WordPress plugin Visualizer 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

DENX Software Engineering Das U-Boot 安全漏洞

DENX Software Engineering Das U-Boot is a Universal Bootloader from DENX Software Engineering, Germany. A security vulnerability exists in versions prior to DENX Software Engineering Das U-Boot 2025.01-rc1 that stems from an integer overflow in the symbolic link size calculation...

WordPress plugin File Uploads Addon for WooCommerce 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. An information disclosure...

JIP InfoBridge FileMegane 代码问题漏洞

JIP InfoBridge FileMegane is an application from JIP InfoBridge Japan. A code issue vulnerability exists in JIP InfoBridge FileMegane versions prior to 3.0.0.0 through 3.4.0.0, which stems from server-side request forgery SSRF and could allow execution of arbitrary back-end Web API requests,...

PT-2025-6747 · Barebox · Barebox

Name of the Vulnerable Software and Affected Versions: barebox versions prior to 2025.01.0 Description: The issue is related to an integer overflow in the request2size function in common/dlmalloc.c. Recommendations: For versions prior to 2025.01.0, update to version 2025.01.0 or later to resolve...

WordPress plugin LTL Freight Quotes – Unishippers Edition 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

PT-2025-7076

Name of the Vulnerable Software and Affected Versions: Label Studio versions prior to 1.16.0 Description: Label Studio's S3 storage integration feature contains a Server-Side Request Forgery SSRF vulnerability in its endpoint configuration. When creating an S3 storage connection, the application...

Intel SPS 输入验证错误漏洞

Intel SPS is a server platform service from Intel Corporation USA. An input validation error vulnerability exists in versions prior to Intel SPS SPSE506.01.04.059.0, which stems from improper input validation and results in a local denial of service...

PT-2025-6792 · Progress · Progress Telerik Report Server

Name of the Vulnerable Software and Affected Versions: In Progress Telerik Report Server versions prior to 2025 Q1 11.0.25.211 Description: The issue concerns the communication of non-sensitive information between the service agent process and app host process in In Progress Telerik Report Server...

PT-2025-6806 · Saadiqbal +2 · Advanced File Manager – Ultimate Wp File Manager/Document Library Solution +2

Name of the Vulnerable Software and Affected Versions: elFinder versions prior to 2.1.65 Description: Several WordPress plugins utilizing elFinder are susceptible to Directory Traversal, allowing unauthenticated attackers to delete arbitrary files. Exploitation requires the site owner to make an...

yimioa 安全漏洞

yimioa CloudNet OA is a locally deployed OA software by rabbit individual developers. A security vulnerability exists in yimioa version 2024.07.03 and prior versions, which stems from /oa/setup/setup.jsp contains an improper authorization issue...

Intel MPI Library 代码问题漏洞

Intel MPI Library is a library from Intel Corporation USA. A code issue vulnerability exists in Intel MPI Library versions prior to 2021.13 that stems from the presence of an uncontrolled search path that could allow an authenticated user to potentially enable elevation of privilege via local...

Q-Free MAXTIME Suite SQL注入漏洞

Q-Free MAXTIME Suite is a software suite for local traffic signal management from Q-Free. A SQL injection vulnerability exists in Q-Free MAXTIME Suite version 2.11.0 and prior versions, which stems from the editUserMenu endpoint in maxprofile/menu/model.lua that does not properly handle user inpu...

PT-2025-6246 · Ivanti · Ivanti Secure Access Client

Name of the Vulnerable Software and Affected Versions: Ivanti Secure Access Client versions prior to 22.8R1 Description: The issue is related to insufficient permissions in the Ivanti Secure Access Client, allowing a local authenticated attacker to delete arbitrary files. Recommendations: For...

PT-2025-5907 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions 4.1.2 and prior Description: The issue allows a local attacker to cause a denial of service DOS through an integer overflow. Recommendations: For OpenHarmony versions 4.1.2 and prior, at the moment, there is no informatio...

firefox: thunderbird: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.7

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6. Some of these bugs showed evidence of memory...

CVE-2024-29846

An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated attacker within the same network to execute arbitrary code...

CVE-2024-8014

In Progress Telerik Reporting versions prior to 2024 Q3 18.2.24.924, a code execution attack is possible through object injection via an insecure type resolution vulnerability...

WordPress plugin WP Dream Carousel 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

Ashlar-Vellum Cobalt 安全漏洞

Ashlar-Vellum Cobalt is a parametric-based computer-aided design and 3D modeling program from Ashlar-Vellum. A security vulnerability exists in versions prior to Ashlar-Vellum Cobalt v12 SP2 Build 1204.200 that stems from a lack of proper validation of user-supplied data when parsing CO files. An...