Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox prior to version 135, which stems from the presence of a number of memory security vulnerabilities that could lead to arbitrary code execution...

Teedy 安全漏洞

Teedy is a French Teedy open source open source, lightweight document management system for individuals and businesses. A security vulnerability exists in Teedy 1.12 and earlier versions, which stems from a lack of cross-site request forgery CSRF protection and vulnerability to cross-site request...

WordPress plugin MDJM Event Management 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

PT-2025-5133 · Unknown · Suryabhan Custom Coming Soon

Name of the Vulnerable Software and Affected Versions: SuryaBhan Custom Coming Soon versions prior to 2.2 Description: The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting XSS. This enables attackers to inject malicious...

VulnCheck KEV: CVE-2024-32739

A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitive information via the "queryptaskverbose" function within MCUDBHelper...

Oracle JD Edwards Products 安全漏洞

Oracle JD Edwards Products is a fully integrated suite of Enterprise Resource Planning ERP applications from Oracle Corporation USA. The products provide application modules for financial management, project management, and asset lifecycle management. A security vulnerability exists in Oracle JD...

PT-2025-1715 · Fortra · Fortra Application Hub

Name of the Vulnerable Software and Affected Versions: Fortra Application Hub versions prior to 1.3 Description: The issue concerns the logging of credentials in the iam logfile under certain log settings. This occurs in the IAM or CORE service of Fortra Application Hub. Recommendations: For...

DEBIAN-CVE-2025-0448

Inappropriate implementation in Compositing in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2025-23109

Long hostnames in URLs could be leveraged to obscure the actual host of the website or spoof the website address This vulnerability affects Firefox for iOS 134...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in versions prior to Mozilla Firefox 134, which originates when a JavaScript link is opened in a new tab via a long press, which could lead to malicious scripts spoofing...

CVE-2024-13286 SVG Embed - Moderately critical - Cross site scripting - SA-CONTRIB-2024-050

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal SVG Embed allows Cross-Site Scripting XSS.This issue affects SVG Embed: from 0.0.0 before 2.1.2...

TeamPass 安全漏洞

TeamPass is an open source password manager from the individual developer Nils Laumaillé. A security vulnerability exists in versions prior to TeamPass 3.1.3.1, which stems from the inability to properly check whether a folder is located in an administrator-defined list of user-allowed folders wh...

PT-2024-10625 · Unknown · Crypt::Random::Source

Name of the Vulnerable Software and Affected Versions: Crypt::Random::Source versions prior to 0.13 Description: The issue concerns the Crypt::Random::Source package for Perl, which has a fallback to the built-in rand function. This function is not a secure source of random bits, potentially...

Gogs 安全漏洞

Gogs Go Git Service is a self-service Git hosting service based on the Go language by the Gogs team, which supports creating and migrating public/private repositories, adding and deleting repository collaborators, and so on. A security vulnerability exists in Gogs versions prior to 0.13.1, which...

Asseco Business Solutions Wapro ERP 安全漏洞

Asseco Business Solutions Wapro ERP is an enterprise-oriented ERP software from Asseco Business Solutions, Poland. A security vulnerability exists in Asseco Business Solutions Wapro ERP versions prior to 9.00.0, which stems from vulnerability to server-side MS SQL protocol downgrade requests, whi...

PT-2024-36321 · Unknown · Mohamed Riyaz Admin Customization

Name of the Vulnerable Software and Affected Versions: Mohamed Riyaz Admin Customization versions prior to 2.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on...

Rizin 安全漏洞

Rizin is a free open source reverse engineering framework from the Rizin organization. It is used for analyzing binary files, disassembling code, debugging programs, as a forensic tool, as a scriptable command-line hex editor capable of opening disk files, and more. A security vulnerability exist...

GStreamer 代码问题漏洞

GStreamer is an open source set of frameworks for processing streaming media from GStreamer. A code issue vulnerability exists in GStreamer versions prior to 1.24.10, which stems from a null reference vulnerability affecting the qtdemuxparsesbgp function in qtdemux.c. The vulnerability is caused ...

CVE-2024-11639

An authentication bypass in the admin web console of Ivanti CSA before 5.0.3 allows a remote unauthenticated attacker to gain administrative access...

PT-2024-9327 · Microsoft · Remote Desktop +1

Name of the Vulnerable Software and Affected Versions: Microsoft Remote Desktop versions prior to 1.2.5807 Description: The issue is related to a remote code execution vulnerability in the Remote Desktop Client, which is associated with inadequate access control. This vulnerability can be exploit...