Logo Cloud 安全漏洞

Logo Cloud is a series of cloud-based services and products from Logo Turkey. A security vulnerability exists in Logo Cloud versions prior to 2.57 that stems from improper output encoding or escaping, which could lead to a phishing attack...

EUVD-2025-24110

Malicious code in bioql PyPI...

EUVD-2022-7646

Malicious code in bioql PyPI...

EUVD-2025-24619

Malicious code in bioql PyPI...

CVE-2025-7545 affecting package binutils for versions less than 2.37-16

CVE-2025-7545 affecting package binutils for versions less than 2.37-16. A patched version of the package is available...

QNAP Qsync Central 代码问题漏洞

QNAP Qsync Central is a cloud-based file synchronization service on a NAS from Taiwan, China-based QNAP Technology QNAP. A code issue vulnerability exists in QNAP Qsync Central versions prior to 5.0.0.1, which stems from a null pointer dereference and could lead to a denial of service attack...

QNAP Qsync Central 代码问题漏洞

QNAP Qsync Central is a cloud-based file synchronization service on a NAS from Taiwan, China-based QNAP Technology QNAP. A code issue vulnerability exists in QNAP Qsync Central versions prior to 5.0.0.2, which stems from a null pointer dereference and could lead to a denial of service attack...

CVE-2025-61690

KV STUDIO (Keyence KV STUDIO) versions 12.23 and earlier contain a buffer underflow vulnerability that may allow arbitrary code execution when processing a specially crafted file. The issue is local, requires user interaction, and could impact confidentiality, integrity, and availability on the a...

CVE-2025-58776

KV Studio versions 12.23 and earlier are affected by a stack-based buffer overflow that can lead to arbitrary code execution when processing a specially crafted file. The vulnerability is described across multiple sources as a local vulnerability (attack vector: LOCAL) requiring user interaction,...

KNIME Business Hub 安全漏洞

KNIME Business Hub is KNIME's enterprise software for data science automation, deployment modeling, team collaboration and management workflows. A security vulnerability exists in KNIME Business Hub versions prior to 1.16.0 that originates from an unauthenticated, remote attacker who can craft...

PT-2025-40321

Name of the Vulnerable Software and Affected Versions VT STUDIO versions 8.53 and prior Description VT STUDIO versions 8.53 and earlier have a use after free issue. A specially crafted file can trigger arbitrary code execution on a vulnerable system. Recommendations Update VT STUDIO to a version...

CVE-2025-9906 affecting package keras for versions less than 3.3.3-4

CVE-2025-9906 affecting package keras for versions less than 3.3.3-4. A patched version of the package is available...

CVE-2025-41093

Insecure Direct Object Reference IDOR vulnerability in BOLD Workplanner in versions prior to 2.5.25 4935b438f9b, consisting of a lack of adequate validation of user input, allowing an authenticated user to access to basic contract details using unauthorised internal identifiers...

CVE-2025-41099

Insecure Direct Object Reference IDOR vulnerability in BOLD Workplanner in versions prior to 2.5.25 4935b438f9b, consisting of a lack of adequate validation of user input, allowing an authenticated user to access to the list of permissions using unauthorised internal identifiers...

CVE-2025-41097

CVE-2025-41097 affects Bold Workplanner, an enterprise HR software. The issue is an insecure direct object reference (IDOR) caused by insufficient validation of user input, allowing an authenticated user to access basic employee details using unauthorized internal identifiers. This vulnerability ...

CVE-2025-41091 Insecure Direct Object Reference in GPS BOLD Workplanner

Insecure Direct Object Reference IDOR vulnerability in BOLD Workplanner in versions prior to 2.5.25 4935b438f9b, consisting of a lack of adequate validation of user input, allowing an authenticated user to access to calendar details using unauthorised internal identifiers...

OpenSSL 3.3.0 < 3.3.5 Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 3.3.5. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.3.5 advisory. - Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm...

HP Support Assistant - Potential Escalation of Privilege

A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.47.41.0. The vulnerability could potentially allow a local attacker to escalate privileges via an arbitrary file write. HP has identified affected versions and the minimum version that...

Security Bulletin: Requests before 2.32.4 may leak .netrc credentials via malicious URLs due to a URL parsing flaw

Summary Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can...

Esri Portal For ArcGIS 跨站脚本漏洞

Esri Portal For ArcGIS is a component of Esri that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. A cross-site scripting vulnerability exists in Esri Portal For ArcGIS 11.4 and prior versions that originates from unvalidated...