CVE-2023-1995

Insufficient Logging vulnerability in Hitachi HiRDB Server, HiRDB Server With Addtional Function, HiRDB Structured Data Access Facility.This issue affects HiRDB Server: before 09-60-39, before 09-65-23, before 09-66-17, before 10-01-10, before 10-03-12, before 10-04-06, before 10-05-06, before...

CVE-2018-20850

Stormshield Network Security 2.0.0 through 2.13.0 and 3.0.0 through 3.7.1 has self-XSS in the command line interface of the SNS web server...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft USA. A security vulnerability exists in Microsoft Windows. An attacker exploiting this vulnerability could gain access to sensitive information. The following products and versions are affected:Windows 10...

Microsoft Windows Kernel 安全漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system by Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Kernel. An attacker can exploit the vulnerability to elevate privileges. The following products and versions are affected:Windows 10 Version 18...

Microsoft Win32k 安全漏洞

Microsoft Win32k is a system file for Windows multi-user management from Microsoft USA. A security vulnerability exists in Microsoft Win32k. An attacker exploiting this vulnerability could remotely execute code. The following products and versions are affected:Microsoft Office LTSC for Mac...

CVE-2025-0669

Cross-Site Request Forgery CSRF vulnerability in BOINC Server allows Cross Site Request Forgery.This issue affects BOINC Server: before 1.4.3...

CVE-2025-30219 affecting package rabbitmq-server for versions less than 3.13.7-2

CVE-2025-30219 affecting package rabbitmq-server for versions less than 3.13.7-2. A patched version of the package is available...

CVE-2025-27936 Webhook Secret Exposure via Timing attack in MSteams plugin

Mattermost Plugin MSTeams versions 2.1.0 and Mattermost Server versions 10.5.x =10.5.1 with the MS Teams plugin enabled fail to perform constant time comparison on a MSTeams plugin webhook secret which allows an attacker to retrieve the webhook secret of the MSTeams plugin via a timing attack...

Microsoft Lightweight Directory Access Protocol（LDAP） 资源管理错误漏洞

Microsoft Lightweight Directory Access Protocol LDAP is a directory services protocol from Microsoft Corporation USA that runs on a layer above the TCP/IP stack. A resource management error vulnerability exists in Microsoft Lightweight Directory Access Protocol LDAP. An attacker exploiting this...

Microsoft Active Directory Domain Services 访问控制错误漏洞

Microsoft Active Directory Domain Services is a key service from Microsoft Corporation USA that is used to manage and organize resources, users, computers, and other security objects in a network. An access control error vulnerability exists in Microsoft Active Directory Domain Services. An...

Microsoft Windows Standards-Based Storage Management Service 资源管理错误漏洞

Microsoft Windows Standards-Based Storage Management Service is a standards-based storage management service from Microsoft Corporation USA that provides the ability to discover, configure, and monitor storage resources. A resource management error vulnerability exists in Microsoft Windows...

CVE-2025-1534 Cross-site Scripting (Stored)

CVE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Payara Platform Payara Server allows : Remote Code Inclusion.This issue affects Payara Server: from 4.1.2.1919.1 before 4.1.2.191.51, from 5.20.0 before 5.68.0, from 6.0.0 before 6.23.0, fr...

Creating Scripts to Identify Vulnerable SSH Servers

This whitepaper covers how to create Nmap scripts to identify banners and versions of SSH servers. It also covers methods to mitigate the public visibility of banners and version information on SSH servers. Written in Portuguese...

Microsoft Windows Installer 后置链接漏洞

Microsoft Windows Installer is a component of the Windows operating system from Microsoft Corporation USA. It provides a standard basis for installing and uninstalling software. A backlink vulnerability exists in Microsoft Windows Installer. An attacker could exploit the vulnerability to elevate...

Microsoft OLE 资源管理错误漏洞

Microsoft OLE is an object-oriented technology from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft OLE. An attacker exploiting this vulnerability could remotely execute code. The following products and versions are affected:Windows Server 2019 Server Core...

Microsoft Windows Digital Media 缓冲区错误漏洞

Microsoft Windows Digital Media is a collection of technologies and features for playing, managing, sharing, delivering, and protecting digital media content from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Windows Digital Media. An attacker could exploit the...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Digital Media. An attacker could exploit this vulnerability to gain elevated privileges. The following products a...

Microsoft Windows 缓冲区错误漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Windows Digital Media. An attacker could exploit this vulnerability to elevate privileges. The following products and versions are...

Microsoft Lightweight Directory Access Protocol 代码问题漏洞

Microsoft Lightweight Directory Access Protocol LDAP is a directory services protocol from Microsoft Corporation USA that runs on a layer above the TCP/IP stack. A code issue vulnerability exists in Microsoft Lightweight Directory Access Protocol. An attacker could exploit this vulnerability to...

Microsoft Windows PrintWorkflowUserSvc 安全漏洞

Microsoft Windows PrintWorkflowUserSvc is a Windows service from Microsoft Corporation USA that provides support for print workflow applications. A security vulnerability exists in Microsoft Windows PrintWorkflowUserSvc. An attacker could exploit the vulnerability to elevate privileges. The...