CVE-2003-1521

Sun Java Plug-In 1.4 through 1.4.202 allows remote attackers to repeatedly access the floppy drive via the createXmlDocument method in the org.apache.crimson.tree.XmlDocument class, which violates the Java security model...

CVE-2003-1516

The org.apache.xalan.processor.XSLProcessorVersion class in Java Plug-in 1.4.201 allows signed and unsigned applets to share variables, which violates the Java security model and could allow remote attackers to read or write data belonging to a signed applet...

CVE-2023-43029

IBM Storage Virtualize vSphere Remote Plug-in 1.0 and 1.1 could allow a remote user to obtain sensitive credential information after deployment...

CVE-2025-14110

The WP Js List Pages Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'class' shortcode attribute in all versions up to, and including, 1.21 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

SUSE CVE-2025-12689

Mattermost versions 11.0.x = 11.0.4, 10.12.x = 10.12.2, 10.11.x = 10.11.6 fail to check WebSocket request field for proper UTF-8 format, which allows attacker to crash Calls plug-in via sending malformed request...

CVE-2025-12689 DoS in Calls plugin via malformed UTF-8 in WebSocket request

Mattermost versions 11.0.x = 11.0.4, 10.12.x = 10.12.2, 10.11.x = 10.11.6 fail to check WebSocket request field for proper UTF-8 format, which allows attacker to crash Calls plug-in via sending malformed request...

COMMAX UMS Client ActiveX Control 缓冲区错误漏洞

COMMAX UMS Client ActiveX Control is a browser plug-in from the Korean company COMMAX. A buffer error vulnerability exists in COMMAX UMS Client ActiveX Control version 1.7.0.2, which stems from a heap buffer overflow issue in CNCCtrl.dll that could lead to the execution of arbitrary code...

EUVD-2025-112812

Malicious code in hermes-apex-css-minimizer-webpack-plugin-phoebe npm...

ROS-20251029-04

A plug-in vulnerability in the Grafana-Zabbix web-based data submission tool is related to maximum CPU utilization. Exploitation of the vulnerability could allow an attacker due to a custom request with a regular expression, acting remotely, to cause a denial of service...

[SECURITY] [DLA 4342-1] gimp security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4342-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler October 22, 2025 https://wiki.debian.org/LTS -...

Fortinet FortiDLP 安全漏洞

Fortinet FortiDLP is a data leak prevention software from Fortinet, Inc. A security vulnerability exists in Fortinet FortiDLP that stems from an Outlookproxy plug-in that may allow an authenticated administrator to collect email information from the current user...

EUVD-2003-1511

Malware in sbrugna...

EUVD-2005-0876

Malware in sbrugna...

EUVD-2007-0322

Malware in sbrugna...

EUVD-2011-2810

Malware in sbrugna...

EUVD-2012-1001

Malware in sbrugna...

EUVD-2011-2827

Malware in sbrugna...

EUVD-2009-1106

Malware in sbrugna...

EUVD-2011-0039

Malware in sbrugna...

EUVD-2013-2771

Malware in sbrugna...