RT-Labs P-Net 安全漏洞

RT-Labs P-Net is an open source PROFINET protocol stack from RT-Labs that enables standard communication between industrial devices and PROFINET controllers. A security vulnerability exists in RT-Labs P-Net version 1.0.1 and prior versions, which stems from an unchecked loop condition that can be...

WordPress plugin Easy PayPal Buy Now Button 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...

RT-Labs P-Net 缓冲区错误漏洞

RT-Labs P-Net is an open source PROFINET protocol stack from RT-Labs that enables standard communication between industrial devices and PROFINET controllers. A security vulnerability exists in RT-Labs P-Net version 1.0.1 and prior versions, which can be exploited by an attacker to cause an IO...

CVE-2024-51991 October CMS Allows Unprotected SVG Rename in Media Manager

October is a Content Management System CMS and web platform. A vulnerability in versions prior to 3.7.5 affects authenticated administrators with sites that have the media.cleanvectors configuration enabled. This configuration will sanitize SVG files uploaded using the media manager. This...

Buoyant Edge 安全漏洞

Buoyant Edge is a Linkerd lightweight edge agent from Buoyant. A security vulnerability exists in Buoyant Edge versions prior to 25.2.1, which stems from the fact that metric data may consume a large amount of agent memory, leading to resource exhaustion...

Output Messenger 安全漏洞

Output Messenger is an enterprise-grade instant messaging and collaboration software from Output Messenger, Inc. that provides secure internal communications, file sharing, screen sharing and remote desktop control. A security vulnerability exists in Output Messenger versions prior to 2.0.63, whi...

IBM Business Automation Workflow 访问控制错误漏洞

IBM Business Automation Workflow is a suite of workflow automation solutions from International Business Machines IBM. The product is primarily used for workflow management, compliance management, and features workflow visibility and scalability. An access control error vulnerability exists in IB...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A buffer overflow vulnerability exists in versions of Google Chrome prior to 136.0.7103.59, which stems from an application boundary error when handling untrusted input, and can be exploited by an attacker to cause heap corruption...

Joplin 安全漏洞

Joplin is an open source note-taking and to-do list application from the individual developer Laurent Cozic. A security vulnerability exists in Joplin versions prior to 3.3.3, which stems from a path traversal that may result in reading files outside the expected directory...

UBUNTU-CVE-2025-4088

A security vulnerability in Thunderbird allowed malicious sites to use redirects to send credentialed requests to arbitrary endpoints on any site that had invoked the Storage Access API. This enabled potential Cross-Site Request Forgery attacks across origins. This vulnerability was fixed in...

ImageMagick 安全漏洞

ImageMagick is a suite of open source image processing software from ImageMagick Open Source. It can read, convert or write images in many formats. A security vulnerability exists in versions prior to ImageMagick 7.1.1-44 that stems from improper image depth handling in MIFF image processing...

PT-2025-54829

Name of the Vulnerable Software and Affected Versions utls versions prior to 1.7.0 Description The utls software did not implement the TLS 1.3 downgrade protection mechanism as specified in RFC 8446 Section 4.1.3 when a utls ClientHello specification was used. This allowed a network attacker to...

xrpl.js 安全漏洞

xrpl.js is an open source library from XRP Ledger. A security vulnerability exists in xrpl.js versions prior to 4.2.5, which stems from the inclusion of malicious code that could lead to private key disclosure...

KnowBe4 Security Awareness Training 安全漏洞

KnowBe4 Security Awareness Training is a human risk management software from KnowBe4. A security vulnerability exists in KnowBe4 Security Awareness Training versions prior to 2020-01-10 that stems from vulnerability to reflective cross-site scripting attacks...

relibc 安全漏洞

relibc Redox C Library is an open source library for Redox OS. A security vulnerability exists in versions prior to relibc 98aa4ea5, which stems from the setsockopt function that can lead to a denial of service...

WordPress plugin Theme File Duplicator 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

CVE-2025-29983

Dell Trusted Device, versions prior to 7.0.3.0, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

Growatt Cloud Applications 安全漏洞

Growatt Cloud Applications is a monitoring platform from Growatt in China. A security bypass vulnerability exists in Growatt Cloud Applications version 3.6.0 and prior versions, which can be exploited by unauthenticated attackers to send configuration settings and potentially perform physical...

AiDex 安全漏洞

AiDex is an artificial intelligence chatbot from AiDex. A security vulnerability exists in Aidex versions prior to 1.7, which stems from improper handling of the content parameter in the /api//message endpoint, which could lead to credential disclosure and sensitive information leakage...

Mozilla Thunderbird 安全漏洞

Mozilla Thunderbird is a suite of e-mail client software from the Mozilla Foundation in the United States that is separate from the Mozilla Application Suite. The software supports the IMAP and POP mail protocols as well as the HTML mail format. A security vulnerability exists in Mozilla...