886 matches found
PT-2025-28738 · Adobe · Substance3D - Stager
Name of the Vulnerable Software and Affected Versions: Substance3D - Stager versions 3.1.2 and earlier Description: Substance3D - Stager is affected by an out-of-bounds read issue that may result in the disclosure of sensitive memory. Successful exploitation requires a user to open a specially...
SUSE CVE-2025-6545
Improper Input Validation vulnerability in pbkdf2 allows Signature Spoofing by Improper Validation. This vulnerability is associated with program files lib/to-buffer.Js. This issue affects pbkdf2: from 3.0.10 through 3.1.2...
SUSE CVE-2025-6547
Improper Input Validation vulnerability in pbkdf2 allows Signature Spoofing by Improper Validation.This issue affects pbkdf2: =3.1.2...
DEBIAN-CVE-2025-6545
Improper Input Validation vulnerability in pbkdf2 allows Signature Spoofing by Improper Validation. This vulnerability is associated with program files lib/to-buffer.Js. This issue affects pbkdf2: from 3.0.10 through 3.1.2...
UBUNTU-CVE-2025-6547
Improper Input Validation vulnerability in pbkdf2 allows Signature Spoofing by Improper Validation.This issue affects pbkdf2: =3.1.2...
CVE-2025-6545
CVE-2025-6545 (pbkdf2) : An improper input validation issue in pbkdf2 can enable signature spoofing. Affects pbkdf2 versions 3.0.10–3.1.2, with the root cause in the library’s input handling (noted as lib/to-buffer.Js). CVSS v4.0 base score 9.1 (critical). Public references describe vendor adviso...
Browserify pbkdf2 安全漏洞
Browserify pbkdf2 is an open source hash algorithm software from Browserify A security vulnerability exists in Browserify pbkdf2 3.1.2 and earlier versions that stems from improper input validation leading to signature spoofing...
Browserify pbkdf2 安全漏洞
Browserify pbkdf2 is an open source hash algorithm software from Browserify A security vulnerability exists in Browserify pbkdf2 3.1.2 and earlier versions that stems from improper input validation leading to signature spoofing...
CVE-2025-46096
Directory Traversal vulnerability in solon v.3.1.2 allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component...
GHSA-M63Q-4HR8-5R5H Solon Vulnerable to Directory Traversal
Directory Traversal vulnerability in solon v.3.1.2 allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component...
Solon Vulnerable to Directory Traversal
Directory Traversal vulnerability in solon v.3.1.2 allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component...
CVE-2025-46096
Directory Traversal vulnerability in solon v.3.1.2 allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component...
CVE-2025-46096
CVE-2025-46096 affects Solon v3.1.2, with a directory traversal vulnerability in the solon-faas-luffy component that enables a remote attacker to trigger XSS. The issue is supported by multiple sources (Red Hat, GHSA, NVD, Snyk) and has remediation guidance to upgrade the affected component to ve...
CVE-2025-46096
Directory Traversal vulnerability in solon v.3.1.2 allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component...
CVE-2025-46096
Directory Traversal vulnerability in solon v.3.1.2 allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component...
PT-2025-25410 · Unknown +1 · Solon-Faas-Luffy +1
Name of the Vulnerable Software and Affected Versions: solon version 3.1.2 Description: A Directory Traversal issue allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component. Recommendations: For solon version 3.1.2, consider restricting access to the solon-faas-luffy...
OpenSolon 安全漏洞
OpenSolon is a full-scenario Java enterprise application development framework open-sourced by OpenSolon. A security vulnerability exists in OpenSolon version 3.1.2, which stems from the presence of directory traversal in the solon-faas-luffy component, which could lead to a cross-site scripting...
CVE-2025-39501
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in GoodLayers Goodlayers Hostel gdlr-hostel allows Blind SQL Injection.This issue affects Goodlayers Hostel: from n/a through = 3.1.4...
CVE-2025-39502
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GoodLayers Goodlayers Hostel gdlr-hostel allows Reflected XSS.This issue affects Goodlayers Hostel: from n/a through = 3.1.2...