PT-2025-45135

Name of the Vulnerable Software and Affected Versions Dell CloudLink versions prior to 8.2 Description A privileged user with knowledge of a password can execute command injection to gain control of the system. This allows an attacker to potentially compromise the affected system. Recommendations...

WSO2多款产品 安全漏洞

WSO2 API Manager and other products are products of WSO2, Inc.WSO2 API Manager is an API lifecycle management solution.WSO2 Enterprise Integrator is an open source hybrid integration platform.WSO2 Micro Integrator is a distributed microservices integration layer.WSO2 Micro Integrator is a...

Dell CloudLink 操作系统命令注入漏洞

Dell CloudLink is a data encryption and key management system from Dell USA. A command execution vulnerability exists in Dell CloudLink, which could be exploited by an attacker to execute arbitrary commands on the system...

CVE-2025-62369

Xibo is an open source digital signage platform with a web content management system CMS. Versions 4.3.0 and below contain a Remote Code Execution vulnerability in the CMS Developer menu's Module Templating functionality, allowing authenticated users with "System - Add/Edit custom modules and...

CVE-2025-48397

The CVE-2025-48397 issue affects Eaton Brightlayer Software Suite (BLSS). A privileged user could log in without sufficient credentials after enabling an application protocol. This vulnerability is fixed in the latest script patch, BLSS version 7.3.0.SCP004. Remediation is to upgrade to 7.3.0.SCP...

CVE-2025-48397

The privileged user could log in without sufficient credentials after enabling an application protocol. This security issue has been fixed in the latest script patch latest version of of Eaton BLSS 7.3.0.SCP004...

EUVD-2025-37477

The privileged user could log in without sufficient credentials after enabling an application protocol. This security issue has been fixed in the latest script patch latest version of of Eaton BLSS 7.3.0.SCP004...

JumpServer 安全漏洞

JumpServer is an open source bastion machine from Hangzhou, China-based Feizhiyun Information Technology JumpServer. A security vulnerability exists in JumpServer versions prior to v3.10.21-lts and prior to v4.10.12-lts, which originates from a specially crafted message that can be used by a...

CVE-2025-46582

A private key disclosure vulnerability exists in ZTE's ZXMP M721 product. A low-privileged user can bypass authorization checks to view the device's communication private key, resulting in key exposure and impacting communication security...

CVE-2025-46582

CVE-2025-46582 affects ZTE ZXMP M721. A low-privilege user can bypass authorization to view the device’s private key, leading to private-key disclosure and potential compromise of secure communications. The public descriptions consistently state that this enables key exposure and threatens commun...

CVE-2025-46582 Private Key Disclosure Vulnerability in ZTE ZXMP M721 Product

A private key disclosure vulnerability exists in ZTE's ZXMP M721 product. A low-privileged user can bypass authorization checks to view the device's communication private key, resulting in key exposure and impacting communication security...

CVE-2025-46582 Private Key Disclosure Vulnerability in ZTE ZXMP M721 Product

A private key disclosure vulnerability exists in ZTE's ZXMP M721 product. A low-privileged user can bypass authorization checks to view the device's communication private key, resulting in key exposure and impacting communication security...

CVE-2025-22170

Jira Align is vulnerable to an authorization issue. A low-privilege user without sufficient privileges to perform an action could if they included a particular state-related parameter of a user with sufficient privileges to perform the action...

CVE-2025-22170

Jira Align is vulnerable to an authorization issue. A low-privilege user without sufficient privileges to perform an action could if they included a particular state-related parameter of a user with sufficient privileges to perform the action...

CVE-2025-22170

Jira Align is vulnerable to an authorization issue. A low-privilege user without sufficient privileges to perform an action could if they included a particular state-related parameter of a user with sufficient privileges to perform the action...

EUVD-2025-35601

Jira Align is vulnerable to an authorization issue. A low-privilege user without sufficient privileges to perform an action could if they included a particular state-related parameter of a user with sufficient privileges to perform the action...

CVE-2025-22170

Summary: Jira Align has an authorization vulnerability where a low-privilege user could abuse a state-related parameter from a higher-privileged user to perform restricted actions. This is described in multiple sources (NVD/Red Hat/CVE records) without detailed root-cause or affected version info...

CVE-2025-22170

Jira Align is vulnerable to an authorization issue. A low-privilege user without sufficient privileges to perform an action could if they included a particular state-related parameter of a user with sufficient privileges to perform the action...

Atlassian Jira Align 安全漏洞

Atlassian Jira Align is a strategic-grade agile management platform from Atlassian Australia. A security vulnerability exists in Atlassian Jira Align that stems from an authorization issue that could lead to a low-privileged user modifying another user's private manifest...

CVE-2025-53070

Vulnerability in the Oracle Solaris product of Oracle Systems component: Filesystem. The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successf...