CVE-2025-31209

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in watchOS 11.5, macOS Sonoma 14.7.6, tvOS 18.5, iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, macOS Ventura 13.7.6. Parsing a file may lead to disclosure of user information...

Pagure 安全漏洞

Pagure is a Pagure open source Git repository written in Python that provides web services. A security vulnerability exists in the Pagure server that originates from a malicious user committing a specially crafted git repository, which could lead to the disclosure of sensitive information on the...

PHPGurukul Apartment Visitors Management System 注入漏洞

Apartment Visitors Management System is an apartment visitor management system. Apartment Visitors Management System suffers from a SQL injection vulnerability that originates from a misbehavior of the parameter pid in the file /admin/pass-details.php that results in SQL injection. An attacker ca...

Vulnerability of the emac_mac_tx_buf_send() function in the drivers/net/ethernet/qualcomm/emac/emac-mac.c module – A driver for supporting Qualcomm Ethernet network adapters in Linux operating systems. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the emacmactxbufsend function in the drivers/net/ethernet/qualcomm/emac/emac-mac.c module – The Linux kernel’s Qualcomm Ethernet adapter support driver is vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the Crestron Automate VX video conference management system, related to the transmission of accounting data in unencrypted form, allows a intruder to disclose the transmitted accounting data and gain unauthorized access to the system.

The vulnerability of the Crestron Automate VX video conference system lies in the transmission of account information in an unencrypted form. Exploiting this vulnerability could allow a malicious actor to disclose the transmitted account information and gain unauthorized access to the system...

Pixmeo OsiriX MD 安全漏洞

Pixmeo OsiriX MD is a medical image processing software from Pixmeo designed for DICOM image analysis and 3D reconstruction. A security vulnerability exists in Pixmeo OsiriX MD that stems from unencrypted transmission of credential information, which could lead to credential disclosure...

The vulnerability of the bitmap_ip_uadt() function in the kernel of the Google ChromeOS operating system allows a hacker to disclose protected information.

The vulnerability of the bitmapipuadt function in the kernel of the Google ChromeOS operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by this...

UNISOC Chipsets 安全漏洞

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of privilege checking and could lead to the disclosure of local information...

Dell Storage Manager 代码问题漏洞

Dell Storage Manager is software for managing and monitoring Dell storage systems, providing centralized management, performance monitoring, and troubleshooting with support for a wide range of Dell storage products. An improperly restricted XML external entity reference vulnerability exists in...

The vulnerability of the Message Stream module of the XWiki Platform, a platform for creating collaborative web applications. The XWiki Platform allows attackers to gain unauthorized access to protected information.

The vulnerability of the Message Stream module of the XWiki Platform, a platform for creating collaborative web applications, involves the disclosure of information in an unauthorized manner. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected informatio...

DBSyncer 安全漏洞

DBSyncer is an open source data synchronization middleware by 86dbs individual developers. A security vulnerability exists in DBSyncer version v2.0.6, which stems from improper access control of the /config/download component and could lead to the disclosure of sensitive information...

Sixun Shanghui Business Management System 访问控制错误漏洞

Sixun Shanghui Business Management System is a group business management system from Sixun, a Chinese company. An access control error vulnerability exists in Sixun Shanghui Business Management System version 7, which stems from improper handling of files/api/GylOperator/LoadData, which could lea...

IBM Business Automation Workflow 访问控制错误漏洞

IBM Business Automation Workflow is a suite of workflow automation solutions from International Business Machines IBM. The product is primarily used for workflow management, compliance management, and features workflow visibility and scalability. An access control error vulnerability exists in IB...

The vulnerability of software for discrete event simulation and automation in Rockwell Automation Arena arises from reading data beyond the acceptable range in memory. This allows attackers to exploit the protected information and execute arbitrary code.

The vulnerability of software for discrete event simulation and automation in Rockwell Automation Arena relates to reading data beyond the allowable range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information and execute arbitrary code, provided that the...

HashiCorp Vault Enterprise和HashiCorp Vault Community 安全漏洞

HashiCorp Vault Enterprise and HashiCorp Vault Community are both products of HashiCorp, Inc. of the U.S. HashiCorp Vault Enterprise is an enterprise information archiving platform.HashiCorp Vault Community is a key management engine. HashiCorp Vault Community is a key management engine used to...

The vulnerability of software for discrete event simulation and automation in Rockwell Automation Arena arises from reading data beyond the acceptable range in memory. This allows attackers to exploit the protected information and execute arbitrary code.

The vulnerability of software for discrete event simulation and automation in Rockwell Automation Arena relates to reading data beyond the allowable range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information and execute arbitrary code, provided that the...

PT-2025-18390 · Elastic · Apm Server

Name of the Vulnerable Software and Affected Versions: Elasticsearch APM Server affected versions not specified Description: The issue concerns the potential disclosure of sensitive information in APM Server error logs. This could happen when a bulk index request partially fails, causing parts of...

Elastic APM Server 安全漏洞

Elastic APM Server is a lightweight Agent from the Dutch company Elastic. A security vulnerability exists in Elastic APM Server that stems from a partially failed indexing request leading to the disclosure of sensitive information...

The vulnerability of the NEU format. The pre-processor Simcenter Femap allows a hacker to disclose protected information or execute arbitrary code within the context of the current process.

The vulnerability of the NEU format is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information or execute arbitrary code within the context of the current process...

Rail Pass Management System /admin/search-pass.php File SQL Injection Vulnerability

Rail Pass Management System is a rail pass management system. The Rail Pass Management System suffers from a SQL injection vulnerability that occurs when the searchdata parameter in the /admin/search-pass.php file is not properly filtered. An attacker can exploit this vulnerability to obtain...