[CVE_SUBSCRIPTIONS]

Receive alerts for specific vendors, products, or severities

📡 [FLUX RSS CVE]

Subscribe to the CVE feed

7 derniers jours

> FILTERS

> Last 7 Days

STATISTIQUES

Total CVE: 421183
> CVE-2025-34296
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
> CVE-2025-34295
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
> CVE-2025-34289
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
> CVE-2025-34285
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
> CVE-2025-34279
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
> CVE-2025-34276
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
> CVE-2025-34275
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
> CVE-2025-34268
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
> CVE-2025-34250
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
> CVE-2025-34219
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
> CVE-2025-34214
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
> CVE-2025-34213
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
> CVE-2025-34171
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
> CVE-2025-34170
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
> CVE-2025-34169
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
> CVE-2025-34168
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
> CVE-2025-34167
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
> CVE-2025-34166
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
> CVE-2025-34145
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
> CVE-2025-34144
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
> CVE-2025-34137
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
> CVE-2025-34131
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
> CVE-2025-34122
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
> CVE-2025-34094
Rejected reason: This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
> CVE-2025-15439 [MEDIUM 5.3]
A vulnerability was identified in Daptin 0.10.3. Affected by this vulnerability is the function goqu.L of the file server/resource/resource_aggregate.go of the component Aggregate API. The manipulation of the argument column/group/order leads to sql injection. The attack may be initiated remotely. T...
> CVE-2025-9110 [LOW 2.7]
An exposure of sensitive system information to an unauthorized control sphere vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to read application data. We have already fixed the vulnerability in the following...
> CVE-2025-69284 [MEDIUM 4.3]
Plane is an an open-source project management tool. In plane.io, a guest user doesn't have a permission to access https[:]//app[.]plane[.]so/[:]slug/settings. Prior to Plane version 1.2.0, a problem occurs when the `/api/workspaces/:slug/members/` is accessible by guest and able to list of users on...
> CVE-2025-67269
An integer underflow vulnerability exists in the `nextstate()` function in `gpsd/packet.c` of gpsd versions prior to commit `ffa1d6f40bca0b035fc7f5e563160ebb67199da7`. When parsing a NAVCOM packet, the payload length is calculated using `lexer->length = (size_t)c - 4` without checking if the input b...
> CVE-2025-67268
gpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers/driver_nmea2000.c file. The hnd_129540 function, which handles NMEA2000 PGN 129540 (GNSS Satellites in View) packets, fails to validate the user-supplied satellite count against the size of the skyview...
> CVE-2025-62852 [LOW 1.2]
A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: QTS...
> CVE-2025-62842 [HIGH 7.0]
An external control of file name or path vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attacker gains local network access, they can then exploit the vulnerability to read or modify files or directories. We have already fixed the vulnerability in the following version: H...
> CVE-2025-62840 [HIGH 7.0]
A generation of error message containing sensitive information vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attacker gains local network access, they can then exploit the vulnerability to read application data. We have already fixed the vulnerability in the following ve...
> CVE-2025-59389 [HIGH 8.1]
An SQL injection vulnerability has been reported to affect Hyper Data Protector. The remote attackers can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following versions: Hyper Data Protector 2.2.4.1 and later
> CVE-2025-59387 [HIGH 8.1]
An SQL injection vulnerability has been reported to affect MARS (Multi-Application Recovery Service). The remote attackers can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: MARS (Multi-Application Recovery...
> CVE-2025-59384 [HIGH 8.1]
A path traversal vulnerability has been reported to affect Qfiling. The remote attackers can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qfiling 3.13.1 and later
> CVE-2025-59381 [MEDIUM 4.6]
A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the fol...
> CVE-2025-59380 [MEDIUM 4.6]
A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the fol...
> CVE-2025-53597 [LOW 1.2]
A buffer overflow vulnerability has been reported to affect License Center. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: License Center 2.0.36 and l...
> CVE-2025-53594 [MEDIUM 4.4]
A path traversal vulnerability has been reported to affect several product versions. If a local attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following versions: Qfinder...
> CVE-2025-52871 [LOW 1.3]
An out-of-bounds read vulnerability has been reported to affect License Center. If a remote attacker gains a user account, they can then exploit the vulnerability to obtain secret data. We have already fixed the vulnerability in the following version: License Center 2.0.36 and later
> CVE-2025-48721 [LOW 1.2]
A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: QTS...
> CVE-2025-11837 [HIGH 8.1]
An improper control of generation of code vulnerability has been reported to affect Malware Remover. The remote attackers can then exploit the vulnerability to bypass protection mechanism. We have already fixed the vulnerability in the following version: Malware Remover 6.6.8.20251023 and later
> CVE-2025-65125
SQL injection in gosaliajainam/online-movie-booking 5.5 in movie_details.php allows attackers to gain sensitive information.
> CVE-2025-62857 [LOW 2.2]
A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: QuMagie 2.8.1 and later
> CVE-2025-57705 [MEDIUM 4.6]
An allocation of resources without limits or throttling vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing t...
> CVE-2025-54166 [MEDIUM 4.6]
An out-of-bounds read vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to obtain secret data. We have already fixed the vulnerability in the following versions: QTS 5.2.7.32...
> CVE-2025-54165 [MEDIUM 4.6]
An out-of-bounds read vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to obtain secret data. We have already fixed the vulnerability in the following versions: QTS 5.2.7.32...
> CVE-2025-54164 [MEDIUM 4.6]
An out-of-bounds read vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to obtain secret data. We have already fixed the vulnerability in the following versions: QTS 5.2.7.32...
> CVE-2025-53596 [LOW 1.2]
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the follow...
> CVE-2025-53593 [LOW 1.2]
A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following versions: QT...