Results
16,974 of 48,153· Page 138/340Tyler Technologies ERP Pro 9 SaaS allows an authenticated user to escape the application and execute limited operating s
GPMAW 14, a bioinformatics software, has a critical vulnerability related to insecure file permissions in its installati
A cross-site scripting (XSS) vulnerability in the PdfViewer component of Agenzia Impresa Eccobook 2.81.1 allows attacker
Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the doctor_contact parameter i
Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func3.php via the user
Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the username paramet
Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the emailAddress par
Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createStuden
Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createSessio
Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createClassA
LinkJoin through 882f196 mishandles token ownership in password reset.
LinkJoin through 882f196 mishandles lacks type checking in password reset.
Authentication Bypass Using an Alternate Path or Channel vulnerability in Saad Iqbal Post SMTP post-smtp allows Authenti
Cancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to the Scan method
On multiple products of SEIKO EPSON and FUJIFILM Corporation, the initial administrator password is easy to guess from t
Use after free in Cast in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap cor
Use after free in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit he
Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. In versions 0.8.0 through 0.9.21 and 1.
EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Succes
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. In versions an
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. In versions 7.
A maliciously crafted TGA file, when linked or imported into Autodesk 3ds Max, can force a Memory Corruption vulnerabili
A maliciously crafted RBG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A
An unrestricted file upload vulnerability in Vedo Suite version 2024.17 allows remote authenticated attackers to write t
Insecure Data Storage of credentials has been found in /api_vedo/configuration/config.yml file in Vedo Suite version 202
Middleware causes a prohibitive amount of heap allocations when processing malicious preflight requests that include a A
Cross-site scripting (XSS) vulnerability in Zone Bitaqati thru 3.4.0.
An issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6. Information disclosure can occur via an external HT
poco v1.14.1-release was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key
Dell SupportAssist OS Recovery, versions prior to 5.5.14.0, contain a Creation of Temporary File With Insecure Permissio
On April 18th 2025, Microsoft announced Exchange Server Security Changes for Hybrid Deployments and accompanying non-sec
Incorrect access control in Sage DPW 2024_12_004 and earlier allows unauthorized attackers to access the built-in Databa
Electrolink FM/DAB/TV Transmitter Web Management System Unauthorized access vulnerability via the /FrameSetCore.html end
A Remote Code Execution (RCE) vulnerability in Grav CMS v1.7.48 allows an authenticated admin to upload a malicious plug
IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 20 is vulnerable to a heap-based buffer overflow, caused by i
IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 20 is vulnerable to a heap-based buffer overflow, caused by i
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause a memory allocati
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause an integer o
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause an integer o
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause uncontrolled
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause an integer overfl
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause an integer overfl
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where multiple requests could cause a doub
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause a divide by zero
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker c
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker c
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker c
CWE-204: Observable Response Discrepancy
CWE-639 Authorization Bypass Through User-Controlled Key
CWE-639 Authorization Bypass Through User-Controlled Key
Test your stack for 2025issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.