CVE-2025-7251

IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the...

Oracle MySQL Access Control Error Vulnerability

Oracle MySQL is an open source relational database management system.MySQL Client is a MySQL client, a program used to communicate with a server to process information in a database managed by the server. An access control error vulnerability in Oracle MySQL's MySQL Client versions 8.0.0 through...

Unspecified Vulnerability in Oracle Fusion Middleware (CNVD-2025-24091)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. WebLogic Server is one of the application server components for cloud and traditional...

SUSE-SU-2025:02347-1 Security update for gstreamer-plugins-good

This update for gstreamer-plugins-good fixes the following issues: - CVE-2025-47183: Fixed out-of-bounds read in MOV/MP4 demuxer bsc1244406. - CVE-2025-47219: Fixed out-of-bounds read in MOV/MP4 demuxer bsc1244405. - CVE-2024-47540: Fixed uninitialized stack memory in Matroska/WebM demuxer...

CVE-2025-30745

Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite component: Device Integration. Supported versions that are affected are 12.2.12-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

Oracle E-Business Suite 跨站请求伪造漏洞

Oracle E-Business Suite is a fully integrated set of global business management software from Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Applications Framework versions...

Oracle Fusion Middleware 授权问题漏洞

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. WebLogic Server is one of the application server components for cloud and traditional...

Oracle MySQL 访问控制错误漏洞

Oracle MySQL is an open source relational database management system.MySQL Client is a MySQL client, a program used to communicate with a server to process information in a database managed by the server. An access control error vulnerability in Oracle MySQL's MySQL Client versions 8.0.0 through...

WordPress plugin Premium Age Verification Restriction for WordPress 信任管理问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A trust management issue vulnerability exis...

UBUNTU-CVE-2025-38310

In the Linux kernel, the following vulnerability has been resolved: seg6: Fix validation of nexthop addresses The kernel currently validates that the length of the provided nexthop address does not exceed the specified length. This can lead to the kernel reading uninitialized memory if user space...

Riverbed SteelHead VCX 信息泄露漏洞

Riverbed SteelHead VCX is a WAN optimization software from Riverbed, USA. A security vulnerability exists in Riverbed SteelHead VCX version 9.6.0a, which stems from a path traversal issue in the log filtering feature that could lead to arbitrary file reads...

White Star Software Protop 路径遍历漏洞

White Star Software Protop is a monitoring tool from White Star Software, USA. A security vulnerability exists in White Star Software Protop version 4.4.2-2024-11-27, which stems from a directory traversal in the /pt3upd/ endpoint that could lead to arbitrary file reads...

SAP SAPCAR 缓冲区错误漏洞

SAP SAPCAR is a utility program for compressing and/or decompressing SAP archive files from SAP, Germany. A buffer error vulnerability exists in SAP SAPCAR that stems from a memory corruption that could result in out-of-bounds memory reads and writes...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets, which stems from an incorrect boundary check resulting in out-of-bounds reads, which could lead to the disclosure of local information...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from incorrect boundary checking leading to out-of-bounds reads, which could lead to remote information disclosure...

Simple forum forum_downloadfile.php path traversal vulnerability

Simple forum is a simple forum. Simple forum suffers from a path traversal vulnerability, which stems from the parameter filename in the file /forumdownloadfile.php failing to properly filter for special elements in the path of a resource or file. An attacker can exploit this vulnerability to cau...

Infinera G42 安全漏洞

Infinera G42 is a modular platform for optical networks from Infinera, USA. A security vulnerability exists in Infinera G42 version R6.1.3, which stems from improper access control and could result in file reads and writes...

Infinera G42 安全漏洞

Infinera G42 is a modular platform for optical networks from Infinera, USA. A security vulnerability exists in Infinera G42 version R6.1.3 that stems from a directory traversal issue that could result in file reads and writes...

Hikvision Streaming Media Management Server 安全漏洞

Hikvision Streaming Media Management Server is a media management system from Hikvision China. A security vulnerability exists in Hikvision Streaming Media Management Server version v2.3.5, which stems from default credentials and directory traversal leading to arbitrary file reads...

Code-Projects Simple Forum 路径遍历漏洞

Simple forum is a simple forum. Simple forum suffers from a path traversal vulnerability, which stems from the parameter filename in the file /forumdownloadfile.php failing to properly filter for special elements in the path of a resource or file. An attacker can exploit this vulnerability to cau...