CVE-2025-53399

In Sipwise rtpengine before 13.4.1.1, an origin-validation error in the endpoint-learning logic of the media-relay core allows remote attackers to inject or intercept RTP/SRTP media streams via RTP packets except when the relay is configured for strict source and learning disabled. Version 13.4.1...

NVIDIA Jetson AGX Orin and NVIDIA IGX Orin Input Validation Error Vulnerability

The NVIDIA Jetson AGX Orin and NVIDIA IGX Orin are both products of NVIDIA Corporation, the NVIDIA Jetson AGX Orin is a compact, powerful computer and the NVIDIA IGX Orin is an industrial-grade edge AI platform that delivers high-performance, advanced functional security and information security...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple for Mac computers. Apple macOS suffers from an input validation error vulnerability that can be exploited by an attacker to gain access to sensitive user data...

transpose crate 输入验证错误漏洞

transpose crate is a Rust library for transforming multidimensional data from the individual developer Elliott Mahler. An input validation error vulnerability exists in transpose crate versions prior to 0.2.3, which stems from the inputwidth and inputheight parameters that can lead to an integer...

cosmwasm-std crate 输入验证错误漏洞

cosmwasm-std crate is a CosmWasm open source framework for building smart contracts in Wasm for the Cosmos SDK. An input validation error vulnerability exists in cosmwasm-std crate versions prior to 2.0.2, which stems from an integer overflow that could lead to a computation error...

WordPress plugin WoodMart 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation...

Security Bulletin: IBM Maximo Application Suite uses axios-1.7.7.tgz which is vulnerable to CVE-2024-57965.

Summary IBM Maximo Application Suite uses axios-1.7.7.tgz which is vulnerable to CVE-2024-57965. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2024-57965 DESCRIPTION: In axios before 1.7.8, lib/helpers/isURLSameOrigin.js does not u...

HotelRunner B2B 输入验证错误漏洞

HotelRunner B2B is a software tool for business management and collaboration for the hotel industry from HotelRunner Turkey. An input validation error vulnerability exists in HotelRunner B2B versions prior to 04.06.2025, which stems from a URL redirection that could lead to forced browsing...

iputils 输入验证错误漏洞

iputils is the iputils open source set of small, legacy utilities for Linux networking. An input validation error vulnerability exists in iputils 20240905 and earlier versions, which stems from a specially crafted ICMP Echo Reply packet that could cause an integer overflow, triggering a denial of...

Microsoft Windows Input Validation Error Vulnerability (CNVD-2025-16780)

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. Microsoft Windows has a security vulnerability. An attacker can exploit the vulnerability to elevate privileges...

Thinkgem JeeSite 输入验证错误漏洞

Thinkgem JeeSite is an open source Java EE enterprise-class rapid development platform of China Zhuo Yuan Thinkgem company . The platform includes system permissions components , data permissions components , data dictionary components , core tools components , view manipulation components ,...

Apache HTTP Server Input Validation Error Vulnerability (CNVD-2025-16612)

Apache HTTP Server is the United States Apache Apache Foundation of an open source web server . The server is fast, reliable and can be expanded through a simple API. An input validation error vulnerability exists in Apache HTTP Server, which can be exploited by an attacker to manipulate the...

DiracX-Web 输入验证错误漏洞

DiracX-Web is an open source user interface for DiracX from the DIRAC Project. An input validation error vulnerability exists in versions of DiracX-Web prior to 0.1.0-a8, which stems from an unvalidated redirect field and could lead to a phishing attack...

RT-Thread Input Validation Error Vulnerability (CNVD-2025-16524)

RT-Thread is an open source IoT real-time operating system RTOS open-sourced by RT-Thread. RT-Thread suffers from an input validation error vulnerability that originates from the operation of the parameter how in the file rt-thread/components/lwp/lwpsyscall.c, which can be exploited by an attacke...

Origin Validation Error

Overview org.keycloak:keycloak-server-spi-private is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Origin Validation Error via the review profile process. An attacker can gain unauthorized access to...

Origin Validation Error

Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Origin Validation Error via the review profile process. An attacker can gain unauthorized access to another...

Apache HTTP Server 输入验证错误漏洞

Apache HTTP Server is the United States Apache Apache Foundation of an open source web server . The server is fast, reliable and can be expanded through a simple API. An input validation error vulnerability exists in Apache HTTP Server, which can be exploited by an attacker to manipulate the...

CVE-2025-38310: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: seg6: Fix validation of nexthop addresses The kernel currently validates that the length of the provided nexthop address does not exceed the specified length. This can lead to the kernel reading uninitialized memory if user space...

Apache Tomcat 输入验证错误漏洞

Apache Tomcat is the United States Apache Apache Foundation of a lightweight Web application server . Used to implement the Servlet and JavaServer Page JSP support. An input validation error vulnerability exists in Apache Tomcat, which stems from an integer overflow, and can be exploited by an...

Microsoft Hyper-V 输入验证错误漏洞

Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. An input validation error vulnerability exists in Microsoft Hyper-V. An attacker exploiting this vulnerability could gain access to sensitive...