5700 matches found
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from tracing calling a sleep function from an invalid context in the RT kernel...
Cross-Site Scripting (XSS)
@ckeditor/ckeditor5-real-time-collaboration is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper handling of user markers in the real-time collaboration package, which can allow unauthorized JavaScript execution in certain editor and token endpoint configurations...
Zephyr 缓冲区错误漏洞
Zephyr is an extensible real-time operating system RTOS open-sourced by Zephyr. A buffer error vulnerability exists in Zephyr 4.0 and prior versions, which stems from insufficient input validation and could result in an out-of-bounds read triggered by a malicious or malformed packet...
O-RAN RIC 安全漏洞
O-RAN RIC is a RIC application from O-RAN. A security vulnerability exists in O-RAN RIC that stems from an attacker sending a large number of subscription requests via xApp to disrupt the initial connection between the gNB and Near RT-RIC...
PT-2025-7889 · O Ran · O-Ran Near Realtime Ric
Name of the Vulnerable Software and Affected Versions: O-RAN Near Realtime RIC I-Release affected versions not specified Description: An issue was discovered that allows an attacker to disrupt the initial connection between a gNB and the Near RT-RIC. This can be achieved by sending a high volume ...
CKEditor 41.3.0 - 44.2.0 XSS Vulnerability
CKEditor 5 is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2025-25299
CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. During a recent internal audit, a Cross-Site Scripting XSS vulnerability was discovered in the CKEditor 5 real-time collaboration package. This vulnerability affects user markers, which represent users' positions within...
Cross-site scripting (XSS) in the CKEditor 5 real-time collaboration package
Impact During a recent internal audit, we identified a Cross-Site Scripting XSS vulnerability in the CKEditor 5 real-time collaboration package. This vulnerability can lead to unauthorized JavaScript code execution and affects user markers, which represent users' positions within the document. Th...
@authorium/ckeditor5-build-multi-root (>=41.3.1, <=41.4.2), @eagerworks/ckeditor5-build-multi-root (>=41.4.2-auth.1, <=41.4.2) +8 more potentially affected by CVE-2025-25299 via @ckeditor/ckeditor5-real-time-collaboration (>=41.3.0-alpha.2, <=44.2.0-alpha.16)
@ckeditor/ckeditor5-real-time-collaboration NPM version =41.3.0-alpha.2, =41.3.1, =41.4.2-auth.1, =1.0.1, =4.0.45, =18.0.20, =0.0.8, =41.3.0-alpha.2, =1.0.8, =1.0.10 - htmljs-code 44.0.30 - markdownvue3demo 0.0.1 Source cves: CVE-2025-25299 Source advisory: OSV:GHSA-J3MM-WMFM-MWVH...
GHSA-J3MM-WMFM-MWVH Cross-site scripting (XSS) in the CKEditor 5 real-time collaboration package
Impact During a recent internal audit, we identified a Cross-Site Scripting XSS vulnerability in the CKEditor 5 real-time collaboration package. This vulnerability can lead to unauthorized JavaScript code execution and affects user markers, which represent users' positions within the document. Th...
CVE-2025-25299
CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. During a recent internal audit, a Cross-Site Scripting XSS vulnerability was discovered in the CKEditor 5 real-time collaboration package. This vulnerability affects user markers, which represent users' positions within...
UBUNTU-CVE-2025-25299
CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. During a recent internal audit, a Cross-Site Scripting XSS vulnerability was discovered in the CKEditor 5 real-time collaboration package. This vulnerability affects user markers, which represent users' positions within...
CVE-2025-25299 Cross-site scripting (XSS) in the real-time collaboration package
CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. During a recent internal audit, a Cross-Site Scripting XSS vulnerability was discovered in the CKEditor 5 real-time collaboration package. This vulnerability affects user markers, which represent users' positions within...
CVE-2025-25299
CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. During a recent internal audit, a Cross-Site Scripting XSS vulnerability was discovered in the CKEditor 5 real-time collaboration package. This vulnerability affects user markers, which represent users' positions within...
CVE-2025-25299 Cross-site scripting (XSS) in the real-time collaboration package
CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. During a recent internal audit, a Cross-Site Scripting XSS vulnerability was discovered in the CKEditor 5 real-time collaboration package. This vulnerability affects user markers, which represent users' positions within...
CVE-2025-25299
Summary: CVE-2025-25299 affects CKEditor 5 with Real-time collaboration enabled. The vulnerability is a cross-site scripting (XSS) issue affecting user markers (positions of users in the document) that could lead to unauthorized JavaScript execution under a very specific editor and token endpoint...
The vulnerability of the rtc component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the rtc component in the Linux operating system’s kernel is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the rtmutex component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the rtmutex component in the Linux operating system’s kernel is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
Overcoming Security Challenges in Real-Time APIs
Speed is everything in the modern business world. Our attention spans are shorter than ever, consumers demand short and seamless interactions, and the slightest delay in service delivery can see organizations fall far behind their competitors. This is why real-time APIs are so important; they...