CVE-2026-6654 vulnerabilities

Vulnerabilities for packages: ruff, rust-analyzer, typst...

CVE-2025-62974

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CoSchedule Headline Analyzer headline-analyzer allows Stored XSS.This issue affects Headline Analyzer: from n/a through = 1.3.7...

Hitachi Ops Center Analyzer Data Compromise

The vulnerability of the Detail View component of the Hitachi Ops Center Analyzer software for data analysis and processing is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker operating remotely to compromise the integrity of the protect...

EUVD-2015-0489

Malware in sbrugna...

MEAC300-FNADE4 Unauthorized Access

The vulnerability of the microprogrammed industrial digital gas analyzer MEAC300-FNADE4 is related to inconsistencies in responses to incoming requests. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

SolarWinds Database Performance Analyzer MITM

The vulnerability of the software for monitoring the performance of SolarWinds Database Performance Analyzer DPA is related to the use of pre-installed configuration data. Exploiting this vulnerability could allow an attacker to carry out a Man-in-the-Middle MITM attack...

CVE-2021-45460

A vulnerability has been identified in SICAM PQ Analyzer All versions V3.18. A service is started by an unquoted registry entry. As there are spaces in this path, attackers with write privilege to those directories might be able to plant executables that will run in place of the legitimate proces...

CVE-2020-14693

Vulnerability in the Oracle Insurance Accounting Analyzer product of Oracle Financial Services Applications component: User Interface. Supported versions that are affected are 8.0.6-8.0.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

Hitachi Ops Center Analyzer and Hitachi Infrastructure Analytics Advisor security vulnerabilities

Hitachi Ops Center Analyzer and Hitachi Infrastructure Analytics Advisor are both products of Hitachi, Ltd. of Japan.Hitachi Ops Center Analyzer is a data center management software. It monitors, reports, and correlates end-to-end performance from servers to storage.Hitachi Infrastructure Analyti...

Access analysis CGI An-Analyzer vulnerable to open redirect

Overview Access analysis CGI An-Analyzer provided by ANGLERSNET Co,.Ltd. contains an open redirect vulnerability CWE-601. Tomoomi Iwata of Information-technology Promotion Agency, Japan reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...

Marked Compiler Regular Expression DoS

The vulnerability of the marking analyzer and compiler is related to the incorrect processing of the regular expression block.def. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

SolarWinds Database Performance Analyzer security vulnerabilities

SolarWinds Database Performance Analyzer is a set of database performance analyzers from SolarWinds Inc. in the United States. The product is used for SQL query performance monitoring, analysis, and tuning, among other things. A security vulnerability exists in SolarWinds Database Performance...

Hitachi Ops Center Analyzer log information leakage vulnerability

Hitachi Ops Center Analyzer is a data center management software from Hitachi, Japan. It monitors, reports, and correlates end-to-end performance from servers to storage. Hitachi Ops Center Analyzer suffers from a log information disclosure vulnerability that originates from inserting sensitive...

Cisco FirePOWER Services Software Command-Line Interface Arbitrary Command Execution

The vulnerability of the command-line interface analyzer in Cisco FirePOWER Services Software for ASA is related to errors in processing uncertain command parameters. Exploiting this vulnerability allows an attacker to execute arbitrary commands with root privileges remotely...

Security Bulletin: A vulnerability in IBM® SDK, Java™ may affect Rational Asset Analyzer (CVE-2021-35550)

Summary There is a vulnerability in IBM® Java™ version 8 used by Rational Asset Analyzer. This has been addressed. Vulnerability Details CVEID:CVE-2021-35550 DESCRIPTION: An unspecified vulnerability in Java SE related to the JSSE component could allow an unauthenticated attacker to obtain...

Security Bulletin: A vulnerability in IBM® SDK, Java™ affects Rational Asset Analyzer (CVE-2021-35603)

Summary There is a vulnerability in IBM® Java™ version 8 used by Rational Asset Analyzer. This has been addressed. Vulnerability Details CVEID:CVE-2021-35603 DESCRIPTION: An unspecified vulnerability in Java SE related to the JSSE component could allow an unauthenticated attacker to obtain...

RTMPT traffic analyzer DoS

The vulnerability of the RTMPT traffic analyzer in Wireshark relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending specially crafted packets...

Hitachi Ops Center Analyzer vulnerability of communication using a certificate not intended by the user

Overview Hitachi Ops Center Analyzer has a vulnerability of communication using a certificate not intended by the user. Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer to the 'Vendor Information' section for the official countermeasure...

XML Analyzer Maintenance Failure

The vulnerability of the XML analyzer for software that manages Cisco Firepower Device Manager On-Box devices is related to an operation where data escapes beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure...

CVE-2020-2937

Vulnerability in the Oracle Insurance Accounting Analyzer product of Oracle Financial Services Applications component: User Interface. Supported versions that are affected are 8.0.6 - 8.0.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...