Subnet Solutions PowerSYSTEM Center Code Issues and Vulnerabilities

Subnet Solutions PowerSYSTEM Center is a power solution from Subnet Solutions, Inc. A code issue vulnerability exists in Subnet Solutions PowerSYSTEM Center that stems from mishandling of an exception condition could result in a denial of service...

WordPress plugin WP Remote Thumbnail: Code-related vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

WordPress plugin Squeeze: Code-related vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

Juniper Networks Junos OS SRX code issue vulnerabilities

Juniper Networks Junos OS SRX is a Juniper Networks, Inc. network operating system dedicated to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A code issue vulnerability exists in Juniper Networks Junos OS SRX that stems from the...

Microsoft Visual Studio code issues and vulnerabilities

Microsoft Visual Studio is a family of development tool suites and a largely complete set of development tools from Microsoft Corporation USA that includes most of the tools needed throughout the software lifecycle. A code issue vulnerability exists in Microsoft Visual Studio. An attacker could...

Adobe Framemaker code vulnerabilities

Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. A code issue vulnerability exists in Adobe Framemaker that originates from a null pointer dereference, which can b...

SourceCodester Web-based Pharmacy Product Management System Code-related Vulnerabilities

SourceCodester Web-based Pharmacy Product Management System is a SourceCodester open source Web-based pharmacy product management system. A code issue vulnerability exists in version 1.0 of the SourceCodester Web-based Pharmacy Product Management System, which stems from an incorrect manipulation...

BIT-DOLIBARR-2023-30253

Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation: ?PHP instead of ?php in injected data...

Projeqtor code-related vulnerabilities

Projeqtor is an open source PHP-based project management software from the Projeqtor community. The software is used to organize various functions required for multiple projects and is suitable for IT projects. A code issue vulnerability exists in Projeqtor 12.0.2 and earlier versions, which stem...

Chitu Code Issues and Vulnerabilities

Chitu is thu-pacman open source a high performance reasoning framework for large language models. A code issue vulnerability exists in Chitu version 0.1.0, which stems from the fact that incorrect manipulation of the parameter ckptpath/quantckptdir can lead to deserialization issues...

MAL-2025-3034 Malicious code in @hongfangze/calc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62ce8da37d7e1e8677cceb4a5db36f031470df22a7996162be8d54154076796a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

IBM Jazz Reporting Service code-related vulnerabilities

IBM Jazz Reporting Service is a suite of ready-to-use reporting components from International Business Machines IBM. The product includes features such as report generation, data collection and lifecycle queries. A code issue vulnerability exists in IBM Jazz Reporting Service that stems from a...

Bluestar Micro Mall code-related vulnerabilities

Bluestar Micro Mall is a shopping mall system from Bluestar, Inc. A code issue vulnerability exists in Bluestar Micro Mall version 1.0, which stems from an incorrect manipulation of the parameter File that can lead to unlimited uploads...

CVE-2025-2857

A critical sandbox escape vulnerability exists in Mozilla Firefox on Windows due to an issue in the IPC code . A compromised child process can trick the parent process into returning an unintentionally powerful handle , allowing an attacker to escape the sandbox. The original vulnerability was ex...

GNUPlot code-related vulnerabilities

gnuplot is a command-line interactive tool by Leon Sorokin, a personal developer, that allows users to enter commands to convert data and data functions into easily viewable flat or three-dimensional graphics. A code issue vulnerability exists in gnuplot, which stems from the CANVAStext function...

Digiwin ERP code-related vulnerabilities

Digiwin ERP is an e-commerce platform from China Dingxin Digiwin. A code issue vulnerability exists in Digiwin ERP version 5.1, which originates from an unrestricted upload and could lead to a remote attack...

Yue Lao Blind Box Code Issues and Vulnerabilities

Yue Lao Blind Box 月老瞎盒 is a take-off program by imsue individual developers. A code issue vulnerability exists in Yue Lao Blind Box version 4.0 and prior versions, which stems from an incorrect manipulation of the parameter data that can lead to unlimited uploads...

LzCMS code-related vulnerabilities

LzCMS is a simple blogging system by the individual developer of phplaozhang. A code issue vulnerability exists in LzCMS 1.1.4 and earlier versions, which stems from improper operation of the File parameter in the /admin/upload/upimage.html file, which may result in arbitrary file uploads...

Microsoft Dataverse code-related vulnerabilities

Microsoft Dataverse is a cloud-based data platform from Microsoft Corporation USA. It is used to share, save, cite, explore and analyze research data. Microsoft Dataverse has a code issue vulnerability that stems from an attacker's ability to remotely execute code by exploiting the vulnerability...

tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability

tj-actions/changed-files GitHub Action contains an embedded malicious code vulnerability that allows a remote attacker to discover secrets by reading Github Actions Workflow Logs. These secrets may include, but are not limited to, valid AWS access keys, GitHub personal access tokens PATs, npm...