Synology Note Station Client 安全漏洞

Synology Note Station Client is a desktop note application developed by Synology, a Chinese company. It supports note synchronization, knowledge management, and offline editing. Versions of Synology Note Station Client prior to 2.2.4-703 contained security vulnerabilities. These vulnerabilities...

Code Index MCP 安全漏洞

Code Index MCP is a smart code indexing and analysis large model context server developed by johnhuang316 as an individual developer. Versions of Code Index MCP prior to 2.14.0 contain security vulnerabilities. These vulnerabilities stem from the operation of the issaferegexpattern function in th...

libjxl-devel-0.11.2-2.1 on GA media (moderate)

libjxl-devel-0.11.2-2.1 on GA media Announcement ID: openSUSE-SU-2026:10910-1 Rating: moderate Cross-References: CVE-2025-12474 CVE-2025-70103 CVSS scores: CVE-2025-12474 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2025-12474 SUSE : 6.9...

Django 安全漏洞

Django is a set of open-source web frameworks based on the Python language, developed by the Django Foundation. This framework includes an object-oriented mapper, view system, template system, etc. Versions of Django prior to 6.0.6 and 5.2.15 contained security vulnerabilities. These...

GHSA-6R35-46G8-JCW9 vulnerabilities

Vulnerabilities for packages: vitess...

GHSA-6G8R-74QP-6859 vulnerabilities

Vulnerabilities for packages: uutils...

GHSA-G3JR-4JRM-JVQV vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-WH8P-H9HW-X2MC vulnerabilities

Vulnerabilities for packages: uutils...

GHSA-443W-3RQ3-5M5H vulnerabilities

Vulnerabilities for packages: druid...

GHSA-VCHC-9GGH-3236 vulnerabilities

Vulnerabilities for packages: uutils...

GHSA-443W-3RQ3-5M5H vulnerabilities

Vulnerabilities for packages: druid, hadoop-fips...

GHSA-654M-C8P4-X5FP vulnerabilities

Vulnerabilities for packages: langfuse, kubeflow-centraldashboard, opensearch-dashboards, prism, jitsucom-jitsu, lerna...

GHSA-5CV4-JP36-H3MW vulnerabilities

Vulnerabilities for packages: hydra, prometheus, nerdctl, fq, kubernetes-dashboard, minio, k3s, crossplane-provider-azure-authorization, telegraf, gptscript, istio, step, ingress-nginx-controller, kubernetes, grafana-pyroscope, hubble, cilium, kine, traefik, gitea,...

Tesla 安全漏洞

Tesla is an HTTP client software open-sourced by Elixir Tesla. Versions of Tesla from 0.6.0 to 1.18.3 contained security vulnerabilities. These vulnerabilities stemmed from the lack of restrictions on the size of decompressed data when processing highly compressed data, which could lead to...

react-router 安全漏洞

react-router is a declarative routing library for React, open-sourced by Remix. Versions 7.7.0 to 7.13.1 of react-router contain security vulnerabilities. These vulnerabilities stem from improper redirection handling when using the unstable RSC API, which may lead to cross-site scripting attacks ...

Google Chrome 安全漏洞

Google Chrome is a web browser developed by the American company Google. There is a security vulnerability in Google Chrome, which stems from improper implementation...

Zyxel VMG4005-B50B 安全漏洞

Zyxel VMG4005-B50B is a network device firmware designed for managing the network functions and configurations of Zyxel VMG4005-B50B router devices. There is a buffer overflow vulnerability present in Zyxel VMG4005-B50B. This vulnerability stems from the UPnP DeletePortMapping command failing to...

Google Chrome 安全漏洞

Google Chrome is a web browser developed by the American company Google. Google Chrome has a security vulnerability, which stems from insufficient policy execution...

Dräger Infinity Acute Care System和Dräger Standalone Infinity M540 patient monitor 安全漏洞

The Dräger Infinity Acute Care System and the Dräger Standalone Infinity M540 patient monitor are both products of the German company Dräger. The Dräger Infinity Acute Care System is an emergency monitoring platform that integrates patient monitoring, clinical workstations, and medical informatio...

BIRD 安全漏洞

BIRD is a full-featured dynamic IP routing daemon developed by BIRD OpenSource. Versions of BIRD prior to 2.19.0 contained security vulnerabilities; these vulnerabilities stemmed from stack buffer overflows in the BGP ASPATH mask matching implementation, which could potentially cause the daemon t...