BELL-CVE-2025-23152

Bulletin has no description...

CVE-2025-25276

An unauthenticated attacker can hijack other users' devices and potentially control them...

CLSA-2025-1744723009 php: Fix of CVE-2025-1861

CVE-2025-1861: move allocation of location from heap to stack, add error checking for location length...

AZL-61789 CVE-2025-29480 affecting package gdal 3.6.3-2

Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release function. NOTE: the Supplier indicates that the report is invalid and could not be reproduced...

CVE-2024-58109

Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-26852

DESCOR INFOCAD 3.5.1 and before and fixed in v.3.5.2.0 allows SQL Injection...

aider-chat (=0.43.0), aimon-llamaindex (>=0.0.6 <=0.0.8) +685 more potentially affected by CVE-2024-12911 via llama-index-core (>=0.10.0 <=0.12.28)

llama-index-core PYPI version =0.10.0, =0.0.6, =1.1.0, =3.0.0, =1.7.0, =1.0.0, =0.0.3, =0.2.1, =0.2.1.dev0, =0.1.3, =0.1.169, =0.1.0, =0.3.0, =0.1.0, =0.4.0.dev2 and more Source cves: CVE-2024-12911 Source advisory: SNYK:PYTHON-LLAMAINDEXCORE-9510942...

MAL-2025-1725 Malicious code in amazon-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2023-46401

KWHotel 0.47 is vulnerable to CSV Formula Injection in the invoice adding function...

CVE-2025-21360

Microsoft AutoUpdate MAU Elevation of Privilege Vulnerability...

CVE-2025-21289

Microsoft Message Queuing MSMQ Denial of Service Vulnerability...

USN-7192-1 xfpt vulnerability

It was discovered that xfpt did not properly manage memory under certain circumstances. If a user were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause the application to crash or execute arbitrary code...

Unsound usages of `u8` type casting in spl-token-swap

The library provides a safe public API unpack to cast u8 array to arbitrary types, which can cause to undefined behaviors. The length check of array can only prevent out-of-bound access on the return type. However, it can't prevent misaligned pointer when casting u8 pointer to a type aligned to...

CVE-2024-54100

Vulnerability of improper access control in the secure input module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...

MAL-2024-11377 Malicious code in ksdsjdksjmncnjsdmsnd (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-11310

The DVC from TRCore has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files...

Intel IPP 代码问题漏洞

Intel IPP is a multithreaded software library from Intel Corporation USA. It is used in multimedia and data processing applications. A code issue vulnerability exists in Intel IPP versions prior to 2021.12.0 that stems from an uncontrolled search path. An attacker could exploit this vulnerability...

CVE-2024-30133

HCL Traveler for Microsoft Outlook HTMO is susceptible to a control flow vulnerability. The application does not sufficiently manage its control flow during execution, creating conditions in which the control flow can be modified in unexpected ways...

CVE-2024-50573

In JetBrains Hub before 2024.3.47707 improper access control allowed users to generate permanent tokens for unauthorized services...

CVE-2024-8602 XML Eternal Entity Attack in the Software Library taxstatement.jar

When the XML is read from the codes in the PDF and parsed using a DocumentBuilder, the default settings of the DocumentBuilder allow for an XXE XML External Entity attack. Further information on this can be found on the website of the Open Worldwide Application Security Project OWASP. An attacker...