min-document 安全漏洞

min-document is a software library from the individual developer Jake Verbaten. A security vulnerability exists in min-document versions prior to 2.19.0, which stems from mishandling of namespace operations in the removeAttributeNS method, which could result in a denial of service or execution of...

LionCoders SalePro POS 安全漏洞

LionCoders SalePro POS is a point-of-sale system and inventory management software from LionCoders Bangladesh. A security vulnerability exists in LionCoders SalePro POS version 5.5.0 and prior versions, which stems from mishandling of the login component and could result in the transmission of...

CVE-2025-59692

PureVPN client applications on Linux through September 2025 mishandle firewalling. They flush the system's existing iptables rules and apply default ACCEPT policies when connecting to a VPN server. This removes firewall rules that may have been configured manually or by other software e.g., UFW,...

Apple macOS Tahoe environment variable mishandling vulnerability

Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...

Apple macOS Tahoe Symbolic Link Mishandling Vulnerability

Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...

Apple Xcode Path Mishandling Vulnerability

Apple Xcode is an integrated development tool that runs on the operating system Mac OS X. It is used for the development of the Mac OS X software. Apple Xcode suffers from a path mishandling vulnerability that can be exploited by an attacker to cause a process crash...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an error mishandling that could lead to null pointer dereferencing...

EulerOS Virtualization 2.13.0 : ppp (EulerOS-SA-2025-2186)

According to the versions of the ppp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : The passprompt plugin in pppd in ppp before 2.5.2 mishandles privileges.CVE-2024-58250 Tenable has extracted the preceding description...

EulerOS Virtualization 2.13.1 : ppp (EulerOS-SA-2025-2187)

According to the versions of the ppp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : The passprompt plugin in pppd in ppp before 2.5.2 mishandles privileges.CVE-2024-58250 Tenable has extracted the preceding description...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from mishandling of the sctpauthasocinitactivekey error, which could lead to reuse after release...

Apple Xcode 安全漏洞

Apple Xcode is an integrated development tool that runs on the operating system Mac OS X. It is used for the development of the Mac OS X software. Apple Xcode suffers from a path mishandling vulnerability that can be exploited by an attacker to cause a process crash...

Apple macOS Tahoe 安全漏洞

Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...

PT-2025-37134

Name of the Vulnerable Software and Affected Versions: BeyondCart Connector plugin for WordPress versions 1.4.2 through 2.1.0 Description: The BeyondCart Connector plugin for WordPress is susceptible to privilege escalation due to improper JWT JSON Web Token secret management and authorization...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly handling a hardware unreliability condition, which could lead to a system crash...

Linux Distros Unpatched Vulnerability : CVE-2016-3823

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The secure-session feature in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x befor...

Linux Distros Unpatched Vulnerability : CVE-2016-2482

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a buff...

Linux Distros Unpatched Vulnerability : CVE-2016-2479

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a buff...

MONAI 安全漏洞

MONAI is a medical imaging AI toolkit open-sourced by Project MONAI. A security vulnerability exists in MONAI 1.5.0 and earlier versions, which stems from mishandling of the pickleoperations function and could lead to a deserialization vulnerability and code execution...

AMD Graphics Driver 安全漏洞

AMD Graphics Driver is an integrated graphics driver from UltraMicroelectronics AMD. A security vulnerability exists in AMD Graphics Driver that stems from mishandling of privileges, which could result in modification of the TMR and loss of confidentiality or integrity...

FS2 资源管理错误漏洞

FS2 is a combinatorial streaming I/O library for Scala open-sourced by typelevel.scala. A resource management error vulnerability exists in FS2 versions 3.12.2 and earlier and 3.13.0-M1 through 3.13.0-M6, which stems from mishandling of TLS sessions and can lead to denial of service attacks...