109324 matches found
CVE-2025-64074
CVE-2025-64074 describes a path-traversal vulnerability in the logout functionality of Shenzhen Zhibotong Electronics ZBT WE2001 (version 23.09.27). A remote attacker can delete arbitrary files on the host by supplying a crafted session cookie value. The available documents do not provide concret...
QNAP Systems File Station 5 安全漏洞
QNAP Systems File Station 5 is a file management system developed by QNAP Systems, a company based in Taiwan, China. Versions of QNAP Systems File Station 5 prior to 5.5.6.5018 contained security vulnerabilities. These vulnerabilities stemmed from unlimited resource allocation without any...
PT-2026-7539
A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: QuTS hero...
QNAP Qsync Central 代码问题漏洞
QNAP Qsync Central is a cloud-based file synchronization service for NAS devices provided by QNAP Technology Co., Ltd. Versions of QNAP Qsync Central prior to 5.0.0.4 contained a code vulnerability caused by a null pointer dereferencing, which could allow remote attackers to launch a...
QNAP Systems File Station 5 路径遍历漏洞
QNAP Systems File Station 5 is a file management system developed by QNAP Systems, a company based in Taiwan, China. Versions of QNAP Systems File Station 5 prior to 5.5.6.5190 contained a path traversal vulnerability. This vulnerability was due to the presence of path traversal vulnerabilities,...
The vulnerability of the exynos_clkout_probe() function in the drivers/clk/samsung/clk-exynos-clkout.c driver for the Samsung Exynos clocking controller in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the exynosclkoutprobe function in the drivers/clk/samsung/clk-exynos-clkout.c driver for the Samsung Exynos clock controller in the Linux operating system is related to improper initialization of resources. Exploiting this vulnerability could allow a remote attacker to...
PT-2026-7533
Name of the Vulnerable Software and Affected Versions Qsync Central versions prior to 5.0.0.4 Description An out-of-bounds write issue exists in Qsync Central. A remote attacker who obtains a user account can potentially modify or corrupt memory. Recommendations Update to Qsync Central version...
PT-2026-7531
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4...
PT-2026-7564
A relative path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync...
PT-2026-7544
Name of the Vulnerable Software and Affected Versions Qsync Central versions prior to 5.0.0.4 Description A flaw exists in Qsync Central that, if exploited by a remote attacker with a user account, could lead to a denial-of-service DoS attack. The issue is due to a NULL pointer dereference...
PT-2026-7550
A use of out-of-range pointer offset vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read sensitive portions of memory. We have already fixed the vulnerability in the following version: Qsync Central...
PT-2026-7551
Name of the Vulnerable Software and Affected Versions File Station 5 versions prior to 5.5.6.5018 Description A resource allocation issue without limits or throttling exists in File Station 5. If an attacker obtains administrator access, they can exploit this to disrupt access to resources for...
Apple多款产品 安全漏洞
Apple iOS is an operating system developed for mobile devices.Apple macOS is a specialized operating system developed for Mac computers.Apple iPadOS is an operating system for iPad tablets. A path traversal vulnerability exists in several Apple products. The vulnerability stems from a program's...
Keras 安全漏洞
Keras is an open-source deep learning framework with multiple backends. Versions of Keras 3.13.1 and earlier contain security vulnerabilities. These vulnerabilities stem from defects in the model loading mechanism HDF5 integration, which could allow remote attackers to read local files through...
The vulnerability of the f2fsPutSuper() function in the fs/f2fs/super.c module of the F2FS file system in Linux operating systems allows a hacker to cause a service failure.
The vulnerability of the f2fsputsuper function in the fs/f2fs/super.c module of the F2FS file system in Linux operating systems is related to errors during link counters updates. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the JSON Web Token Handler component of the Keycloak identity and access management software allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the JSON Web Token Handler component in the software for managing identification and access in Keycloak is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...
pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID
A flaw was found in pyasn1, a generic ASN.1 library for Python. A remote attacker could exploit this vulnerability by sending a specially crafted RELATIVE-OID with excessive continuation octets. This input validation vulnerability leads to memory exhaustion, resulting in a Denial of Service DoS f...
CVE-2026-1507 Uncaught Exception vulnerability in AVEVA PI Data Archive
The affected products are vulnerable to an uncaught exception that could allow an unauthenticated attacker to remotely crash core PI services resulting in a denial-of-service...
Scrapy: python-scrapy: brotli: Python brotli decompression bomb DoS
Scrapy are vulnerable to a denial of service DoS attack due to a flaw in its brotli decompression implementation. The protection mechanism against decompression bombs fails to mitigate the brotli variant, allowing remote servers to crash clients with less than 80GB of available memory. This occur...
