Plane 输入验证错误漏洞

Plane is an open source, self-hosted project planning tool from Plane Open Source. An input validation error vulnerability exists in Plane versions prior to 1.1.0, which stems from the nextpath parameter allowing the passing of an arbitrary scheme that could lead to a cross-site scripting attack...

Veeder-Root TLS4B Automatic Tank Gauge System 输入验证错误漏洞

Veeder-Root TLS4B Automatic Tank Gauge System is a security management system for gas stations, tank farms, or industrial storage tanks from Veeder-Root USA. An input validation error vulnerability exists in the Veeder-Root TLS4B Automatic Tank Gauge System, which stems from improper handling of...

MOLGENIS EMX2 输入验证错误漏洞

MOLGENIS EMX2 is a MOLGENIS open source data platform. An input validation error vulnerability exists in MOLGENIS EMX2 version v11.14.0 that stems from the manipulation of redirection parameters that could create malicious URLs, potentially causing users to be redirected to phishing websites or...

Siemens SIMATIC Devices Improper Input Validation (CVE-2025-21806)

net: let net.core.devweight always be non-zero. The following problem was encountered during stability test: NULL netdevice. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

Origin Validation Error

Overview Affected versions of this package are vulnerable to Origin Validation Error which can be triggered via unauthenticated cluster messages. An attacker can inject malicious data into the cluster. Remediation Upgrade com.liferay:com.liferay.portal.cluster.multiple to version 5.0.35 or higher...

BIT-MINIO-2025-62506 MinIO vulnerable to privilege escalation via session policy bypass in service accounts and STS

MinIO is a high-performance object storage system. In all versions prior to RELEASE.2025-10-15T17-29-55Z, a privilege escalation vulnerability allows service accounts and STS Security Token Service accounts with restricted session policies to bypass their inline policy restrictions when performin...

ZenML Input Validation Error Vulnerability

ZenML is an extensible open source MLOps framework from ZenML Open Source for creating portable, production-ready machine learning pipelines. An input validation error vulnerability exists in ZenML version 0.83.1, which stems from the failure of the PathMaterializer class to effectively detect...

ImageMagick 输入验证错误漏洞

ImageMagick is a suite of open source image processing software from ImageMagick Open Source. It can read, convert or write images in many formats. An input validation error vulnerability exists in ImageMagick versions prior to 7.1.2-7 and prior to 6.9.13-32, which stems from an integer overflow...

Adobe Dimension Input Validation Error Vulnerability (CNVD-2025-24213)

Adobe Dimension is the United States of America Odo than Adobe company is a set of 2D and 3D composite design tools. An input validation error vulnerability exists in Adobe Dimension, which can be exploited by an attacker to cause arbitrary code execution in the current user environment...

Adobe Substance3D Stager 输入验证错误漏洞

Adobe Substance3D Stager is a set and rendering software for 3D scenes from Audobee Adobe USA. An input validation error vulnerability exists in Adobe Substance3D Stager 3.1.4 and prior versions, which stems from an integer overflow or wrap-around error that could lead to the execution of arbitra...

Microsoft Windows 输入验证错误漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. Microsoft Windows suffers from an input validation error vulnerability that stems from an attacker's ability to elevate privileges by exploiting the vulnerability...

Microsoft SharePoint 输入验证错误漏洞

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code executi...

Microsoft Windows Error Reporting 输入验证错误漏洞

Microsoft Windows Error Reporting WER is a component of Microsoft, Inc. enables users to notify Microsoft of application failures, kernel failures, unresponsive applications, and other application-specific issues. An input validation error vulnerability exists in Microsoft Windows Error Reporting...

Adobe Substance3D Stager 输入验证错误漏洞

Adobe Substance3D Stager is a set and rendering software for 3D scenes from Audobee Adobe USA. An input validation error vulnerability exists in Adobe Substance3D Stager 3.1.4 and prior versions, which stems from an integer overflow or wrap-around error that could lead to the execution of arbitra...

Microsoft JDBC Driver 输入验证错误漏洞

Microsoft JDBC Driver is a SQL Server database connection driver from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft JDBC Driver, which can be exploited by an attacker to perform a spoofing attack...

Adobe Dimension 输入验证错误漏洞

Adobe Dimension is the United States of America Odo than Adobe company is a set of 2D and 3D composite design tools. An input validation error vulnerability exists in Adobe Dimension, which can be exploited by an attacker to cause arbitrary code execution in the current user environment...

Microsoft Exchange Server 输入验证错误漏洞

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A spoofing vulnerability exists in Microsoft Exchange Server, which can be exploited by attackers...

EUVD-2025-33400

An Origin Validation Error vulnerability in an insufficient protected file of Juniper Networks Junos OS on EX4600 Series and QFX5000 Series allows an unauthenticated attacker with physical access to the device to create a backdoor which allows complete control of the system. When a device isn't...

CVE-2025-59957

An Origin Validation Error vulnerability in an insufficient protected file of Juniper Networks Junos OS on EX4600 Series and QFX5000 Series allows an unauthenticated attacker with physical access to the device to create a backdoor which allows complete control of the system. When a device isn't...

CVE-2025-59957

An Origin Validation Error vulnerability in an insufficient protected file of Juniper Networks Junos OS on EX4600 Series and QFX5000 Series allows an unauthenticated attacker with physical access to the device to create a backdoor which allows complete control of the system. When a device isn't...