Siemens SIMATIC PCS neo和Siemens User Management Component 安全漏洞

Siemens SIMATIC PCS neo and Siemens User Management Component are products of Siemens, Germany. Siemens SIMATIC PCS neo is a distributed control system. Siemens User Management Component is a component that maintains Siemens software. The Siemens SIMATIC PCS neo is a distributed control system, a...

CVE-2025-58751 Vite middleware may serve files starting with the same name with the public directory

Vite is a frontend tooling framework for JavaScript. Prior to versions 7.1.5, 7.0.7, 6.3.6, and 5.4.20, files starting with the same name with the public directory were served bypassing the server.fs settings. Only apps that explicitly expose the Vite dev server to the network using --host or...

Weiphp WeiPHP 安全漏洞

Weiphp WeiPHP is a WeChat development platform that supports the development of public numbers and small programs from Shenzhen Yuanmeng Yun Weiphp Company in China. A security vulnerability exists in Weiphp WeiPHP v5.0 and earlier versions, which originates from a SQL injection in the...

CLSA-2025-1757148344 Update of kernel

Rebased FIPS patches to 5.14.0-570.35.1...

internetarchive 路径遍历漏洞

internetarchive is a Python library by the individual developer jjjake. A path traversal vulnerability exists in internetarchive 5.5.0 and earlier versions, which stems from path traversal and could lead to arbitrary file writes...

CVE-2025-58352 Weblate has long session expiry times during second factor verification

Weblate is a web based localization tool. Versions lower than 5.13.1 contain a vulnerability that causes long session expiry during the second factor verification. The long session expiry could be used to circumvent rate limiting of the second factor. This issue is fixed in version 5.13.1...

RHSA-2025:15003 Red Hat Security Advisory: krb5 security update

Bulletin has no description...

CVE-2025-30261

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We hav...

IBM Watson Studio on Cloud Pak for Data Cross-Site Scripting Vulnerability

IBM Watson Studio on Cloud Pak for Data is an intelligent search and text analytics platform from International Business Machines IBM. A cross-site scripting vulnerability exists in IBM Watson Studio on Cloud Pak for Data versions 4.0 and 5.0, which stems from the application's lack of effective...

Linux Distros Unpatched Vulnerability : CVE-2025-2755

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as critical. Affected by this issue is the function...

Linux Distros Unpatched Vulnerability : CVE-2018-19443

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The client in Tryton 5.x before 5.0.1 tries to make a connection to the bus in cleartext instead of encrypted under certain circumstances in bus.py and...

CVE-2025-30261

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We hav...

CVE-2025-29879

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: File Station 5...

Use of Default Credentials

Overview Affected versions of this package are vulnerable to Use of Default Credentials for the admin account. An attacker can gain full administrative access by using the default credentials if the password is not changed after deployment. Workaround This vulnerability can be mitigated by loggin...

Use of Password Hash With Insufficient Computational Effort

Overview Affected versions of this package are vulnerable to Use of Password Hash With Insufficient Computational Effort due to the use of a simple, unsalted hash for storing user passwords and API keys. An attacker can obtain sensitive information by performing offline rainbow table attacks...

Use of Password Hash With Insufficient Computational Effort

Overview Affected versions of this package are vulnerable to Use of Password Hash With Insufficient Computational Effort due to the use of a simple, unsalted hash for storing user passwords and API keys. An attacker can obtain sensitive information by performing offline rainbow table attacks...

VulnCheck KEV: CVE-2024-33434

An issue in tiagorlampert CHAOS v5.0.1 before 1b451cf62582295b7225caf5a7b506f0bad56f6b and 24c9e109b5be34df7b2bce8368eae669c481ed5e allows a remote attacker to execute arbitrary code via the unsafe concatenation of the filename argument into the buildStr string without any sanitization or filteri...

Linux Distros Unpatched Vulnerability : CVE-2024-56072

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in FastNetMon Community Edition through 1.2.7. The sFlow v5 plugin allows remote attackers to cause a denial of service application cras...

CraftCMS 安全漏洞

CraftCMS is a content management system from CraftCMS, Inc. A security vulnerability exists in CraftCMS versions 4.0.0-RC1 through 4.16.5 and 5.0.0-RC1 through 5.8.6, which stems from a Twig SSTI that could lead to remote code execution...

Open Redirect

Overview Affected versions of this package are vulnerable to Open Redirect via EditInfoItemStrutsAction accessible through c/portal/editinfoitem. An attacker can redirect users to arbitrary external sites by crafting a malicious URL. Remediation Upgrade com.liferay:com.liferay.info.impl to versio...