4741 matches found
webkitgtk: Logic issue leading to arbitrary code execution
A logic issue was found in WebKitGTK and WPE WebKit in versions prior to 2.30.6. A remote attacker may be able to cause arbitrary code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
Dokploy 路径遍历漏洞
Dokploy is an open source software from Dokploy Open Source. A path traversal vulnerability exists in Dokploy versions prior to 0.23.7, which originates from an authenticated attacker being able to read any file accessible to a user of the Traefik process, potentially leading to the complete...
Flatboard Pro 跨站脚本漏洞
Flatboard Pro is an open source forum system by Flatboard. A cross-site scripting vulnerability exists in Flatboard Pro versions prior to 3.2.2, which stems from insufficient validation of inputs to the footertext and announcement parameters in config.php, and could lead to a stored cross-site...
CVE-2025-45424
Incorrect access control in Xinference before v1.4.0 allows attackers to access the Web GUI without authentication...
Flock Safety Gunshot Detection 安全漏洞
Flock Safety Gunshot Detection is a gunshot detection system from Flock Safety USA. A security vulnerability exists in Flock Safety Gunshot Detection versions prior to 1.3 that stems from improper access control of the chip debug interface...
Drupal Klaro Cookie & Consent Management 安全漏洞
Drupal Klaro Cookie & Consent Management is a module plugin in the Drupal content management system for the Drupal community. A security vulnerability exists in Drupal Klaro Cookie & Consent Management versions prior to 3.0.7, which stems from improper input neutralization and could lead to a...
FasterXML jackson-core 安全漏洞
FasterXML jackson-core is a FasterXML open source API software. A security vulnerability exists in FasterXML jackson-core versions prior to 2.15.0, which stems from a potential stack overflow when processing deeply nested data...
SUSE CVE-2025-6431
When a link can be opened in an external application, Firefox for Android will, by default, prompt the user before doing so. An attacker could have bypassed this prompt, potentially exposing the user to security vulnerabilities or privacy leaks in external applications. This bug only affects...
CVE-2025-6431
When a link can be opened in an external application, Firefox for Android will, by default, prompt the user before doing so. An attacker could have bypassed this prompt, potentially exposing the user to security vulnerabilities or privacy leaks in external applications. This bug only affects...
Kanboard 授权问题漏洞
Kanboard is a suite of open source visual task board software from Kanboard Open Source. The software has the ability to customize the panels based on the business. An authorization issue vulnerability exists in Kanboard versions prior to 1.2.46, which stems from an unvalidated Host header...
AZL-64404 CVE-2025-52939 affecting package ceph for versions less than 16.2.10-8
Out-of-bounds Write vulnerability in dail8859 NotepadNext src/lua/src modules. This vulnerability is associated with program files ldebug.C, lvm.C. This issue affects NotepadNext: through v0.11...
CVE-2025-52936 Improper Link Resolution Before File Access vulnerability in yrutschle/sslh
Improper Link Resolution Before File Access 'Link Following' vulnerability in yrutschle sslh.This issue affects sslh: before 2.2.2...
CVE-2025-52936
CVE-2025-52936 affects the sslh package (yrutschle sslh) prior to 2.2.2. Debian’s DLA-4238-1 and related advisories disclose a link-following vulnerability and fix it in Debian 11 bullseye with package version 1.20-1+deb11u1 . The vulnerability is described as an “Improper Link Resolution Before...
AZL-64175 CVE-2025-50181 affecting package python-urllib3 for versions less than 2.0.7-2
urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable redirects for all requests by instantiating a PoolManager and specifying retries in a way that disable redirects. By default, requests and botocore users are not affected. An application attemptin...
CVE-2025-6191
Integer overflow in V8 in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Firefox
There was a race condition in nsHttpTransaction that could be exploited to cause memory corruption, potentially leading to an exploitable issue. This vulnerability has been fixed in Firefox 137.0.2...
Astra Linux – Vulnerability in Chromium
The use of “after free” in Navigation in Google Chrome before version 133.0.6943.98 allowed a remote attacker to potentially exploit heap corruption through a crafted Chrome Extension. Chromium security severity: High...
Handcrafted in the Alps Goodby CSV 安全漏洞
Handcrafted in the Alps Goodby CSV is a Handcrafted in the Alps open source application. A security vulnerability exists in Handcrafted in the Alps Goodby CSV versions prior to 1.4.3, which stems from insecure deserialization and could lead to remote code execution...
Drupal Bookable Calendar 安全漏洞
Drupal Bookable Calendar is a calendar plugin for the Drupal community. A security vulnerability exists in Drupal Bookable Calendar versions prior to 2.2.13, which stems from a lack of authorization and may result in forced browsing...
CVE-2025-4681
Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Abuse.This issue affects upKeeper Instant Privilege Access: before 1.4.0...