2007 matches found
PT-2025-33493 · Plane · Plane
Name of the Vulnerable Software and Affected Versions: Plane versions prior to 0.28.0 Description: Plane is open-source project management software. A stored cross-site scripting XSS vulnerability exists in the description html field. This flaw allows an attacker to inject malicious JavaScript co...
Malicious code in com.microsoft.mixedreality.toolkit.planefinding (npm)
The package com.microsoft.mixedreality.toolkit.planefinding was found to contain malicious code...
CVE-2025-50251
Server side request forgery SSRF vulnerability in makeplane plane 0.23.1 via the password recovery...
K000152001: HTTP/2 vulnerability CVE-2025-54500
Security Advisory Description An HTTP/2 implementation flaw allows a denial-of-service DoS that uses malformed HTTP/2 control frames to break the maximum concurrent streams limit HTTP/2 MadeYouReset Attack. CVE-2025-54500 Impact This vulnerability allows a remote, unauthenticated attacker to caus...
K000151546: BIG-IP APM vulnerability CVE-2025-46405
Security Advisory Description When Network Access is configured on a BIG-IP APM virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. CVE-2025-46405 Impact Traffic is disrupted while the TMM process restarts. This vulnerability allows a remote,...
K000141436: BIG-IP Client SSL profile vulnerability CVE-2025-52585
Security Advisory Description When a BIG-IP LTM Client SSL profile is configured on a virtual server with SSL Forward Proxy enabled and Anonymous Diffie-Hellman ADH ciphers enabled, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. CVE-2025-52585 Impact Traffic i...
K000152786: NGINX ngx_mail_smtp_module vulnerability CVE-2025-53859
Security Advisory Description NGINX Open Source and NGINX Plus have a vulnerability in the ngxmailsmtpmodule that might allow an unauthenticated attacker to over-read NGINX SMTP authentication process memory; as a result, the server side may leak arbitrary bytes sent in a request to the...
Plane 安全漏洞
Plane is an open source, self-hosted project planning tool from Plane Open Source. A security vulnerability exists in Plane version 0.23.1, which stems from a server-side request forgery in the password recovery feature...
CVE-2025-50251
CVE-2025-50251 describes a server-side request forgery (SSRF) in Makeplane (plane) version 0.23.1, triggered via the password recovery feature. The vulnerability affects makeplane plane 0.23.1 and is classified with high impact for confidentiality and integrity, with a CVSS v3.1 base score of 9.1...
CVE-2025-50251
Server side request forgery SSRF vulnerability in makeplane plane 0.23.1 via the password recovery...
CVE-2025-50251
Server side request forgery SSRF vulnerability in makeplane plane 0.23.1 via the password recovery...
Linux Distros Unpatched Vulnerability : CVE-2024-35902
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/rds: fix possible cp null dereference cp might be null, calling cp-cpconn would produce...
Linux Distros Unpatched Vulnerability : CVE-2025-37783
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Fix error pointers in dpuplanevirtualatomiccheck The function...
Linux Distros Unpatched Vulnerability : CVE-2025-37851
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fbdev: omapfb: Add 'plane' value check Function dispcovlsetup is not intended to work with the value OMAPDSSWB of the enum parameter plane. The value of this...
Linux Distros Unpatched Vulnerability : CVE-2025-21941
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Fix null check for pipectx-planestate in resourcebuildscalingparams Null pointer dereference issue could occur when pipectx-planestate is null...
Moderate: Red Hat Security Advisory: Security release of Control plane Operators: RHOSO 18.0.10 (Feature Release 3)
RHOSO 18.0.10 Feature Release 3 Control Plane Operator Containers Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
Data-Plane Telemetry to Mitigate Long-Distance BGP Hijacks
Poor security of Internet routing enables adversaries to divert user data through unintended infrastructures hijack. Of particular concern -- and the focus of this paper -- are cases where attackers reroute domestic traffic through foreign countries, exposing it to surveillance, bypassing legal...
CVE-2025-52951
A Protection Mechanism Failure vulnerability in kernel filter processing of Juniper Networks Junos OS allows an attacker sending IPv6 traffic destined to the device to effectively bypass any firewall filtering configured on the interface. Due to an issue with Junos OS kernel filter processing, th...
