1909 matches found
CVE-2003-1516
The org.apache.xalan.processor.XSLProcessorVersion class in Java Plug-in 1.4.201 allows signed and unsigned applets to share variables, which violates the Java security model and could allow remote attackers to read or write data belonging to a signed applet...
CVE-2023-43029
IBM Storage Virtualize vSphere Remote Plug-in 1.0 and 1.1 could allow a remote user to obtain sensitive credential information after deployment...
CVE-2025-14110
The WP Js List Pages Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'class' shortcode attribute in all versions up to, and including, 1.21 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
SUSE CVE-2025-12689
Mattermost versions 11.0.x = 11.0.4, 10.12.x = 10.12.2, 10.11.x = 10.11.6 fail to check WebSocket request field for proper UTF-8 format, which allows attacker to crash Calls plug-in via sending malformed request...
CVE-2025-12689 DoS in Calls plugin via malformed UTF-8 in WebSocket request
Mattermost versions 11.0.x = 11.0.4, 10.12.x = 10.12.2, 10.11.x = 10.11.6 fail to check WebSocket request field for proper UTF-8 format, which allows attacker to crash Calls plug-in via sending malformed request...
CVE-2025-12689: Improper Validation of Specified Type of Input
Mattermost versions 11.0.x = 11.0.4, 10.12.x = 10.12.2, 10.11.x = 10.11.6 fail to check WebSocket request field for proper UTF-8 format, which allows attacker to crash Calls plug-in via sending malformed request...
COMMAX UMS Client ActiveX Control 缓冲区错误漏洞
COMMAX UMS Client ActiveX Control is a browser plug-in from the Korean company COMMAX. A buffer error vulnerability exists in COMMAX UMS Client ActiveX Control version 1.7.0.2, which stems from a heap buffer overflow issue in CNCCtrl.dll that could lead to the execution of arbitrary code...
EUVD-2025-112812
Malicious code in hermes-apex-css-minimizer-webpack-plugin-phoebe npm...
ROS-20251029-04
A plug-in vulnerability in the Grafana-Zabbix web-based data submission tool is related to maximum CPU utilization. Exploitation of the vulnerability could allow an attacker due to a custom request with a regular expression, acting remotely, to cause a denial of service...
[SECURITY] [DLA 4342-1] gimp security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4342-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler October 22, 2025 https://wiki.debian.org/LTS -...
Fortinet FortiDLP 安全漏洞
Fortinet FortiDLP is a data leak prevention software from Fortinet, Inc. A security vulnerability exists in Fortinet FortiDLP that stems from an Outlookproxy plug-in that may allow an authenticated administrator to collect email information from the current user...
EUVD-2013-2772
Malware in sbrugna...
EUVD-2012-1089
Malware in sbrugna...
EUVD-2005-4837
Malware in sbrugna...
EUVD-2013-2774
Malware in sbrugna...
EUVD-2007-4386
Malware in sbrugna...
EUVD-2009-1929
Malware in sbrugna...
EUVD-2002-0030
Malware in sbrugna...