10738 matches found
Security Update for Microsoft Visual Studio Code (May 2025)
The version of Microsoft Visual Studio Code installed on the remote Windows host is prior to 1.100.1. It is, therefore, affected by an unspecified security feature bypass vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported...
SAP NetWeaver Visual Composer Metadata Uploader 安全漏洞
SAP NetWeaver Visual Composer Metadata Uploader is a component in SAP NetWeaver for uploading metadata. A deserialization vulnerability exists in SAP NetWeaver Visual Composer Metadata Uploader that originates from deserializing malicious content, which can be exploited by an attacker to cause a...
PT-2025-20812
Name of the Vulnerable Software and Affected Versions SAP NetWeaver affected versions not specified Description The Metadata Uploader function of the Visual Composer tool in SAP NetWeaver contains a flaw in its deserialization mechanism. Deserialization is the process of converting a data stream...
CVE-2025-42999: Deserialization of Untrusted Data
SAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system...
EulerOS 2.0 SP10 : vim (EulerOS-SA-2025-1542)
According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does no...
CVE-2025-4536
A vulnerability has been found in Gosuncn Technology Group Audio-Visual Integrated Management Platform 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysmgr/user/listByPage. The manipulation leads to information disclosure. The attack can b...
Malicious code in com.unity.visualeffectgraph (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 612fb4f703fb888029e1ae8bf1069fc5719a9288ee946e4210c5127c665c38d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-4536
CVE-2025-4536 affects Gosuncn Technology Group Audio-Visual Integrated Management Platform 1.0. The root cause is an incorrect operation/handling of the file /sysmgr/user/listByPage, enabling information disclosure. The vulnerability can be exploited remotely, and public disclosures exist. Vendor...
CVE-2025-4536 Gosuncn Technology Group Audio-Visual Integrated Management Platform listByPage information disclosure
A vulnerability has been found in Gosuncn Technology Group Audio-Visual Integrated Management Platform 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysmgr/user/listByPage. The manipulation leads to information disclosure. The attack can b...
CVE-2025-4536 Gosuncn Technology Group Audio-Visual Integrated Management Platform listByPage information disclosure
A vulnerability has been found in Gosuncn Technology Group Audio-Visual Integrated Management Platform 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysmgr/user/listByPage. The manipulation leads to information disclosure. The attack can b...
Gosuncn Audio-Visual Integrated Management Platform 访问控制错误漏洞
Gosuncn Audio-Visual Integrated Management Platform is an intelligent audio-video convergence management platform from China's Gosuncn, which supports multi-protocol device access and AI analysis. An access control error vulnerability exists in Gosuncn Audio-Visual Integrated Management Platform...
CVE-2025-4535: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability, which was classified as problematic, was found in Gosuncn Technology Group Audio-Visual Integrated Management Platform 4.0. Affected is an unknown function of the file /config/config.properties of the component Configuration File Handler. The manipulation leads to information...
PT-2025-20658 · Gosuncn Technology · Gosuncn Technology Group Audio-Visual Integrated Management Platform
Name of the Vulnerable Software and Affected Versions: Gosuncn Technology Group Audio-Visual Integrated Management Platform version 1.0 Description: A critical vulnerability has been found in the Gosuncn Technology Group Audio-Visual Integrated Management Platform, affecting an unknown...
CVE-2025-4536: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability has been found in Gosuncn Technology Group Audio-Visual Integrated Management Platform 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysmgr/user/listByPage. The manipulation leads to information disclosure. The attack can b...
Gosuncn Audio-Visual Integrated Management Platform 安全漏洞
Gosuncn Audio-Visual Integrated Management Platform is an intelligent audio-video convergence management platform from China Gosuncn Gosuncn, supporting multi-protocol device access and AI analysis. A security vulnerability exists in Gosuncn Audio-Visual Integrated Management Platform version 1.0...
PT-2025-20657 · Gosuncn Technology · Gosuncn Technology Group Audio-Visual Integrated Management Platform
Name of the Vulnerable Software and Affected Versions: Gosuncn Technology Group Audio-Visual Integrated Management Platform version 4.0 Description: A problematic issue was found in the Configuration File Handler component, specifically in the /config/config.properties file, leading to informatio...
CVE-2025-29813
Spoofable identity claims Authentication Bypass by Assumed-Immutable Data in Azure DevOps allows an unauthorized attacker to elevate privileges over a network...
CVE-2025-47659
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in voidcoders WPBakery Visual Composer WHMCS Elements void-visual-whmcs-element allows Stored XSS.This issue affects WPBakery Visual Composer WHMCS Elements: from n/a through = 1.0.4.3...
