How the CVE Works CVE-2025-21550 is a Cross-Site Request Forgery (CSRF) vulnerability in Oracle Financial Services Behavior Detection Platform’s Web
How the CVE Works CVE-2025-21489 is a vulnerability in Oracle Advanced Outbound Telephony (component: Region Mapping) affecting versions 12.2.3-12.2.10. An
How CVE-2025-21506 Works This vulnerability exists in Oracle Project Foundation (component: Technology Foundation) due to improper access controls in HTTP
How the CVE Works CVE-2025-21533 is a privilege escalation vulnerability in Oracle VM VirtualBox’s Core component. It affects versions prior
How the CVE Works CVE-2025-21549 exploits a flaw in Oracle WebLogic Server’s HTTP/2 protocol handling, where malformed HTTP/2 requests cause
How the CVE Works CVE-2025-21547 is an unauthenticated remote code execution vulnerability in Oracle Hospitality OPERA 5’s Opera Servlet component.
How the CVE Works CVE-2025-21516 exploits an access control flaw in Oracle Customer Care (part of Oracle E-Business Suite) versions
How the CVE Works CVE-2025-4043 allows an admin user to improperly modify the `/etc/rc.local` file, which executes during system boot.
How the CVE Works The vulnerability in The-wound WordPress theme (v0.0.1) stems from insufficient input validation when processing user-supplied parameters
How the CVE Works CVE-2025-4792 is a critical buffer overflow vulnerability in FreeFloat FTP Server 1.0, specifically in the MDELETE
How the CVE Works The vulnerability in Netgear EX6120 firmware version 1.0.0.68 resides in the `fwAcosCgiInbound` function, which mishandles the
How CVE-2025-20188 Works The vulnerability exists in Cisco IOS XE Software for Wireless LAN Controllers due to a hard-coded JSON
How CVE-2025-4727 Works The vulnerability in Meteor (up to v3.2.1) stems from inefficient regular expression handling in the `Object.assign` function
How the CVE Works CVE-2025-46721 affects the Go library nosurf, a CSRF protection middleware. Versions before 1.2.0 incorrectly classify all
How the CVE Works CVE-2025-5050 is a critical buffer overflow vulnerability in FreeFloat FTP Server 1.0, specifically affecting the BELL
How the CVE Works The vulnerability in Open5GS (up to v2.7.2) resides in the `amf_nsmf_pdusession_handle_update_sm_context` function within src/amf/nsmf-handler.c. A remote
How the CVE Works The vulnerability in Netgear WG302v2 (up to firmware 5.2.9) resides in the `ui_get_input_value` function, where improper
How the CVE Works CVE-2025-5051 is a critical buffer overflow vulnerability in FreeFloat FTP Server 1.0, specifically within the BINARY
How the CVE Works CVE-2025-5049 is a critical buffer overflow vulnerability in FreeFloat FTP Server 1.0, specifically within the APPEND
How the CVE Works CVE-2025-2357 is a critical memory corruption vulnerability in DCMTK 3.6.9, specifically affecting the `dcmjpls` JPEG-LS decoder.
How the CVE Works CVE-2025-29976 is an improper privilege management vulnerability in Microsoft Office SharePoint. An authenticated attacker can exploit
How the CVE Works CVE-2025-49080 is a memory management flaw in Absolute Secure Access Server (versions 9.0 to 13.54). Attackers
The CVE-2025-XXXX vulnerability in TP-LINK TL-IPC544EP-W4 firmware version 1.0.9 arises due to improper bounds checking in the `sub_69064` function within
How the CVE Works CVE-2025-45002 is a stored Cross-Site Scripting (XSS) vulnerability in Vigybag v1.0 and earlier. The flaw exists
How the CVE Works CVE-2025-46096 is a critical directory traversal vulnerability in Solon v3.1.2, specifically within the `solon-faas-luffy` component. An
How the CVE Works CVE-2025-29659 exploits a flaw in the `cmd_listen` function within the `cmd` binary of Yi IOT XY-3820
How the CVE Works The vulnerability in Yi IOT XY-3820 v6.0.24.10 stems from improper input validation in its daemon process,
How CVE-2025-45001 Works The vulnerability in react-native-keys 0.7.11 stems from improper handling of encryption materials during the build process. When
How CVE-2025-29840 Works CVE-2025-29840 is a critical stack-based buffer overflow vulnerability in Windows Media components. The flaw occurs when processing
How the CVE Works CVE-2025-28386 is a critical remote code execution vulnerability in OpenC3 COSMOS v6.0.0, specifically within its Plugin
How CVE-2025-3841 Works The vulnerability in Wix-Incubator Jam (up to commit e87a6fd85cf8fb5ff37b62b2d68f917219d07ae9) stems from improper neutralization of user-supplied input in
How the CVE Works CVE-2025-27086 is an authentication bypass vulnerability in HPE Performance Cluster Manager (HPCM) GUI. The flaw arises
How the CVE Works CVE-2025-28367 exploits a directory traversal vulnerability in mojoPortal versions <=2.9.0.1 via the BetterImageGallery API Controller’s ImageHandler
How the CVE Works: CVE-2025-43200 is a logic flaw in Apple’s processing of maliciously crafted photos or videos shared via
How the CVE Works The vulnerability arises due to a missing constraint in the `rv32im` circuit of RISC0-ZKVM (versions 2.0.0–2.0.2).
