CVE-2025-43726

Dell Alienware Command Center (AWCC) for Windows has a local, low-privilege Elevation of Privileges flaw due to Improper Link Resolution Before File Access (Link Following). Affected are AWCC versions prior to 5.10.2.0. The vulnerability enables a local attacker with low privileges to escalate. T...

CVE-2025-43726

Dell Alienware Command Center 5.x AWCC, versions prior to 5.10.2.0, contains an Improper Link Resolution Before File Access 'Link Following'" vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2025-43726

Dell Alienware Command Center 5.x AWCC, versions prior to 5.10.2.0, contains an Improper Link Resolution Before File Access 'Link Following'" vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

PT-2025-35600

Name of the Vulnerable Software and Affected Versions: Dell Alienware Command Center versions prior to 5.10.2.0 Description: Dell Alienware Command Center AWCC contains an Improper Link Resolution Before File Access 'Link Following' issue. A local attacker with low privileges could potentially...

Dell Alienware Command Center 后置链接漏洞

DELL Alienware Command Center is Dell's proprietary control software for the Alienware family of gaming PCs, monitors and peripherals, designed to optimize hardware performance, personalize settings and manage the system. A link following vulnerability exists in DELL Alienware Command Center, whi...

ATEN eco DC 安全漏洞

ATEN eco DC is a data center infrastructure management software from China's ATEN Automation ATEN. A security vulnerability exists in ATEN eco DC, which stems from a missing authorization and could lead to elevated privileges...

CVE-2025-22483

A cross-site scripting XSS vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability...

CVE-2025-1494

IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attack...

CVE-2025-1994

IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a local user to execute arbitrary code on the system due to the use of unsafe use of the BinaryFormatter function...

CVE-2025-2697

IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to...

CVE-2025-22483

A cross-site scripting XSS vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability...

CVE-2025-22483

A cross-site scripting XSS vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability...

CVE-2025-22483

CVE-2025-22483 is an XSS vulnerability affecting QNAP License Center. Several QNAP OS versions are affected; an attacker who gains an administrator account could bypass security mechanisms or read application data. The issue is fixed in License Center 1.8.51 and later and in License Center 1.9.51...

CVE-2025-22483 License Center

A cross-site scripting XSS vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability...

CVE-2025-22483 License Center

A cross-site scripting XSS vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability...

Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is affected by a stored cross-site scripting vulnerability (CVE-2025-36000)

Summary IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is affected by a stored cross-site scripting vulnerability with the adminCenter-1.0 feature enabled. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Enterprise Application Runtimes, is affected by a stored cross-site scripting vulnerability (CVE-2025-36000)

Summary IBM WebSphere Application Server Liberty, which is bundled with IBM Enterprise Application Runtimes, is affected by a stored cross-site scripting vulnerability with the adminCenter-1.0 feature enabled. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes...

Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by a stored cross-site scripting vulnerability (CVE-2025-36000)

Summary IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by a stored cross-site scripting vulnerability with the adminCenter-1.0 feature enabled. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes sectio...

QNAP License Center 跨站脚本漏洞

QNAP License Center is a certificate center from Taiwan, China-based QNAP Technology QNAP. A cross-site scripting vulnerability exists in QNAP License Center that stems from a cross-site scripting attack that could result in bypassing security mechanisms or reading application data...

PT-2025-35254

Name of the Vulnerable Software and Affected Versions QNAP License Center versions prior to 1.8.51 QNAP License Center versions prior to 1.9.51 Description A cross-site scripting XSS vulnerability affects QNAP operating system versions. A remote attacker gaining an administrator account can explo...