vulnerabilities and exploits

(subscribe to this query)

MRCMS v3.1.2 exists to contain an arbitrary file write vulnerability via the component /file/save.do.

An arbitrary file upload vulnerability in the component /file/savefile.do of MRCMS v3.1.2 allows malicious users to execute arbitrary code via uploading a crafted .jsp file.

A vertical privilege escalation vulnerability in the component /controller/UserController.java of MRCMS v3.1.2 allows malicious users to arbitrarily delete users via a crafted request.

Multiple memory leaks have been identified in the ABC file parsing functions (parseABC_CONSTANT_POOL and `parseABC_FILE) in util/parser.c of libming v0.4.8, which allow malicious users to cause a denial of service via a crafted ABC file.

A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) malicious user to reset passwords, including the ones of administrator accounts, via crafted HTTP requests.

A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying...

Red Hat Red Hat Enterprise Linux 6 Red Hat Red Hat Enterprise Linux 7 Red Hat Red Hat Enterprise Linux 8 Red Hat Red Hat Enterprise Linux 9 Red Hat Red Hat Openshift Container Platform 4

1 Github repository3 Articles

A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client key exchange has finished. A malicious client may keep sending such pack...

Red Hat Red Hat Enterprise Linux 6 Red Hat Red Hat Enterprise Linux 7 Red Hat Red Hat Enterprise Linux 8 Red Hat Red Hat Enterprise Linux 9 Red Hat Red Hat Openshift Container Platform 4

2 Github repositories3 Articles

Cleartext Storage of Sensitive Information vulnerability in Salesforce Tableau Server can record the Personal Access Token (PAT) into logging repositories.This issue affects Tableau Server: prior to 2022.1.3, prior to 2021.4.8, prior to 2021.3.13, prior to 2021.2.14, prior to 202...

Salesforce Tableau Server

CVE-2025-29891: Apache Camel: Camel Message Header Injection through request parameters

Below: World Writable Directory in /var/log/below Allows Local Privilege Escalation (CVE-2025-27591)

« PREV 1 2 3 4 5 6 7 8 9 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook