11427 matches found
CVE-2025-58776
KV Studio versions 12.23 and prior contain a stack-based buffer overflow vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the affected product...
QNAP Qsync Central 代码问题漏洞
QNAP Qsync Central is a cloud-based file synchronization service on a NAS from Taiwan, China-based QNAP Technology QNAP. A code issue vulnerability exists in QNAP Qsync Central versions prior to 5.0.0.1, which stems from a null pointer dereference and could lead to a denial of service attack...
QNAP Qsync Central 代码问题漏洞
QNAP Qsync Central is a cloud-based file synchronization service on a NAS from Taiwan, China-based QNAP Technology QNAP. A code issue vulnerability exists in QNAP Qsync Central versions prior to 5.0.0.2, which stems from a null pointer dereference and could lead to a denial of service attack...
QNAP Qsync Central 缓冲区错误漏洞
QNAP Qsync Central is a cloud-based file synchronization service on a NAS from Taiwan, China-based QNAP Technology QNAP. A buffer error vulnerability exists in QNAP Qsync Central versions prior to 5.0.0.1, which stems from out-of-bounds writes that could result in memory modification or corruptio...
SUSE CVE-2025-54291
Information disclosure in images API in Canonical LXD before 6.5 and 5.21.4 on all platforms allows unauthenticated remote attackers to determine project existence via differing HTTP status code responses...
CVE-2025-11239 Job details are visible to all team members on KNIME Business Hub
Potentially sensitive information in jobs on KNIME Business Hub prior to 1.16.0 were visible to all members of the user's team. Starting with KNIME Business Hub 1.16.0 only metadata of jobs is shown to team members. Only the creator of a job can see all information including in- and output data i...
Bolt before 3.3.6 does not properly restrict access to _profiler routes
...
CVE-2025-61690
KV STUDIO (Keyence KV STUDIO) versions 12.23 and earlier contain a buffer underflow vulnerability that may allow arbitrary code execution when processing a specially crafted file. The issue is local, requires user interaction, and could impact confidentiality, integrity, and availability on the a...
CVE-2025-61692
VT STUDIO versions 8.53 and prior contain a use after free vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the affected product...
CVE-2025-58776
KV Studio versions 12.23 and earlier are affected by a stack-based buffer overflow that can lead to arbitrary code execution when processing a specially crafted file. The vulnerability is described across multiple sources as a local vulnerability (attack vector: LOCAL) requiring user interaction,...
Matrix 安全漏洞
Matrix is a new ecosystem of Matrix open source for open federated instant messaging and VoIP. A security vulnerability exists in Matrix versions prior to 1.16 that stems from a lack of creation event uniqueness, which could lead to a security risk...
PT-2025-40321
Name of the Vulnerable Software and Affected Versions VT STUDIO versions 8.53 and prior Description VT STUDIO versions 8.53 and earlier have a use after free issue. A specially crafted file can trigger arbitrary code execution on a vulnerable system. Recommendations Update VT STUDIO to a version...
KNIME Business Hub 安全漏洞
KNIME Business Hub is KNIME's enterprise software for data science automation, deployment modeling, team collaboration and management workflows. A security vulnerability exists in KNIME Business Hub versions prior to 1.16.0 that originates from an unauthenticated, remote attacker who can craft...
Discourse < 3.5.1 Multiple Vulnerabilities
Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...
Discourse 3.6.x < 3.6.0.beta1 Multiple Vulnerabilities
Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...
CVE-2025-9906 affecting package keras for versions less than 3.3.3-4
CVE-2025-9906 affecting package keras for versions less than 3.3.3-4. A patched version of the package is available...
CVE-2025-41093
Insecure Direct Object Reference IDOR vulnerability in BOLD Workplanner in versions prior to 2.5.25 4935b438f9b, consisting of a lack of adequate validation of user input, allowing an authenticated user to access to basic contract details using unauthorised internal identifiers...
TeamViewer Full Client和TeamViewer Host 安全漏洞
TeamViewer Full Client and TeamViewer Host are both a remote control software from the German company TeamViewer. A security vulnerability exists in TeamViewer Full Client and TeamViewer Host versions prior to 15.70 that stems from improper handling of symbolic links, which could lead to elevated...
IMPAQTR Aurora 安全漏洞
IMPAQTR Aurora is a data statistics platform from IMPAQTR Belgium. A security vulnerability exists in IMPAQTR Aurora versions prior to 1.36 that stems from an insecure direct object reference that could lead to access to arbitrary organizational information...