Aggregator

Submit #517974 / VDB-300589

Submit #517965 / VDB-300588

Submit #517964 / VDB-274061

Submit #517963 / VDB-300587

Submit #517960 / VDB-300586

Submit #517959 / VDB-300585

A vulnerability, which was classified as problematic, has been found in Impact ITIUM 6050 5.5.5.2-b3526. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument id_session leads to cross site scripting. This vulnerability is handled as CVE-2025-2597. The attack may be launched remotely. There is no exploit available.

Using Cloudflare’s CASB, integrate, scan, and detect sensitive data and misconfigurations in your cloud storage accounts.

A vulnerability was found in Linux Kernel up to 5.15.4. It has been classified as critical. This affects the function scsi_mode_sense of the component Device Driver Handler. The manipulation leads to allocation of resources. This vulnerability is uniquely identified as CVE-2021-47182. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 5.4.161/5.10.81/5.15.4 and classified as critical. This vulnerability affects unknown code of the component msm8998. The manipulation leads to denial of service. This vulnerability was named CVE-2021-47187. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 5.10.81/5.15.4. This vulnerability affects the function mlx5_debug_cq_remove. The manipulation leads to denial of service. This vulnerability was named CVE-2021-47197. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in JoomlaUX JUX Real Estate 3.4.0 on Joomla and classified as critical. This issue affects some unknown processing of the file /extensions/realestate/index.php/properties/list/list-with-sidebar/realties of the component GET Parameter Handler. The manipulation of the argument Title leads to sql injection. The identification of this vulnerability is CVE-2025-2126. The attack may be initiated remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.