17506 matches found
CVE-2025-22233
CVE-2024-38820 ensured Locale-independent, lowercase conversion for both the configured disallowedFields patterns and for request parameter names. However, there are still cases where it is possible to bypass the disallowedFields checks. Affected Spring Products and Versions Spring Framework: 6.2...
CVE-2025-30419
There is a memory corruption vulnerability due to an out of bounds read in GetSymbolBorderRectSize when using the SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a use...
CVE-2025-30420
There is a memory corruption vulnerability due to an out of bounds read in Bitmap::InternalDraw when using the SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user t...
CVE-2025-30421
There is a memory corruption vulnerability due to a stack-based buffer overflow in DrObjectStorage::XMLSerialize when using the SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacke...
CVE-2025-30418
There is a memory corruption vulnerability due to an out of bounds write in CheckPins when using the SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a...
CVE-2025-30417
There is a memory corruption vulnerability due to an out of bounds write in Library!DecodeBase64 when using the SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user ...
WordPress User Activity Tracking and Log plugin < 4.1.4 - IP Spoofing vulnerability
IP Spoofing vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin User Activity Tracking and Log versions 4.1.4...
CVE-2025-22233
CVE-2024-38820 ensured Locale-independent, lowercase conversion for both the configured disallowedFields patterns and for request parameter names. However, there are still cases where it is possible to bypass the disallowedFields checks. Affected Spring Products and Versions Spring Framework: 6.2...
CVE-2025-30421
There is a memory corruption vulnerability due to a stack-based buffer overflow in DrObjectStorage::XMLSerialize when using the SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacke...
CVE-2025-30421
There is a memory corruption vulnerability due to a stack-based buffer overflow in DrObjectStorage::XMLSerialize when using the SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacke...
CVE-2025-30418
There is a memory corruption vulnerability due to an out of bounds write in CheckPins when using the SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a...
CVE-2025-30419
There is a memory corruption vulnerability due to an out of bounds read in GetSymbolBorderRectSize when using the SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a use...
CVE-2025-30420
There is a memory corruption vulnerability due to an out of bounds read in Bitmap::InternalDraw when using the SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user t...
CVE-2025-30418
There is a memory corruption vulnerability due to an out of bounds write in CheckPins when using the SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a...
CVE-2025-30420
There is a memory corruption vulnerability due to an out of bounds read in Bitmap::InternalDraw when using the SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user t...
CVE-2025-30417
There is a memory corruption vulnerability due to an out of bounds write in Library!DecodeBase64 when using the SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user...
CVE-2025-30417
There is a memory corruption vulnerability due to an out of bounds write in Library!DecodeBase64 when using the SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user...
CVE-2025-30419
There is a memory corruption vulnerability due to an out of bounds read in GetSymbolBorderRectSize when using the SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a use...
CVE-2025-30421
The CVE-2025-30421 entry describes a memory corruption vulnerability in NI Circuit Design Suite caused by a stack-based buffer overflow in DrObjectStorage::XML_Serialize() when the SymbolEditor is used. Affected versions are 14.3.0 and earlier. Successful exploitation requires a user to open a sp...
CVE-2025-30421 Stack-based Buffer Overflow in DrObjectStorage::XML_Serialize() in NI Circuit Design Suite
There is a memory corruption vulnerability due to a stack-based buffer overflow in DrObjectStorage::XMLSerialize when using the SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacke...