Oracle Supply Chain Products Suite 安全漏洞

Oracle Supply Chain Products Suite is a suite of supply chain solutions from Oracle Corporation USA. The product provides value chain planning, value chain execution, and product lifecycle management. A security vulnerability exists in Oracle Agile PLM Framework version 9.3.6 for Oracle Supply...

Oracle Hyperion 安全漏洞

Oracle Hyperion is a suite of financial modeling applications from Oracle Corporation USA. The software provides financial closing, report creation, and other functions. A security vulnerability exists in Oracle Hyperion version 11.2.19.0.000. An attacker could exploit this vulnerability to gain...

CVE-2025-23199 Stored XSS-LibreNMS-Ports in librenms

librenms is a community-based GPL-licensed network monitoring system. Affected versions are subject to a stored XSS on the parameter: /ajaxform.php - param: descr. Librenms version up to 24.10.1 allow remote attackers to inject malicious scripts. When a user views or interacts with the page...

Vulnerabilities fixed in Microsoft Office

Microsoft has fixed vulnerabilities in several Office products. A malicious person could exploit the vulnerabilities to bypass a security measure, impersonate another user, access sensitive data or execute arbitrary code in the victim's context. Successful exploitation requires the malicious part...

The vulnerability of the edit_jobpost() function in the _all_edits.php (/_parse/_all_edits.php) script of the Job Recruitment system allows a hacker to gain unauthorized access to protected information and execute arbitrary code.

The vulnerability of the editjobpost function in the alledits.php /parse/alledits.php script of the Job Recruitment system is related to the lack of measures taken to neutralize special elements during the processing of the jobtype parameter. Exploiting this vulnerability could allow an attacker,...

The vulnerability of Oracle Java SE’s software platform components allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Oracle Java SE’s software platform’s components is related to the exposure of information through incompatibility. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

PT-2024-34901 · Hewlett Packard · Hpe Aruba Networking Clearpass Policy Manager

Name of the Vulnerable Software and Affected Versions: HPE Aruba Networking ClearPass Policy Manager affected versions not specified Description: A vulnerability in the web-based management interface could allow an authenticated remote attacker to conduct a stored cross-site scripting XSS attack...

The vulnerability of the Linux operating system’s OHCI kernel component, which allows a hacker to gain access to confidential information

The vulnerability of the Linux operating system’s OHCI kernel component is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain access to confidential information...

CVE-2024-20539

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct a stored XSS attack against a user of the interface. This vulnerability exists because the web-based management interface does not sufficiently validate user-supplied input...

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS version 18.1 and Apple iPadOS version 18.1, which arises from applications th...

Microsoft Copilot Studio 信息泄露漏洞

Microsoft Copilot Studio is an artificial intelligence chatbot from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Copilot Studio. An attacker exploiting this vulnerability could gain access to sensitive information. No information about this vulnerability ...

The vulnerability in theutils.cpp component of the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of theutils.cpp component in the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, is related to a numerical overflow issue. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise i...

The vulnerability of Intel Microcode processors lies in incorrect calculations, which allows attackers to gain access to confidential data.

The vulnerability of Intel Microcode processors involves incorrect calculations. Exploiting this vulnerability allows attackers to gain access to confidential data...

CVE-2024-40837

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access protected user data...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 15, which originates from an application that may be able to access sensitive user data...

CVE-2023-39298

CVE-2023-39298 affects QNAP QTS and QuTS hero where a missing authorization vulnerability could allow local authenticated users to access data or perform actions beyond their permissions via unspecified vectors. The issue is documented to impact several QNAP operating system versions, with QuTScl...

Dell SmartFabric OS10 安全漏洞

Dell SmartFabric OS10 is the operating system that runs on Dell EMC network devices and provides a range of networking functions and features. A cross-site request forgery vulnerability exists in Dell SmartFabric OS10, which can be exploited by a remote attacker to submit a specially crafted...

Trellix IPS Manager 安全漏洞

Trellix IPS Manager is a next-generation IPS for local and virtual networks from FireEye Trellix USA. A security vulnerability exists in Trellix IPS Manager that stems from allowing an unauthenticated, remote attacker to bypass authentication and gain access to vulnerable portions of data and...

The vulnerability of the Navigation function in Google Chrome and Microsoft Edge browsers allows a perpetrator to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.

The vulnerability of the Navigation function in Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information, execute arbitrary code, or cause a...

Johnson Controls exacqVision Server web service

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 7.6 ATTENTION : Exploitable remotely Vendor : Johnson Controls Inc. Equipment : exacqVision Web Service Vulnerability : Permissive Cross-domain Policy with Untrusted Domains 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an...