3921 matches found
Schneider Electric EVLink WallBox 路径遍历漏洞
The Schneider Electric EVLink WallBox is a home charging station from the French company Schneider Electric. The Schneider Electric EVLink WallBox suffers from a path traversal vulnerability that stems from improperly restricted pathnames, which can be exploited by an attacker to cause arbitrary...
Important: firefox
Issue Overview: An attacker was able to perform an out-of-bounds read or write on a JavaScript Promise object. This vulnerability affects Firefox 138.0.4, Firefox ESR 128.10.1, and Firefox ESR 115.23.1. CVE-2025-4918 An attacker was able to perform an out-of-bounds read or write on a JavaScript...
Apache Kafka Client 安全漏洞
Apache Kafka Client is a Kafka client from the Apache USA Foundation. A security vulnerability exists in Apache Kafka Client that stems from insufficient validation of configuration data, which could lead to arbitrary file reads and server-side request forgery...
PT-2025-24623 · Schneider Electric · Evlink Wallbox
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A Path Traversal vulnerability exists, which could cause arbitrary file reads from the charging station. The exploitation of this vulnerability requires an authenticated session of the web...
CLSA-2025-1749478391 gstreamer1-plugins-good: Fix of CVE-2024-47596
CVE-2024-47596: fix integer underflow in MP4/MOV demuxer that can lead to out-of-bounds reads...
WordPress plugin CLEVER 路径遍历漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. The WordPress CLEVER plugin suffers from a path traversal vulnerability that stems from the program failing to properly filter special elements in the path of a resource or file...
libarchive 安全漏洞
libarchive is a multi-format archive and compression library open-sourced by libarchive. A security vulnerability exists in libarchive, which stems from an improperly sized LZSS window causing out-of-bounds reads in the heap buffer, which could result in a program crash or information disclosure...
FastGPT 安全漏洞
FastGPT is an open source knowledge base question and answer system based on a large language model from labring open source. A security vulnerability exists in FastGPT versions prior to 4.9.11, which stems from insufficient sandbox isolation and could result in file reads and writes...
NewStart CGSL MAIN 7.02 : krb5 Multiple Vulnerabilities (NS-SA-2025-0081)
The remote NewStart CGSL host, running version MAIN 7.02, has krb5 packages installed that are affected by multiple vulnerabilities: - In MIT Kerberos 5 aka krb5 before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid leng...
WordPress plugin Apptha Slider Gallery 路径遍历漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A path traversal vulnerability exists in the WordPress Apptha Slider Gallery plugin, which stems from improper path restriction. An attacker can exploit the vulnerability to cau...
RSJoomla! RSFirewall! 安全漏洞
RSJoomla! RSFirewall! is a website security protection tool from RSJoomla! A security vulnerability exists in RSJoomla! RSFirewall! versions 2.9.7 through 3.1.5, which stems from insufficient path cleanup and could lead to arbitrary file reads...
RHEL 10 : libsoup3 (RHSA-2025:7505)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:7505 advisory. Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup,...
SUSE SLED15: libsoup-2_4-1 / libsoup-2_4-1-32bit / libsoup2-devel / etc (SUSE-SU-2025:01802-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01802-1 advisory. - CVE-2025-4948: Fixed integer underflow in soupmultipartnewfrommessage leading to denial of...
nodejs: Memory Leak in Node.js ReadFileUtf8 Binding Leading to DoS
A flaw was found in the ReadFileUtf8 internal binding of Node.js. This vulnerability can allow an attacker to cause an application denial of service via repeated file read operations that trigger an unrecoverable memory leak due to a corrupted pointer in the underlying file system binding...
Google Pixel Information Leakage Vulnerability
Google Pixel is a smartphone from the American company Google Google. Google Pixel has an information disclosure vulnerability that can be exploited by an attacker to cause out-of-bounds reads...
Apple macOS 安全漏洞
Apple macOS is a specialized operating system developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS that originates from an application that may read sensitive location information...
Google Pixel 安全漏洞
Google Pixel is a smartphone from the American company Google Google. Google Pixel has an information disclosure vulnerability that can be exploited by an attacker to cause out-of-bounds reads...
PT-2025-47831
Name of the Vulnerable Software and Affected Versions libpng versions 1.6.0 through 1.6.50 libpng1.6 affected versions not specified Description The libpng PNG library contains a flaw that could lead to information leaks, denial of service, or potentially the execution of arbitrary code when...
PT-2025-47829
Name of the Vulnerable Software and Affected Versions libpng versions prior to 1.6.51 libpng1.6 versions prior to 1.6.39-2+deb12u1 libpng1.6 versions prior to 1.6.48-1+deb13u1 libpng12-0 versions prior to 1.6.52-alt1 Description LIBPNG is a library used for reading, creating, and manipulating PNG...
