CVE Brief Security Intelligence

In Splunk Enterprise for Windows versions below 10

In Splunk Universal Forwarder for Windows versions below 10

The SureMail – SMTP and Email Logs Plugin for WordPress is vulnerable to Unrestricted Upload of File with Dangerous Type in versions up to and including 1

Use after free in Digital Credentials in Google Chrome prior to 143

Use after free in Media Stream in Google Chrome prior to 143

The Kadence WooCommerce Email Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customer name in all versions up to, and including, 1

The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'month' parameter in all versions up to, and including, 1

The Cost Calculator Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteOrdersFiles() function in all versions up to, and including, 3

Type Confusion in V8 in Google Chrome prior to 143

Inappropriate implementation in Google Updater in Google Chrome on Mac prior to 143

Bad cast in Loader in Google Chrome prior to 143

Akamai Guardicore Platform Agent before 52

The db-access WordPress plugin through 0

Race in v8 in Google Chrome prior to 143

The Modula Image Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'ajax_unzip_file' function in versions 2

The Modula Image Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'ajax_unzip_file' function in versions 2

Coder allows organizations to provision remote development environments via Terraform

A flaw was found in Undertow that can cause remote denial of service attacks

A heap buffer overflow in compiler

Improper access control in MPRemoteService of MotionPhoto prior to version 4

Command injection vulnerability in the operating system in Circutor SGE-PLC1000/SGE-PLC50 v9

A flaw was found in the ABRT daemon’s handling of user-supplied mount information

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the Machine

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the NetFailDetectD binary

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the SMB server function

Masa CMS is an open source Enterprise Content Management platform

NVIDIA TAO contains a vulnerability where an attacker may cause a resource to be loaded via an uncontrolled search path

IBM Informix Dynamic Server 14

NMIS/BioDose V22

NMIS/BioDose V22

NMIS/BioDose V22

NMIS/BioDose V22

GZDoom is a feature centric port for all Doom engine games

In mmdvfs, there is a possible out of bounds write due to a missing bounds check

In smi, there is a possible out of bounds write due to a missing bounds check

In display, there is a possible memory corruption due to improper input validation

In display, there is a possible out of bounds write due to an integer overflow

In display, there is a possible out of bounds read due to a missing bounds check

Use of hardcoded cryptographic keys in Circutor SGE-PLC1000/SGE-PLC50 v9

Vim is an open source, command line text editor

WebPros Plesk before 18

An Improper Input Validation vulnerability exists in the user websocket handler of MAAS

Aquarius Desktop 3

The Aimeos GrapesJS CMS extension provides page editor for creating content pages based on extensible components

RomM (ROM Manager) allows users to scan, enrich, browse and play their game collections with a clean and responsive interface

Out-of-bounds read vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9

Insertion of Sensitive Information Into Sent Data vulnerability in Argus Technology Inc

User Enumeration Vulnerability in TCMAN GIM v11 version 20250304

User Enumeration Vulnerability in TCMAN GIM v11 version 20250304

An issue was discovered in 5

EverShop 2

Within HostnameError

Abacre Restaurant Point of Sale (POS) up to 15

Masa CMS is an open source Enterprise Content Management platform

An issue was discovered in Camera in Samsung Mobile Processor Exynos 1280 and 2200

Untrusted search path in auth_query connection handler in PgBouncer before 1

NVIDIA Triton Inference Server contains a vulnerability where an attacker may cause an improper check for unusual or exceptional conditions issue by sending extra large payloads

NVIDIA Triton Server for Linux contains a vulnerability where an attacker may cause an improper validation of specified quantity in input

A flaw was found in WebKitGTK

Improper access control in MPLocalService of MotionPhoto prior to version 4

NMIS/BioDose software V22

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files