701
|
7.8 |
HIGH
Local
|
adobe
|
substance_3d_stager
|
Substance3D - Stager versions 3.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of …
|
CWE-787
Out-of-bounds Write
|
CVE-2025-21131
|
2025-01-18 05:37 |
2025-01-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
702
|
7.8 |
HIGH
Local
|
adobe
|
substance_3d_stager
|
Substance3D - Stager versions 3.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of …
|
CWE-787
Out-of-bounds Write
|
CVE-2025-21130
|
2025-01-18 05:37 |
2025-01-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
703
|
7.8 |
HIGH
Local
|
adobe
|
substance_3d_stager
|
Substance3D - Stager versions 3.0.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitati…
|
CWE-787
Out-of-bounds Write
|
CVE-2025-21129
|
2025-01-18 05:37 |
2025-01-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
704
|
7.8 |
HIGH
Local
|
adobe
|
substance_3d_stager
|
Substance3D - Stager versions 3.0.4 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitat…
|
CWE-787
Out-of-bounds Write
|
CVE-2025-21128
|
2025-01-18 05:37 |
2025-01-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
705
|
6.5 |
MEDIUM
Network
|
-
|
-
|
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
|
CWE-284
Improper Access Control
|
CVE-2025-21185
|
2025-01-18 05:15 |
2025-01-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
706
|
6.3 |
MEDIUM
Network
|
-
|
-
|
A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. This vulnerability affects unknown code of the file /admin/edit_action.php. The manipulati…
|
CWE-89 CWE-74
SQL Injection Injection
|
CVE-2025-0536
|
2025-01-18 05:15 |
2025-01-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
707
|
- |
|
-
|
-
|
Cross Site Scripting vulnerability in sunnygkp10 Online Exam System master version allows a remote attacker to obtain sensitive information via the w parameter.
|
-
|
CVE-2024-57370
|
2025-01-18 05:15 |
2025-01-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
708
|
- |
|
-
|
-
|
Clickjacking vulnerability in typecho v1.2.1.
|
-
|
CVE-2024-57369
|
2025-01-18 05:15 |
2025-01-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
709
|
- |
|
-
|
-
|
A vulnerability exists in Algo Edge up to 2.1.1 - a previously used (legacy) component of navify® Algorithm Suite. The vulnerability impacts the authentication mechanism of this component and could …
|
-
|
CVE-2024-13026
|
2025-01-18 05:15 |
2025-01-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
710
|
- |
|
-
|
-
|
Belledonne Communications Linphone-Desktop
is vulnerable to a NULL Dereference vulnerability, which could allow a remote attacker to create a denial-of-service condition.
|
CWE-476
NULL Pointer Dereference
|
CVE-2025-0430
|
2025-01-18 03:15 |
2025-01-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|