7379 matches found
OESA-2025-2207 nodejs-form-data security update
A module to create readable "multipart/form-data" streams. Can be used to submit forms and file uploads to other web applications. Security Fixes: Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution HPP. This vulnerability is associated with program file...
OESA-2025-2205 nodejs-form-data security update
A module to create readable "multipart/form-data" streams. Can be used to submit forms and file uploads to other web applications. Security Fixes: Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution HPP. This vulnerability is associated with program file...
WordPress plugin AP HoneyPot 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2025-36194
Name of the Vulnerable Software and Affected Versions: AP HoneyPot WordPress Plugin versions through 1.4 Description: The AP HoneyPot WordPress Plugin contains a flaw due to improper neutralization of formula elements in a CSV file, which can lead to reflected cross-site scripting XSS...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly updating transfer values, which could lead to data corruption...
CVE-2024-52284
Unauthorized disclosure of sensitive data: Any user with GET or LIST permissions on BundleDeployment resources could retrieve Helm values containing credentials or other secrets...
Improper sanitization of CSS values in html/template
...
Libopensc: uninitialized values after incorrect or missing checking return values of functions in pkcs15init
...
Libopensc: uninitialized values after incorrect or missing checking return values of functions in libopensc
...
Libopensc: pkcs15init: usage of uninitialized values in libopensc and pkcs15init
...
Libopensc: uninitialized values after incorrect check or usage of apdu response values in libopensc
...
Output of "go env" does not sanitize values in cmd/go
...
Passing invalid data could have led to invalid wasm values being created, such as arbitrary integers turning into pointer values. This vulnerability affects Firefox < 124.
...
ice: always check VF VSI pointer values
...
postgresql: PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table
An access control bypass flaw has been discovered in PostgreSQL. The PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row security policy intended to hide...
CVE-2025-7731
Cleartext Transmission of Sensitive Information vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to obtain credential information by intercepting SLMP communication messages, and read or write the device values of the product...
CVE-2025-7405
Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to read or write the device values of the product and stop the operation of the programs, since MODBUS/TCP in the products does not...
UUID/GUID Version 1 Detected
This is an informational plugin to inform the user that the scanner has detected a UUID/GUID version 1. UUID/GUID version 1 contains the MAC address of the computer that generated it, as well as a timestamp. This means that if an attacker can obtain a UUID/GUID version 1, they can infer host...
