UTT HiPER 1200GW 缓冲区错误漏洞

UTT HiPER 1200GW is a wireless gateway device developed by UTT Corporation. Versions of UTT HiPER 1200GW prior to 2.5.3-1703 contain a buffer error vulnerability. This vulnerability originates from the strcopy function in the file/goform/formUser, and it may lead to a buffer overflow...

EUVD-2026-11931

Missing Authorization vulnerability in Maciej Bis Permalink Manager Lite permalink-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Permalink Manager Lite: from n/a through 2.5.3...

CVE-2026-32413

CVE-2026-32413 concerns a Missing Authorization vulnerability in WordPress’s Permalink Manager Lite plugin (versions

SuluFormBundle Security Vulnerability

SuluFormBundle is an application from the Austrian company Sulu that creates dynamic forms. A security vulnerability exists in SuluFormBundle versions prior to 2.5.3, which stems from a cross-site scripting vulnerability due to returned input fields not being cleaned...

CVE-2022-4482

The Carousel, Slider, Gallery by WP Carousel WordPress plugin before 2.5.3 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be...

Synology Note Station Cross-Site Scripting Vulnerability (CNVD-2019-20979)

Synology Note Station is a cloud-based note management application from Synology Inc. of Taiwan, China. A cross-site scripting vulnerability exists in SYNO.NoteStation.Shard in Synology Note Station versions prior to 2.5.3-0863. The vulnerability stems from the WEB application lacking proper...

FreeType parse_encoding function denial of service vulnerability

FreeType is a library of popular font functions. A security vulnerability exists in the parseencoding function of type1/t1load.c in versions of FreeType prior to 2.5.3, which can be exploited by remote attackers to cause a denial of service infinite loop...

MGASA-2014-0130 Updated freetype2 packages fix security vulnerabilities

It was reported that Freetype before 2.5.3 suffers from an out-of-bounds stack-based read/write flaw in cf2hintmapbuild in the CFF rasterizing code, which could lead to a buffer overflow CVE-2014-2240. It was also reported that Freetype before 2.5.3 has a denial-of-service vulnerability in the CF...