How the CVE Works Mattermost fails to enforce channel member permissions during playbook runs. Authenticated users without “Manage Channel Members”
The CVE-2025-XXXXX vulnerability in rfc3161-client (versions ≤1.0.2) stems from improper validation of timestamp response (TSR) signatures. The library checks certificate
How the CVE Works Mattermost fails to properly validate `requestorInfo` for guest users in the playbooks handler. This flaw allows
How the CVE Works: The vulnerability exploits improper handling of HTTP/1.1 request bodies in Pingora’s proxying framework (pingora-proxy). When processing
How the CVE Works CVE-2025-32885 exploits a flaw in goTenna v1 devices running app version 5.5.3 and firmware 0.25.5. Attackers
How the CVE Works CVE-2025-32888 exploits a hardcoded verification token in goTenna Mesh devices (app v5.5.3, firmware v1.1.12). This token
How the CVE Works: CVE-2025-32887 exploits a flaw in goTenna v1 devices (app 5.5.3, firmware 0.25.5) where the command channel
How the CVE Works: CVE-2025-1114 is a stored XSS vulnerability in newbee-mall 1.0 affecting the `/admin/categories/save` endpoint. The `categoryName` parameter
How the CVE Works The vulnerability exists in `com.powsybl.commons.xml.XmlReader` due to insecure XML parsing. Attackers can exploit XML External Entity
How the CVE Works: Velociraptor’s `Admin.Client.UpdateClientConfig` artifact, used for updating client configurations, lacks proper permission enforcement. Normally, dangerous artifacts require
How the CVE Works The vulnerability lies in the `read` method of the `SparseMatrix` class, which deserializes an `InputStream` into
How the CVE Works CVE-2025-1155 is a stored Cross-Site Scripting (XSS) vulnerability in Webkul QloApps 1.6.1, specifically in the `/stores`
How the CVE Works The vulnerability occurs in DotVVM applications running in Debug mode when using FileResourceLocation. Due to improper
How the CVE Works CVE-2025-21554 is a security flaw in Oracle Communications Order and Service Management (versions 7.4.0, 7.4.1, 7.5.0)
How the CVE Works CVE-2025-21544 is a security flaw in Oracle Communications Order and Service Management (versions 7.4.0, 7.4.1, 7.5.0)
How the CVE Works CVE-2025-32881 exposes sensitive user information due to improper handling of Group ID (GID) data in goTenna
How the CVE Works DNN.PLATFORM fails to properly validate client IP addresses during authentication, allowing attackers to bypass IP-based access
How the CVE Works The vulnerability in OSV-SCALIBR’s container image unpacking function (unpack()) allows path traversal when processing malicious container
How the CVE Works: The vulnerability in goTenna v1 devices (app v5.5.3, firmware v0.25.5) stems from a hardcoded verification token
The CVE-2025-XXXXX vulnerability in Mattermost arises due to insufficient sanitization of filenames during archive extraction. Authenticated users can exploit this
How the CVE Works: CVE-2021-22931 is a critical remote code execution vulnerability in Node.js due to improper input validation in
How the CVE Works CVE-2025-25023 is a privilege escalation vulnerability in IBM Security Guardium versions 11.4 and 12.1. Due to
How the CVE Works The vulnerability exists in the `RedirectSlashes` middleware of go-chi (v5.2.1). The function constructs a redirect URL
How the CVE Works: CVE-2025-32882 affects goTenna v1 devices running app version 5.5.3 and firmware 0.25.5. The vulnerability stems from
How the CVE Works CVE-2025-32886 affects goTenna v1 devices running app version 5.5.3 and firmware 0.25.5. The vulnerability arises because
How the CVE Works CVE-2025-21542 is a security flaw in Oracle Communications Order and Service Management (versions 7.4.0, 7.4.1, 7.5.0)
How the CVE Works This vulnerability occurs in Android applications using Sentry’s session replay feature alongside Jetpack Compose (v1.8.0-alpha08+). Due
How the CVE Works CVE-2025-32884 exposes sensitive user information in goTenna Mesh devices due to unencrypted Group ID (GID) transmission.
The vulnerability (CVE-2025-XXXXX) in Crafter Studio arises due to improper control of dynamically-managed code resources in the Groovy Sandbox. Authenticated
How the CVE Works The vulnerability in DNN.PLATFORM (CVE-2025-XXXX) arises due to insufficient input sanitization in the Activity Feed Attachments
How the CVE Works The vulnerability occurs in PowSyBl’s `DataSource` mechanism when the `listNames(String regex)` method processes a user-supplied regular
How the CVE Works The vulnerability arises when DNN.PLATFORM processes user-supplied input via `TokenReplace` in certain `SkinObjects` without proper sanitization.
