Use After Free

Overview Affected versions of this package are vulnerable to Use After Free in the mbedtlsx509stringtonames function. An attacker can potentially achieve code execution, information disclosure, or cause a denial of service by triggering use of memory after it has been freed, such as by manipulati...

Perplexity AI Web Application 安全漏洞

Perplexity AI Web Application is a big data search engine application utilizing a big language model from Perplexity, Inc. in the United States. A security vulnerability exists in Perplexity AI Web Application GPT-4 version 2.51.0, which stems from mishandling of the token component and could lea...

The vulnerability of the gf_ac4parser_bs function in the MP4Box multimedia platform of GPAC allows a hacker to cause a service failure or disclose protected information.

The vulnerability of the gfac4parserbs function in the MP4Box utility of the GPAC multimedia platform is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause system failures or disclose protected information...

Oracle PeopleSoft 安全漏洞

Oracle PeopleSoft is a suite of enterprise human capital management solutions from Oracle Corporation USA. The product provides human capital management, financial management, vendor relationship management, and other capabilities. A security vulnerability exists in Oracle PeopleSoft's PeopleSoft...

Oracle Analytics 访问控制错误漏洞

Oracle Analytics is an enterprise analytics solution from Oracle Corporation USA. Oracle Analytics has a security vulnerability in Oracle BI Publisher versions 7.6.0.0.0, 8.2.0.0.0, and 12.2.1.4.0 that stems from a web server vulnerability that could lead to data tampering and disclosure...

Oracle Construction and Engineering Suite 安全漏洞

Oracle Construction and Engineering Suite is a portfolio management solution suite product for construction projects from Oracle Corporation USA. A security vulnerability exists in Oracle Construction and Engineering Suite's Primavera P6 Enterprise Project Portfolio Management that stems from a W...

hibernate-validator: Hibernate Validator Expression Language Injection

A flaw was found in Hibernate Validator. This vulnerability allows unauthorized access to sensitive information or the execution of arbitrary Java code by interpolating user-supplied input in a constraint violation message with an Expression Language...

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the buffer in memory, allowing attackers to exploit this to disclose protected information.

The vulnerability of Adobe After Effects’ video and dynamic image editing software relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created file...

IBM Storage Scale 安全漏洞

IBM Storage Scale is a storage solution from International Business Machines IBM designed to help organizations efficiently manage and scale storage resources to meet growing data storage needs. A security vulnerability exists in IBM Storage Scale versions 5.2.3.0 and 5.2.3.1, which stems from an...

CVE-2025-53509

A vulnerability exists in Advantech iView that allows for argument injection in the NetworkServlet.restoreDatabase. This issue requires an authenticated attacker with at least user-level privileges. An input parameter can be used directly in a command without proper sanitization, allowing arbitra...

Juniper Security Director 安全漏洞

Juniper Security Director is a centralized management platform for security devices from Juniper USA. A security vulnerability exists in Juniper Security Director version 24.4.1 that stems from an authorization gap and could lead to the disclosure of sensitive information...

Marvell QConvergeConsole path traversal vulnerability (CNVD-2025-20446)

Marvell QConvergeConsole is a unified adapter management software across data centers from Marvell USA. Marvell QConvergeConsole has a path traversal vulnerability that is caused by an error in the getDriverTmpPath method. An attacker could exploit the vulnerability to disclose information in the...

Emerson ValveLink Products 安全漏洞

Emerson ValveLink Products is a diagnostic software from Emerson USA. A security vulnerability exists in Emerson ValveLink Products that originates from the explicit storage of sensitive information, which could lead to information disclosure...

The vulnerability of the Microsoft SQL Server relational database management system, related to insufficient validation of input data, allows attackers to disclose sensitive information that should be protected.

The vulnerability of the Microsoft SQL Server relational database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

CVE-2025-46788

Improper certificate validation in Zoom Workplace for Linux before version 6.4.13 may allow an unauthorized user to conduct an information disclosure via network access...

Advantech iView 跨站脚本漏洞

Advantech iView is a Simple Network Protocol SNMP based software from Advantech, China to manage B + B SmartWorx devices. A cross-site scripting vulnerability exists in Advantech iView due to improper validation of user-supplied input. An attacker could use this vulnerability to execute...

The vulnerability of Websoft HCM’s automation software for HR processes lies in the exposure to information due to inconsistencies, allowing attackers to disclose protected information.

The vulnerability of Websoft HCM’s automation software for HR processes is related to the exposure of information due to inconsistencies. Exploiting this vulnerability allows a malicious actor to disclose the protected information remotely...

The vulnerability of the software for remote IT support and monitoring of Dell Secure Connect Gateway (SCG) arises from the lack of protective measures for the SQL query structure. This allows attackers to disclose sensitive information that should be protected.

The vulnerability of software for remote IT support and monitoring of Dell Secure Connect Gateway SCG is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow attackers to disclose sensitive information...

The vulnerability of Websoft HCM’s automation software for HR processes lies in its inability to properly handle incoming requests, allowing attackers to disclose protected information.

The vulnerability of Websoft HCM’s automation software for HR processes is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

CVE-2025-20688

In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418047; Issue ID: MSV-3480...