7081 matches found
Apple iOS和Apple iPadOS 安全漏洞
Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS version 18.3 and Apple iPadOS version 18.3, which stems from a parsed file th...
Vulnerability of Microsoft Office package applications, Microsoft 365 Apps for Enterprise, and Microsoft Access database management systems, related to buffer overflows in dynamic memory, allowing attackers to execute arbitrary code.
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and the Microsoft Access database management system is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Mattermost Mobile Apps Denial of Service Vulnerability (CNVD-2025-11093)
Mattermost Mobile Apps is a messaging mobile application from Mattermost USA. Mattermost Mobile Apps suffers from a denial of service vulnerability that stems from a failure to properly validate post attributes. An attacker could exploit the vulnerability to cause the application to crash...
Mattermost Mobile Apps Denial of Service Vulnerability (CNVD-2025-11092)
Mattermost Mobile Apps is a messaging mobile application from Mattermost USA. A denial of service vulnerability exists in Mattermost Mobile Apps that stems from a failure to properly validate post props, which can be exploited by an attacker to cause the application to crash...
Mattermost Mobile Apps Denial of Service Vulnerability (CNVD-2025-11094)
Mattermost Mobile Apps is a messaging mobile application from Mattermost USA. A denial of service vulnerability exists in Mattermost Mobile Apps that stems from the application failing to properly handle specially crafted attachment names. An attacker could use this vulnerability to cause the...
The vulnerability of the Microsoft Office package, Microsoft 365 Apps for Enterprise, and the Microsoft Outlook email client relates to the use of an uninitialized resource, allowing a perpetrator to execute arbitrary code.
The vulnerability of the Microsoft Office package, Microsoft 365 Apps for Enterprise, and the Microsoft Outlook email client is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious individual to execute arbitrary code...
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to deserialization mechanism flaws, which allows attackers to circumvent existing security restrictions.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions...
The vulnerability of Microsoft Office and 365 Apps for Enterprise packages, related to the misuse of a trusted pointer, allows an attacker to execute arbitrary code.
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of an untrusted pointer. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise programs relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of Microsoft 365 Apps for Enterprise, Microsoft Office, and the Microsoft Access database management system arises from buffer overflows in dynamic memory, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft 365 Apps for Enterprise, Microsoft Office, and the Microsoft Access database management system is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Malicious code in calypso-apps-builder (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f0031b185706e20041563f879032469eba6e8220fe4d6fe93acc11cee6235c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-276 Malicious code in calypso-apps-builder (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f0031b185706e20041563f879032469eba6e8220fe4d6fe93acc11cee6235c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-148 Malicious code in 3cx-call-control-apps (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca09aeb5dd1513eb46048a6987f18b72f8c9f52ba8340cefc8521c2138be8503 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in 3cx-call-control-apps (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca09aeb5dd1513eb46048a6987f18b72f8c9f52ba8340cefc8521c2138be8503 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-0578
A vulnerability was found in Facile Sistemas Cloud Apps up to 20250107. It has been classified as problematic. Affected is an unknown function of the file /account/forgotpassword of the component Password Reset Handler. The manipulation of the argument reterros leads to cross site scripting. It i...
CVE-2025-0578 Facile Sistemas Cloud Apps Password Reset forgotpassword cross site scripting
A vulnerability was found in Facile Sistemas Cloud Apps up to 20250107. It has been classified as problematic. Affected is an unknown function of the file /account/forgotpassword of the component Password Reset Handler. The manipulation of the argument reterros leads to cross site scripting. It i...
CVE-2025-0578
CVE-2025-0578 affects Facile Sistemas Cloud Apps (up to 20250107), specifically the Password Reset Handler’s /account/forgotpassword function. The issue is a cross-site scripting vulnerability caused by manipulating the reterros parameter, allowing remote exploitation. Public exploits have been d...
CVE-2025-0578 Facile Sistemas Cloud Apps Password Reset forgotpassword cross site scripting
A vulnerability was found in Facile Sistemas Cloud Apps up to 20250107. It has been classified as problematic. Affected is an unknown function of the file /account/forgotpassword of the component Password Reset Handler. The manipulation of the argument reterros leads to cross site scripting. It i...
Facile Sistemas Cloud Apps 代码注入漏洞
Facile Sistemas Cloud Apps is an application from Facile Sistemas. A code injection vulnerability exists in Facile Sistemas Cloud Apps 20250107 and earlier versions, which stems from the parameter retros in the file /account/forgotpassword can lead to cross-site scripting...
