451 matches found
Mapserver 安全漏洞
Mapserver is an open-source platform developed by the Open Geospatial Foundation, designed for publishing spatial data and interactive map applications to the web. Vulnerabilities existed in MapServer versions from 6.0 to 8.6.2. These vulnerabilities stemmed from the combination of the...
[SECURITY] Fedora 44 Update: mapserver-8.6.1-1.fc44
MapServer is an Open Source platform for publishing spatial data and interactive mapping applications to the web...
Oracle Database Server (April 2026 CPU)
The versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2026 CPU advisory. - Security-in-Depth issue in the Spatial and Graph SQLite component of Oracle Database Server. This vulnerability cannot be exploited in the...
Follow My Eyes: Backdoor Attacks on VLM-Based Scanpath Prediction
Scanpath prediction models forecast the sequence and timing of human fixations during visual search, driving foveated rendering and attention-based interaction in mobile systems where their integrity is a first-class security concern. We present the first study of backdoor attacks against VLM-bas...
[SECURITY] Fedora 42 Update: mapserver-8.4.1-3.fc42
MapServer is an Open Source platform for publishing spatial data and interactive mapping applications to the web...
[SECURITY] Fedora 43 Update: mapserver-8.4.1-3.fc43
MapServer is an Open Source platform for publishing spatial data and interactive mapping applications to the web...
The vulnerability of the openstack-barbican component in the Red Hat OpenStack Platform cloud service platform allows a hacker to gain unauthorized access to protected information.
The vulnerability of the openstack-barbican component in the Red Hat OpenStack Platform cloud service platform is related to insufficient spatial partitioning. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
ROS-20260129-73-0003
Vulnerability in openstack-barbican related to insufficient spatial partitioning. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...
Oracle Database Server (January 2026 CPU)
The versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2026 CPU advisory. - Vulnerability in the Oracle Spatial and Graph OpenJPEG component of Oracle Database Server. Supported versions that are affected are...
The vulnerability of the software for managing, controlling, and organizing printing processes in Vasion Print Virtual Appliance Host and Print Application, due to insufficient spatial separation, allows attackers to gain unauthorized access to protected information.
The vulnerability of the Vasion Print Virtual Appliance Host and Print Application software for process management, control, and organization is related to insufficient spatial separation. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Bare Metal Operator (BMO) software, related to insufficient spatial partitioning, allows a attacker to disclose protected information.
The vulnerability of the Bare Metal Operator BMO software is related to insufficient spatial partitioning. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the data source plugin for open-source platforms for monitoring and surveillance by Grafana Databricks allows attackers to expose sensitive information.
The vulnerability of the data source plugin for open-source platforms for monitoring and observation by Grafana Databricks is related to insufficient spatial partitioning. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...
The vulnerability of the data source plugin for open-source platforms for monitoring and surveillance by Grafana Databricks allows attackers to expose sensitive information.
The vulnerability of the data source plugin for open-source platforms for monitoring and observation by Grafana Databricks is related to insufficient spatial partitioning. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...
CVE-2025-68280
Improper Restriction of XML External Entity Reference vulnerability in Apache SIS. It is possible to write XML files in such a way that, when parsed by Apache SIS, an XML file reveals to the attacker the content of a local file on the server running Apache SIS. This vulnerability impacts the...
Secure Wireless Communication Using Distributed Coherent Transmission and Spatial Signal Decomposition
We present a new approach to secure wireless communications using coherent distributed transmission of signals that are spatially decomposed between a two-element distributed antenna array. High-accuracy distributed coordination of microwave wireless systems supports the ability to transmit...
The vulnerability of Intel microprogramming software, related to insufficient spatial partitioning, allows attackers to enhance their privileges.
The vulnerability of Intel microprogramming software is related to insufficient spatial partitioning. Exploiting this vulnerability allows attackers to enhance their privileges...
COGNITION: From Evaluation to Defense against Multimodal LLM CAPTCHA Solvers
This paper studies how multimodal large language models MLLMs undermine the security guarantees of visual CAPTCHA. We identify the attack surface where an adversary can cheaply automate CAPTCHA solving using off-the-shelf models. We evaluate 7 leading commercial and open-source MLLMs across 18...
The vulnerability of the FortiSandbox threat detection and mitigation system, related to insufficient spatial separation, allows a perpetrator to bypass the sandbox’s protective mechanisms.
The vulnerability of the FortiSandbox threat detection and mitigation system is related to insufficient spatial separation. Exploiting this vulnerability could allow a malicious actor to bypass the sandbox’s protection mechanisms...
Malicious code in spatial_hornet_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 389e27ecf2f57391b9122a06b1b4ede3fff3841bdabe75a9e2d72ef849d715c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
