CVE Alert: CVE-2025-55077
Vulnerability Summary: CVE-2025-55077 Tyler Technologies ERP Pro 9 SaaS allows an authenticated user to escape the application and execute limited...
Vulnerability Summary: CVE-2025-55077 Tyler Technologies ERP Pro 9 SaaS allows an authenticated user to escape the application and execute limited...
Vulnerability Summary: CVE-2025-47808 In GStreamer through 1.26.1, the subparse plugin's tmplayer_parse_line function may dereference a NULL pointer while parsing a...
Vulnerability Summary: CVE-2025-8701 A vulnerability was found in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0. It has been rated...
Vulnerability Summary: CVE-2025-8698 A vulnerability was found in Open5GS up to 2.7.5. It has been classified as problematic. Affected is...
Vulnerability Summary: CVE-2025-54787 SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. There is a vulnerability in SuiteCRM...
Vulnerability Summary: CVE-2025-53767 Azure OpenAI Elevation of Privilege Vulnerability Affected Endpoints: No affected endpoints listed. Published Date: 8/7/2025, 9:15:28 PM...
Vulnerability Summary: CVE-2025-53774 Microsoft 365 Copilot BizChat Information Disclosure Vulnerability Affected Endpoints: No affected endpoints listed. Published Date: 8/7/2025, 9:15:28...
Vulnerability Summary: CVE-2025-2028 Lack of TLS validation when downloading a CSV file including mapping from IPs to countries used ONLY...
Vulnerability Summary: CVE-2025-3320 IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 20 is vulnerable to a heap-based buffer overflow, caused...
Vulnerability Summary: CVE-2025-36020 IBM Guardium Data Protection could allow a remote attacker to obtain sensitive information due to cleartext transmission...
Vulnerability Summary: CVE-2024-52885 The Mobile Access Portal's File Share application is vulnerable to a directory traversal attack, allowing an authenticated,...
Vulnerability Summary: CVE-2025-3354 IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 20 is vulnerable to a heap-based buffer overflow, caused...
Vulnerability Summary: CVE-2025-50234 MCCMS v2.7.0 has an SSRF vulnerability located in the index() method of the sys\apps\controllers\api\Gf.php file, where the...
Vulnerability Summary: CVE-2025-51306 In Gatling Enterprise versions below 1.25.0, a user logging-out can still use his session token to continue...
Vulnerability Summary: CVE-2025-51040 Electrolink FM/DAB/TV Transmitter Web Management System Unauthorized access vulnerability via the /FrameSetCore.html endpoint in Electrolink 500W, 1kW,...
Vulnerability Summary: CVE-2025-50286 A Remote Code Execution (RCE) vulnerability in Grav CMS v1.7.48 allows an authenticated admin to upload a...
Vulnerability Summary: CVE-2025-51308 In Gatling Enterprise versions below 1.25.0, a low-privileged user that does not hold the role "admin" could...
Vulnerability Summary: CVE-2025-50233 A vulnerability in QCMS version 6.0.5 allows authenticated users to read arbitrary files from the server due...
Vulnerability Summary: CVE-2025-53786 On April 18th 2025, Microsoft announced Exchange Server Security Changes for Hybrid Deployments and accompanying non-security Hot...
Vulnerability Summary: CVE-2024-8244 The filepath.Walk and filepath.WalkDir functions are documented as not following symbolic links, but both functions are susceptible...
Vulnerability Summary: CVE-2025-48393 The server identity check mechanism for firmware upgrade performed via command shell is insecurely implemented potentially allowing...
Vulnerability Summary: CVE-2025-48394 An attacker with authenticated and privileged access could modify the contents of a non-sensitive file by traversing...
Vulnerability Summary: CVE-2025-51531 A reflected cross-site scripting (XSS) vulnerability in Sage DPW v2024.12.003 allows attackers to execute arbitrary JavaScript in...
Vulnerability Summary: CVE-2025-8419 A vulnerability was found in Keycloak-services. Special characters used during e-mail registration may perform SMTP Injection and...