17017 matches found
K000158197: Linux Kernel vulnerability CVE-2022-50406
Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: iomap: iomap: fix memory corruption when recording errors during writeback. CVE-2022-50406 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Status F5...
SGWBox N3 命令注入漏洞
SGWBox N3 is a network storage device from China's Pickup Dock SGWBox. A command injection vulnerability exists in SGWBox N3 version 2.0.25, which stems from incorrect manipulation of the parameter params in the component SHARESERVER Feature, which could lead to command injection...
Nintendo: ASLR leak in Mario Kart World through LAN mode
A vulnerability was discovered in the LAN mode of Mario Kart World that allowed an ASLR leak. This vulnerability was found in the game's software...
XML External Entity (XXE) Injection
Jenkins CCCC Plugin is vulnerable to XML External Entity XXE Injection. The vulnerability is due to improper configuration of the XML parser without XXE protection, which allows an attacker to process malicious XML input and access sensitive resources...
Malwarebytes 安全漏洞
Malwarebytes is an application from the American company Malwarebytes that provides anti-malware capabilities to devices. The software is designed to defend against viruses, spyware, Trojans, worms, dial-up programs, and other malware. A security vulnerability exists in Malwarebytes version 1.0.1...
The vulnerability of the userEmail component in the Linksys E8450 Wi-Fi router software allows a hacker to execute arbitrary commands.
The vulnerability of the userEmail component in the Linksys E8450 Wi-Fi router software relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
CVE-2025-62557 Microsoft Office Remote Code Execution Vulnerability
...
EUVD-2025-202259
DNG SDK versions 1.7.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure or application denial of service. An attacker could leverage this vulnerability to disclose sensitive memory information. Exploitation of this issue requires user...
CVE-2025-66334
Denial of service DoS vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-14182 Sobey Media Convergence System upload path traversal
A vulnerability has been found in Sobey Media Convergence System 2.0/2.1. This vulnerability affects unknown code of the file /sobey-mchEditor/watermark/upload. The manipulation of the argument File leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to t...
WordPress Custom Sidebars by ProteusThemes plugin <= 1.0.3 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan in WordPress Plugin Custom Sidebars by ProteusThemes versions = 1.0.3...
RHSA-2025:22398 Red Hat Security Advisory: haproxy security update
Bulletin has no description...
CVE-2025-58485
Improper input validation in Samsung Internet prior to version 29.0.0.48 allows local attackers to inject arbitrary script...
CVE-2025-58479
Out-of-bounds read in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory...
SQL Injection Vulnerability in Changjitong T+ of Changjitong Information Technology Co. Ltd (CNVD-C-2025-448742)
T+ is a dynamic, intelligent and fashionable Internet management software, mainly for small and medium-sized industrial, trade and commerce enterprises with integrated financial and business applications, incorporating elements of socialization, mobility, Internet of Things, e-commerce and Intern...
The vulnerability of the Keymaster component of MediaTek’s microprogramming software allows attackers to enhance their privileges and expose protected information.
The vulnerability of the Keymaster component of MediaTek’s microprogramming software lies in the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to enhance their privileges and expose sensitive information...
PUB-A-397679986
In convertHalTDToRil of commands.cpp, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
Tryton sao allows XSS via an HTML attachment
Tryton sao aka tryton-sao before 7.6.9 allows XSS via an HTML attachment. This is fixed in 7.6.9, 7.4.19, 7.0.38, and 6.0.67...