How the CVE Works The vulnerability occurs because urllib3 improperly handles redirects when configured via the `PoolManager` retries parameter. Despite
How the CVE Works: CVE-2023-43804 affects urllib3 when used in a Pyodide runtime (browser/Node.js). The library’s redirect and retry controls
How the CVE Works The vulnerability in microlight.js (v0.0.7) occurs due to improper handling of CSS color values during syntax
How the CVE Works The CVE-2025-XXXXX vulnerability in microlight v0.0.7 stems from unrestricted processing of oversized text content within HTML
How the CVE Works CVE-2021-41773 is a path traversal vulnerability in Apache HTTP Server 2.4.49. The flaw arises due to
The vulnerability in python-a2a (CVE-2025-XXXX) stems from insufficient path sanitization in the `create_workflow` function within python_a2a/agent_flow/server/api.py. An attacker can exploit
How the CVE Works This vulnerability occurs due to improper session token invalidation in Phoenix Framework. When a user logs
How the CVE Works CVE-2025-43589 is a Use After Free (UAF) vulnerability in Adobe InDesign (versions ID20.2, ID19.5.3 and earlier).
How the CVE Works: CodiMD up to version 2.2.0 implements Content Security Policy (CSP) to prevent XSS attacks via uploaded
How the CVE Works CVE-2025-43590 is an out-of-bounds write vulnerability in Adobe InDesign (versions ID20.2, ID19.5.3, and earlier). When a
How the CVE Works CVE-2025-30317 is a heap-based buffer overflow vulnerability in Adobe InDesign (versions ID20.2, ID19.5.3, and earlier). When
How the CVE Works CVE-2025-43558 is an out-of-bounds write vulnerability in Adobe InDesign (versions ID20.2, ID19.5.3, and earlier). When a
How CVE-2025-47104 Works CVE-2025-47104 is an out-of-bounds read vulnerability in Adobe InDesign (versions ID20.2, ID19.5.3, and earlier). When a user
How the CVE Works CVE-2025-47106 is a Use-After-Free (UAF) vulnerability in Adobe InDesign (versions ID20.2, ID19.5.3, and earlier). When a
How the CVE Works CVE-2025-43593 affects Adobe InDesign (ID20.2, ID19.5.3, and earlier) due to improper memory handling when processing maliciously
How the CVE Works CVE-2025-47105 is an out-of-bounds read vulnerability in Adobe InDesign (versions ID20.2, ID19.5.3, and earlier). When a
How the CVE Works The vulnerability CVE-2025-45236 is a stored XSS flaw in DBSyncer v2.0.6, specifically in the Edit Profile
How the CVE Works CVE-2025-45607 exploits an authentication bypass vulnerability in iTranswarp v2.19’s `/manage/` component. Attackers craft malicious requests that
How the CVE Works: CVE-2025-29573 is a stored Cross-Site Scripting (XSS) vulnerability in Mezzanine CMS 6.0.0, specifically within the “View
How the CVE Works CVE-2025-45612 exploits an authentication bypass vulnerability in xmall v1.1 due to improper access control. Attackers can
How the CVE Works CVE-2025-45237 exploits an incorrect access control flaw in DBSyncer v2.0.6, specifically in the `/config/download` endpoint. Attackers
How the CVE Works CVE-2025-47816 is an out-of-bounds read vulnerability in `libpspp-core.a` within GNU PSPP up to version 2.0.1. The
How the CVE Works CVE-2025-29602 is a stored Cross-Site Scripting (XSS) vulnerability in FlatPress 1.3.1’s administration panel, specifically in the
How the CVE Works CVE-2025-5127 is a reflected Cross-Site Scripting (XSS) vulnerability in FLIR AX8 firmware versions up to 1.46.16.
How the CVE Works CVE-2025-28074 affects phpList versions before 3.6.15. The vulnerability arises in `lt.php` due to improper sanitization of
How the CVE Works: CVE-2025-28073 affects phpList versions before 3.6.15. The vulnerability arises in the `/lists/dl.php` endpoint due to insufficient
How the CVE Works: CVE-2025-29746 is a stored Cross-Site Scripting (XSS) vulnerability in Koillection v1.6.10. An attacker injects malicious JavaScript
How the CVE Works CVE-2025-4538 is a critical vulnerability in kkFileView 4.4.0 that allows unrestricted file uploads via the `/fileUpload`
How the CVE Works The vulnerability exists in `/views/plugin.php` of emlog Pro v2.5.7 due to insufficient file upload validation. Attackers
The CVE-2025-6087 vulnerability in `@opennextjs/cloudflare` allows unauthenticated attackers to perform SSRF attacks via the `/_next/image` endpoint. The flaw occurs due
The vulnerability in FLIR AX8 firmware (up to v1.46.16) stems from improper input validation in the `setDataTime` function within settingsregional.php.
How the CVE Works CVE-2025-45859 exploits a buffer overflow in TOTOLINK A3002R firmware version v4.0.0-B20230531.1404. The vulnerability occurs in the
How the CVE Works CVE-2025-5428 is a critical vulnerability in Juzaweb CMS (up to v3.4.2) affecting the `/admin-cp/log-viewer` component. The
