Browse CVEs

CRITICAL 9.8 CVE-2025-15092 A vulnerability was identified in UTT 进取 512W up to 1.7.7-171114. Impacted is the function strcpy of the file /goform/ConfigExceptMSN. Such manipul… 512w Firmware after 1.7.7-171114 Fix from $2,3002025-12-26 CRITICAL 9.5 CVE-2025-68937 Forgejo before 13.0.2 allows attackers to write to unintended files, and possibly obtain server shell access, because of mishandling of out-of-reposi… Mitigation only Fix from $2,3002025-12-26 CRITICAL 9.8 CVE-2025-15091 A vulnerability was determined in UTT 进取 512W up to 1.7.7-171114. This issue affects the function strcpy of the file /goform/formPictureUrl. This m… 512w Firmware after 1.7.7-171114 Fix from $2,3002025-12-26 CRITICAL 9.8 CVE-2025-15090 A vulnerability was found in UTT 进取 512W up to 1.7.7-171114. This vulnerability affects the function strcpy of the file /goform/formConfigNoticeCon… 512w Firmware after 1.7.7-171114 Fix from $2,3002025-12-25 CRITICAL 9.8 CVE-2025-15089 A vulnerability has been found in UTT 进取 512W up to 1.7.7-171114. This affects the function strcpy of the file /goform/APSecurity. The manipulation… 512w Firmware after 1.7.7-171114 Fix from $2,3002025-12-25 CRITICAL 9.1 CVE-2025-59683 Pexip Infinity 15.0 through 38.0 before 38.1 has Improper Access Control in the Secure Scheduler for Exchange service, when used with Office 365 Lega… Pexip Infinity 38.1+ Fix from $2,3002025-12-25 CRITICAL 9.8 CVE-2025-15078 A vulnerability was detected in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /list_report.php.… Student Management System Mitigation only Fix from $2,3002025-12-25 CRITICAL 9.8 CVE-2025-15077 A security vulnerability has been detected in itsourcecode Student Management System 1.0. The affected element is an unknown function of the file /fo… Student Management System Mitigation only Fix from $2,3002025-12-25 CRITICAL 9.8 CVE-2025-15075 A security flaw has been discovered in itsourcecode Student Management System 1.0. This issue affects some unknown processing of the file /student_p.… Student Management System Mitigation only Fix from $2,3002025-12-25 CRITICAL 9.8 CVE-2025-15074 A vulnerability was identified in itsourcecode Online Frozen Foods Ordering System 1.0. This vulnerability affects unknown code of the file /customer… Online Frozen Foods Ordering System Mitigation only Fix from $2,3002025-12-25 CRITICAL 9.8 CVE-2025-15073 A vulnerability was determined in itsourcecode Online Frozen Foods Ordering System 1.0. This affects an unknown part of the file /contact_us.php. Thi… Online Frozen Foods Ordering System Mitigation only Fix from $2,3002025-12-24 CRITICAL 9.8 CVE-2025-8769 Telenium Online Web Application is vulnerable due to a Perl script that is called to load the login page. Due to improper input validation, an atta… Mitigation only Fix from $2,3002025-12-24 CRITICAL 9.8 CVE-2019-25249 devolo dLAN 500 AV Wireless+ 3.1.0-1 contains an authentication bypass vulnerability that allows attackers to enable hidden services through the html… Mitigation only Fix from $2,3002025-12-24 CRITICAL 9.8 CVE-2019-25241 FaceSentry Access Control System 6.4.8 contains a critical authentication vulnerability with hard-coded SSH credentials for the wwwuser account. Atta… Facesentry Access Control System Firmware Mitigation only Fix from $2,3002025-12-24 CRITICAL 9.8 CVE-2019-25240 Rifatron 5brid DVR contains an unauthenticated vulnerability in the animate.cgi script that allows unauthorized access to live video streams. Attacke… Mitigation only Fix from $2,3002025-12-24 CRITICAL 9.8 CVE-2019-25237 V-SOL GPON/EPON OLT Platform v2.03 contains a privilege escalation vulnerability that allows normal users to gain administrative access by manipulati… Mitigation only Fix from $2,3002025-12-24 CRITICAL 9.8 CVE-2019-25236 iSeeQ Hybrid DVR WH-H4 1.03R contains an unauthenticated vulnerability in the get_jpeg script that allows unauthorized access to live video streams. … Mitigation only Fix from $2,3002025-12-24 CRITICAL 9.8 CVE-2019-25235 Smartwares HOME easy 1.0.9 contains an authentication bypass vulnerability that allows unauthenticated attackers to access administrative web pages b… Mitigation only Fix from $2,3002025-12-24 CRITICAL 9.8 CVE-2018-25154 GNU Barcode 0.99 contains a buffer overflow vulnerability in its code 93 encoding process that allows attackers to trigger memory corruption. Attacke… Mitigation only Fix from $2,3002025-12-24 CRITICAL 9.8 CVE-2018-25142 NovaRad NovaPACS Diagnostics Viewer 8.5.19.75 contains an unauthenticated XML External Entity (XXE) injection vulnerability in XML preference import … Mitigation only Fix from $2,3002025-12-24 CRITICAL 9.8 CVE-2018-25138 FLIR AX8 Thermal Camera 1.32.16 contains hard-coded SSH and web panel credentials that cannot be changed through normal camera operations. Attackers … Flir Ax8 Firmware Mitigation only Fix from $2,3002025-12-24 CRITICAL 9.8 CVE-2018-25135 Anviz AIM CrossChex Standard 4.3.6.0 contains a CSV injection vulnerability that allows attackers to execute commands by inserting malicious formulas… Mitigation only Fix from $2,3002025-12-24 CRITICAL 9.8 CVE-2018-25134 Synaccess netBooter NP-02x/NP-08x 6.8 contains an authentication bypass vulnerability in the webNewAcct.cgi script that allows unauthenticated attack… Mitigation only Fix from $2,3002025-12-24 CRITICAL 9.8 CVE-2025-68745 In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Clear cmds after chip reset Commit aefed3e5548f ("scsi: qla2xxx:… No fix yet Fix from $2,3002025-12-24 CRITICAL 9.8 CVE-2025-68741 In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix improper freeing of purex item In qla2xxx_process_purls_iocb… No fix yet Fix from $2,3002025-12-24 CRITICAL 9.8 CVE-2023-54094 In the Linux kernel, the following vulnerability has been resolved: net: prevent skb corruption on frag list segmentation Ian reported several skb … No fix yet Fix from $2,3002025-12-24 CRITICAL 9.8 CVE-2023-54090 In the Linux kernel, the following vulnerability has been resolved: ixgbe: Fix panic during XDP_TX with > 64 CPUs Commit 4fe815850bdc ("ixgbe: let … Mitigation only Fix from $2,3002025-12-24 CRITICAL 9.8 CVE-2023-54076 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix missed ses refcounting Use new cifs_smb_ses_inc_refcount() hel… No fix yet Fix from $2,3002025-12-24 CRITICAL 9.8 CVE-2022-50717 In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: add bounds check on Transfer Tag ttag is used as an index to get cmd… No fix yet Fix from $2,3002025-12-24 CRITICAL 9.8 CVE-2025-68726 In the Linux kernel, the following vulnerability has been resolved: crypto: aead - Fix reqsize handling Commit afddce13ce81d ("crypto: api - Add re… No fix yet Fix from $2,3002025-12-24