found in D-Link DIR-513 1.10. This affects the function formSetWanPPTPcallback of the file /goform/formSetWanPPTPpath of the component HTTP POST Request Handler. The manipulation of the argument curTime leads to buffer overflow. It is possible to init…

πŸ“… Published: July 25, 2025, 8:32 p.m. πŸ”„ Last Modified: July 31, 2025, 5:27 p.m.

8.7

CVSS4.0

CVE-2025-8168 - D-Link DIR-513 formSetWanPPPoE websAspInit buffer overflow

A vulnerability was found in D-Link DIR-513 1.10. It has been rated as critical. Affected by this issue is the function websAspInit of the file /goform/formSetWanPPPoE. The manipulation of the argument curTime leads to buffer overflow. The attack may be launched remotely. The exploit has been discl…

πŸ“… Published: July 25, 2025, 8:02 p.m. πŸ”„ Last Modified: July 31, 2025, 5:28 p.m.

5.1

CVSS4.0

CVE-2025-8167 - code-projects Church Donation System edit_members.php cross site scripting

A vulnerability was found in code-projects Church Donation System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/edit_members.php. The manipulation of the argument fname leads to cross site scripting. The attack can be launche…

πŸ“… Published: July 25, 2025, 7:32 p.m. πŸ”„ Last Modified: July 29, 2025, 2:14 p.m.

5.3

CVSS3.1

CVE-2025-52455 -

Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (EPS Server modules) allows Resource Location Spoofing. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

πŸ“… Published: July 25, 2025, 7:11 p.m. πŸ”„ Last Modified: July 29, 2025, 2:14 p.m.

5.3

CVSS3.1

CVE-2025-52454 -

Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (Amazon S3 Connector modules) allows Resource Location Spoofing. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

πŸ“… Published: July 25, 2025, 7:08 p.m. πŸ”„ Last Modified: July 29, 2025, 2:14 p.m.

8.2

CVSS3.1

CVE-2025-52453 -

Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (Flow Data Source modules) allows Resource Location Spoofing. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

πŸ“… Published: July 25, 2025, 7:05 p.m. πŸ”„ Last Modified: July 29, 2025, 2:14 p.m.

6.9

CVSS4.0

CVE-2025-8166 - code-projects Church Donation System HTTP POST Request index.php sql injection

A vulnerability was found in code-projects Church Donation System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/index.php of the component HTTP POST Request Handler. The manipulation of the argument Username leads to sql injection. It is possible to lau…

πŸ“… Published: July 25, 2025, 7:02 p.m. πŸ”„ Last Modified: July 29, 2025, 2:14 p.m.

8.5

CVSS3.1

CVE-2025-52452 -

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salesforce Tableau Server on Windows, Linux (tabdoc api - duplicate-data-source modules) allows Absolute Path Traversal. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.…

πŸ“… Published: July 25, 2025, 7 p.m. πŸ”„ Last Modified: July 29, 2025, 2:14 p.m.
Total resulsts: 303997
Page 73 of 30,400
Β« previous page Β» next page
Filters