VYPR

CVEs

130,840 total · page 925 of 2,617

  • CVE-2025-36520HigJul 22, 2025
    risk 0.49cvss 7.5epss 0.01

    A null pointer dereference vulnerability exists in the net_connectmsg Protocol Buffer Message functionality of Bloomberg Comdb2 8.1. A specially crafted network packets can lead to a denial of service. An attacker can send packets to trigger this vulnerability.

  • CVE-2025-36512HigJul 22, 2025
    risk 0.49cvss 7.5epss 0.01

    A denial of service vulnerability exists in the Bloomberg Comdb2 8.1 database when handling a distributed transaction heartbeat. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database instance over TCP and send…

  • CVE-2025-35966HigJul 22, 2025
    risk 0.49cvss 7.5epss 0.01

    A null pointer dereference vulnerability exists in the CDB2SQLQUERY protocol buffer message handling of Bloomberg Comdb2 8.1. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database instance over TCP and send the…

  • CVE-2025-51865HigJul 22, 2025
    risk 0.57cvss 8.8epss 0.00

    Ai2 playground web service (playground.allenai.org) LLM chat through 2025-06-03 is vulnerable to Insecure Direct Object Reference (IDOR), allowing attackers to gain sensitvie information via enumerating thread keys in the URL.

  • CVE-2025-8017HigJul 22, 2025
    risk 0.58cvss 8.8epss 0.13

    A vulnerability was found in Tenda AC7 15.03.06.44. It has been classified as critical. Affected is the function formSetMacFilterCfg of the file /goform/setMacFilterCfg of the component httpd. The manipulation of the argument deviceList leads to stack-based buffer overflow. It…

  • CVE-2015-10140HigJul 22, 2025
    risk 0.60cvss 8.8epss 0.02

    The Ajax Load More plugin before 2.8.1.2 does not have authorisation in some of its AJAX actions, allowing any authenticated users, such as subscriber, to upload and delete arbitrary files.

  • CVE-2025-34140HigJul 22, 2025
    risk 0.57cvss —epss 0.01

    An authorization bypass vulnerability exists in ETQ Reliance (legacy CG and NXG SaaS platforms). By appending a specific URI suffix to certain API endpoints, an unauthenticated attacker can bypass access control checks and retrieve limited sensitive resources. The root cause was…

  • CVE-2025-7692HigJul 22, 2025
    risk 0.53cvss 8.1epss 0.01

    The Orion Login with SMS plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.5. This is due to the olws_handle_verify_phone() function not utilizing a strong enough OTP value, exposing the hash needed to generate the OTP value,…

  • CVE-2025-6213HigJul 22, 2025
    risk 0.47cvss 7.2epss 0.01

    The Nginx Cache Purge Preload plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.1.1 via the 'nppp_preload_cache_on_update' function. This is due to insufficient sanitization of the $_SERVER['HTTP_REFERERER'] parameter passed from…

  • CVE-2025-53472HigJul 22, 2025
    risk 0.47cvss 7.2epss 0.01

    WRC-BE36QS-B and WRC-W701-B contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in WebGUI. If exploited, an arbitrary OS command may be executed by a remote attacker who can log in to WebGUI.

  • CVE-2025-38352HigKEVJul 22, 2025
    risk 0.56cvss 7.8epss 0.01

    In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() If an exiting non-autoreaping task has already passed exit_notify() and calls handle_posix_cpu_timers() from IRQ, it can…

  • CVE-2025-7645HigJul 22, 2025
    risk 0.53cvss 8.1epss 0.01

    The Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'delete-file' field in all versions up to, and including, 3.2.8. This makes it…

  • CVE-2025-6585HigJul 22, 2025
    risk 0.53cvss 8.1epss 0.00

    The WP JobHunt plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 7.2 via the cs_remove_profile_callback() function due to missing validation on a user controlled key. This makes it possible for authenticated attackers,…

  • CVE-2025-7950HigJul 22, 2025
    risk 0.48cvss 7.3epss 0.01

    A vulnerability was found in code-projects Public Chat Room 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The…

  • CVE-2025-7945HigJul 22, 2025
    risk 0.58cvss 8.8epss 0.07

    A vulnerability was found in D-Link DIR-513 up to 20190831. It has been declared as critical. This vulnerability affects the function formSetWanDhcpplus of the file /goform/formSetWanDhcpplus. The manipulation of the argument curTime leads to buffer overflow. The attack can be…

  • CVE-2025-53832HigJul 21, 2025
    risk 0.43cvss 7.5epss 0.11

    Lara Translate MCP Server is a Model Context Protocol (MCP) Server for Lara Translate API. Versions 0.0.11 and below contain a command injection vulnerability which exists in the @translated/lara-mcp MCP Server. The vulnerability is caused by the unsanitized use of input…

  • CVE-2025-53528HigJul 21, 2025
    risk 0.42cvss 7.6epss 0.00

    Cadwyn creates production-ready community-driven modern Stripe-like API versioning in FastAPI. In versions before 5.4.3, the version parameter of the "/docs" endpoint is vulnerable to a Reflected XSS (Cross-Site Scripting) attack. This XSS would notably allow an attacker to…

  • CVE-2025-7325HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7324HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7323HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7322HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7321HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7320HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7319HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7318HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7317HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7316HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7315HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7314HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7313HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7312HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7311HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7310HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7309HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7308HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7307HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7306HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7305HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7304HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7303HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7302HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7301HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7300HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7299HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7298HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7297HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7296HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7295HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7294HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…

  • CVE-2025-7293HigJul 21, 2025
    risk 0.51cvss 7.8epss 0.00

    IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this…