Buoyant Edge 安全漏洞

Buoyant Edge is a Linkerd lightweight edge agent from Buoyant. A security vulnerability exists in Buoyant Edge versions prior to 25.2.1, which stems from the fact that metric data may consume a large amount of agent memory, leading to resource exhaustion...

Output Messenger 安全漏洞

Output Messenger is an enterprise-grade instant messaging and collaboration software from Output Messenger, Inc. that provides secure internal communications, file sharing, screen sharing and remote desktop control. A security vulnerability exists in Output Messenger versions prior to 2.0.63, whi...

IBM Business Automation Workflow 访问控制错误漏洞

IBM Business Automation Workflow is a suite of workflow automation solutions from International Business Machines IBM. The product is primarily used for workflow management, compliance management, and features workflow visibility and scalability. An access control error vulnerability exists in IB...

PT-2025-18514 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.0-rc1 Description: A potential null pointer dereference issue has been identified in the Linux kernel, specifically in the kprobe event gen test exit function. This issue occurs when the trace get event file...

PT-2025-18683 · Dataease · Dataease

Name of the Vulnerable Software and Affected Versions: DataEase versions prior to 2.10.9 Description: DataEase is an open-source BI tool alternative to Tableau. Prior to version 2.10.9, authenticated users can complete Remote Code Execution RCE through the backend JDBC link. This issue has been...

Open Policy Agent 安全漏洞

Open Policy Agent OPA is an open-source, general-purpose policy engine from Open Policy Agent Open Source that enables unified, context-aware policy enforcement across the stack. A security vulnerability exists in Open Policy Agent versions prior to 1.4.0, which stems from an HTTP Data API that...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A buffer overflow vulnerability exists in versions of Google Chrome prior to 136.0.7103.59, which stems from an application boundary error when handling untrusted input, and can be exploited by an attacker to cause heap corruption...

Joplin 安全漏洞

Joplin is an open source note-taking and to-do list application from the individual developer Laurent Cozic. A security vulnerability exists in Joplin versions prior to 3.3.3, which stems from a path traversal that may result in reading files outside the expected directory...

Amazon Linux 2 : qt (ALAS-2025-2847)

The version of qt installed on the remote host is prior to 4.8.5-15. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2847 advisory. In Qt before 5.15.14, 6.0.x through 6.2.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1, QtSvg QSvgFont munitsPerEm initialization...

UBUNTU-CVE-2025-4088

A security vulnerability in Thunderbird allowed malicious sites to use redirects to send credentialed requests to arbitrary endpoints on any site that had invoked the Storage Access API. This enabled potential Cross-Site Request Forgery attacks across origins. This vulnerability was fixed in...

libsnowflakeclient 安全漏洞

libsnowflakeclient is a Snowflake open source Snowflake tool. A security vulnerability exists in libsnowflakeclient versions prior to 0.5.0 through 2.2.0, which stems from the fact that incorrectly handling malformed requests may cause the application to hang...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox versions prior to 138, which stems from a memory corruption that could lead to the execution of arbitrary code...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in versions of Mozilla Firefox prior to 138, which stems from a modification of certain WebGL shader attributes that could lead to out-of-bounds reads, which in...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in versions of Mozilla Firefox prior to 138, which stems from an attacker's ability to disclose sensitive information or elevate privileges using a privileged UITour act...

PT-2025-54829

Name of the Vulnerable Software and Affected Versions utls versions prior to 1.7.0 Description The utls software did not implement the TLS 1.3 downgrade protection mechanism as specified in RFC 8446 Section 4.1.3 when a utls ClientHello specification was used. This allowed a network attacker to...

ImageMagick 安全漏洞

ImageMagick is a suite of open source image processing software from ImageMagick Open Source. It can read, convert or write images in many formats. A security vulnerability exists in versions prior to ImageMagick 7.1.1-44 that stems from improper image depth handling in MIFF image processing...

xrpl.js 安全漏洞

xrpl.js is an open source library from XRP Ledger. A security vulnerability exists in xrpl.js versions prior to 4.2.5, which stems from the inclusion of malicious code that could lead to private key disclosure...

PT-2025-17525 · Mojoomla · Wpams

Name of the Vulnerable Software and Affected Versions: WPAMS versions prior to 44.0 Description: The issue affects WPAMS, allowing for Reflected XSS due to improper neutralization of input during web page generation. This can lead to cross-site scripting. Recommendations: For versions prior to...

Google Chrome < 135.0.7049.114 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 135.0.7049.114. It is, therefore, affected by a vulnerability as referenced in the 202504stable-channel-update-for-desktop22 advisory. Note that Nessus has not tested for this issue but has instead relied only on the...

GoBGP 安全漏洞

GoBGP is an open source Border Gateway Protocol BGP implementation from osrg open source. A security vulnerability exists in GoBGP versions prior to 3.35.0, which stems from the fact that an attacker can cause the flowspec parser to crash by sending less than 20 bytes of data...