HCL SX 加密问题漏洞

HCL SX is an application from HCL India. A security vulnerability exists in HCL SX version v21, which stems from the use of weak encryption algorithms and could lead to the disclosure of sensitive information or data tampering...

CVE-2022-25622

creationtimestamp| type| source ---|---|--- 2025-04-21 14:02:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12658...

CVE-2025-32021 Weblate VCS credentials included in URL parameters are potentially logged and saved into browser history as plaintext

Weblate is a web based localization tool. Prior to version 5.11, when creating a new component from an existing component that has a source code repository URL specified in settings, this URL is included in the client's URL parameters during the creation process. If, for example, the source code...

CVE-2025-21595

A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause an FPC to crash, leading to Denial of Service DoS. On all Junos OS and Junos OS Evolved...

April 8, 2025-KB5055682 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 21H2

None None...

API Platform Core 安全漏洞

API Platform Core is a server component of API Platform open source by API Platform. A security vulnerability exists in API Platform Core versions prior to 4.0.21, which stems from a Relay special node type that can bypass security configuration...

CVE-2023-28207

creationtimestamp| type| source ---|---|--- 2025-03-21 03:14:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkuandack526 2025-03-21 04:16:28+00:00| seen| https://t.me/cvedetector/20781 2025-03-21 16:19:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8370 2025-03-25...

CVE-2024-9900 Cross-Site Scripting (XSS) in mudler/localai

mudler/localai version v2.21.1 contains a Cross-Site Scripting XSS vulnerability in its search functionality. The vulnerability arises due to improper sanitization of user input, allowing the injection and execution of arbitrary JavaScript code. This can lead to the execution of malicious scripts...

CVE-2024-53969

Adobe Experience Manager versions 6.5.21 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be exploited to execute arbitrary code in the context of the victim's browser session. By manipulating the DOM environment in the victim's browser, a low privileged...

2025-03 Cumulative Update for Microsoft server operating system version 21H2 for x64-based Systems (KB5053603)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

Medium: openssl

Issue Overview: Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker. However, measuring...

[SECURITY] Fedora 41 Update: xorg-x11-server-21.1.16-1.fc41

X.Org X11 X server...

GHSA-WG7V-W4X5-XVMX vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-25-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-17-openj9, openjdk-26-openj9, openjdk...

CVE-2025-25111 WordPress WP Spell Check plugin <= 9.21 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in WP Spell Check WP Spell Check wp-spell-check allows Cross Site Request Forgery.This issue affects WP Spell Check: from n/a through = 9.21...

CVE-2021-35105

Possible out of bounds access due to improper input validation during graphics profiling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2020-15610

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajaxphppecl.php. When parsing the modulo parameter, the process does...

CVE-2020-15428

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajaxcrons.php. When parsing the line parameter, the process does not...

CVE-2020-13515

A privilege escalation vulnerability exists in the WinRing0x64 Driver IRP 0x9c40a148 functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet IRP can cause an adversary to obtain elevated privileges. An attacker can send a malicious IRP to trigger this vulnerability...

CVE-2025-21664

creationtimestamp| type| source ---|---|--- 2025-01-21 13:16:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgawrhli6k2j 2025-01-21 13:28:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113866578202415415 2025-01-21 13:39:34+00:00| seen|...

SUSE CVE-2024-13176

Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker. However, measuring the timing would...