آخرین آسیب‌پذیری‌ها

Access of resource using incompatible type ('type confusion') in EPICS Base

eMudhra Compromised Certificate vulnerability impacts HCL Notes Client

Asterisk: chan_unistim DIALPAGE digit handling can overflow phone_number and crash Asterisk

Improper handling of length parameter inconsistency in EPICS Base

Integer overflow or wraparound in EPICS Base

Integer overflow or wraparound in EPICS Base

Asterisk: Possible RED T.140 Heap Buffer Overflow

TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serialization

oretnom23 php-travel-agency-system Admin Search Pages customer_search.php sql injection

systeminformation: Prototype pollution in `networkStats()` via the interface name

Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser

Adobe Connect | Improper Control of Generation of Code ('Code Injection') (CWE-94)

systeminformation: Path traversal in Linux networkStats() allows symlink-based file disclosure outside /sys/class/net

eMudhra Compromised Certificate vulnerability impacts HCL Domino Server

Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex)

libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow

Authlib RFC 7592 examples omit registration-access-token client binding

oretnom23 php-travel-agency-system employee_insert.php unrestricted upload

libXtst RECORD EnableContext Reply Endless Loop

Substance3D - Painter | Out-of-bounds Read (CWE-125)

Substance3D - Painter | Stack-based Buffer Overflow (CWE-121)

Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427)

A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to privilege escalation or denial of service.

A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server throug…

A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token and receive responses from REST API endpoints that do not call the Veeam Backup for Microsoft 365 bac…