5394 matches found
Ceph 输入验证错误漏洞
Ceph is a file storage platform from Ceph open source. An input validation error vulnerability exists in Ceph 19.2.3 and earlier versions, which stems from improper handling of the x-amz-copy-source parameter and could lead to a denial of service...
mintty 输入验证错误漏洞
mintty is the Cygwin terminal emulator for the mintty open source application, also available for MSYS and Msys2. An input validation error vulnerability exists in mintty versions 2.3.6 through 3.7.4, which stems from mishandling of escape sequences and can lead to NTLM hash disclosure...
Elastic Kibana 安全漏洞
Elastic Kibana is an available data visualization dashboard software from Elastic. A security vulnerability exists in Elastic Kibana that stems from an Origin validation error that could lead to a server-side request forgery attack...
Calibre Input Validation Error Vulnerability (CNVD-2025-27923)
Calibre is an open source free all-in-one eBook reading management and format conversion tool. An input validation error vulnerability exists in Calibre 8.13.0 and earlier versions, which stems from handling binary resources in FB2 files without validating the filename, and can be exploited by an...
Splunk Cloud Platform和Splunk Enterprise 输入验证错误漏洞
Splunk Cloud Platform and Splunk Enterprise are both products of Splunk Corporation, U.S.A. Splunk Cloud Platform is a powerful data collection, processing, and analytics service.Splunk Enterprise is a suite of data collection and analytics software. An input validation error vulnerability exists...
Intel CIP 输入验证错误漏洞
Intel CIP is an optional program from Intel designed to improve products by collecting performance data from users' computers. Intel CIP suffers from an input validation error vulnerability that stems from improper input validation, which can be exploited by an attacker to cause elevation of...
Siemens多款产品 安全漏洞
Siemens LOGO! is a programmable logic controller from Siemens Germany. A security vulnerability exists in various Siemens products that stems from improper validation of the TCP packet structure, which could result in a buffer overflow and execution of arbitrary code. The following products are...
Intel CIP 输入验证错误漏洞
Intel CIP is an optional program from Intel designed to improve products by collecting performance data from users' computers. Intel CIP suffers from an input validation error vulnerability that stems from improper input validation, which can be exploited by an attacker to cause information...
SAP Business Connector 输入验证错误漏洞
SAP Business Connector is a middleware from SAP, Germany. An input validation error vulnerability exists in SAP Business Connector, which can be exploited by an attacker to disclose sensitive information and cause unauthorized operations...
Intel Graphics 输入验证错误漏洞
Intel Graphics is a family of graphics cards from Intel Corporation USA. An input validation error vulnerability exists in Intel Graphics that stems from improper input validation and could lead to a denial of service attack...
Intel VTune Profiler 输入验证错误漏洞
Intel VTune Profiler is a performance testing tool for optimized software from Intel USA. The software performs performance testing of IoT embedded applications, media software, Java applications, and high-performance computing applications. An input validation error vulnerability exists in Intel...
Intel QuickAssist Technology 输入验证错误漏洞
Intel QuickAssist Technology is an Intel technology that improves server utilization. The technology improves server efficiency by sharing the stress of compute-intensive tasks to equalize server pressure. An input validation error vulnerability exists in Intel QuickAssist Technology versions pri...
Intel oneAPI Math Kernel Library 输入验证错误漏洞
Intel oneAPI Math Kernel Library is a library from Intel Corporation USA. An input validation error vulnerability exists in Intel oneAPI Math Kernel Library versions prior to 2025.2, which stems from improper input validation and could lead to a denial of service attack...
CVE-2025-47912
The Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to be included within the host component, enclosed within square brackets. For example: "http://::1/". IPv4 addresses and hostnames mus...
Calibre 安全漏洞
Calibre is an open source free all-in-one eBook reading management and format conversion tool. An input validation error vulnerability exists in Calibre 8.13.0 and earlier versions, which stems from handling binary resources in FB2 files without validating the filename, and can be exploited by an...
Security Bulletin: IBM CloudPak for Data Scheduling Service is vulernable to CSRF Attack (CVE-2025-47909)
Summary gorilla/csrf is used by Scheduling Service. A vulnerability in gorilla/csrf is addressed. Vulnerability Details CVEID:CVE-2025-47909 DESCRIPTION: Hosts listed in TrustedOrigins implicitly allow requests from the corresponding HTTP origins, allowing network MitMs to perform CSRF attacks...
CVE-2025-10259
Improper Validation of Specified Quantity in Input vulnerability in TCP Communication Function on Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote attacker to disconnect the connection by sending specially crafted TCP packets to cause a denial-of-service DoS condition...
Red Hat Single Sign-On 输入验证错误漏洞
Red Hat Single Sign-On is an authentication and access control system from Red Hat USA. The tool is responsible for authentication and access control functions for systems that support most authentication protocols Oauth, OpenId Connect, etc., and can easily integrate with most products such as...
CVE-2025-10259
The vulnerability CVE-2025-10259 affects Mitsubishi Electric MELSEC iQ-F Series CPU module. In the TCP communication function, improper validation of the specified quantity in input can allow a remote attacker to disconnect the targeted connection by sending specially crafted TCP packets, causing...