2281 matches found
Linux Distros Unpatched Vulnerability : CVE-2025-53042
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and...
Vulnerabilities fixed in Google Android and Samsung Mobile
Google has fixed vulnerabilities in Android. Samsung has fixed vulnerabilities in Samsung Mobile The vulnerabilities include an out-of-bounds write and read, as well as a vulnerability in USB connection mode that allows local attackers to gain unauthorized access to user data. These vulnerabiliti...
PHPGurukul News Portal 安全漏洞
News Portal is a news portal. News Portal has a hard-coded vulnerability that stems from the use of a fixed encryption key for the handling of the SECRETKEY parameter in the file /onps/settings.py. An attacker could exploit this vulnerability to obtain sensitive system information...
CVE-2025-62275
Blogs in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions does not check permission of images in a blog entry, which allows remote attackers ...
Constellation has insecure LUKS2 persistent storage partitions which may be opened and used
Summary A malicious host may provide a crafted LUKS2 volume to a confidential computing guest that is using the OpenCryptDevice feature. The guest will open the volume and write secret data using a volume key known to the attacker. The attacker can also pre-load data on the device, which could...
CVE-2025-10580
The Widget Options – The 1 WordPress Widget & Block Control Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple functions in all versions up to, and including, 4.1.2 due to insufficient input sanitization and output escaping. This makes it possible for...
EUVD-2025-35741
An incorrect permission assignment for a critical resource vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an attacker with low-privileged credentials to change their role, gaining full control access to the project...
SAMSUNG Notes Information Disclosure Vulnerability
SAMSUNG Notes is a software application from Samsung South Korea. It is used to provide a record function. SAMSUNG Notes has an information disclosure vulnerability that can be exploited by an attacker to access shared notes...
CVE-2025-57521
CVE-2025-57521 affects Bambu Studio 2.1.1.52 and earlier. The vulnerability arises at application startup when the program loads a network plug‑in without validating its digital signature or verifying authenticity. A local attacker can place a malicious component in the expected location (e.g., u...
HCL Traveler for Microsoft Outlook 安全漏洞
HCL Traveler for Microsoft Outlook is a software component in Microsoft Outlook from HCL India. A security vulnerability exists in HCL Traveler for Microsoft Outlook that stems from credential disclosure and could lead to an attacker accessing other computers or applications...
CVE-2025-59889
CVE-2025-59889 affects the Eaton IPP software installer. The root cause is improper authentication of library files within the installer, which could allow an attacker with access to the software package to execute arbitrary code. The issue is mitigated by a fix in the latest IPP version availabl...
Microsoft Windows Failover Cluster 日志信息泄露漏洞
The Microsoft Windows Failover Cluster is a group of independent computers from Microsoft Corporation USA that work together to improve the availability and scalability of cluster roles formerly known as clustered applications and services. A log information disclosure vulnerability exists in...
Microsoft Windows 信息泄露漏洞
Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. An information disclosure vulnerability exists in Microsoft Windows, which can be exploited by an attacker to obtain sensitive information...
CVE-2025-21054
Out-of-bounds read in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to potentially access out-of-bounds memory...
SAMSUNG Smart Switch 安全漏洞
SAMSUNG Smart Switch is a data migration tool from Samsung South Korea. A security vulnerability exists in SAMSUNG Smart Switch versions prior to 3.7.67.2, which stems from storing sensitive information in clear text and could lead to a local attacker accessing sensitive data...
EUVD-2025-33400
An Origin Validation Error vulnerability in an insufficient protected file of Juniper Networks Junos OS on EX4600 Series and QFX5000 Series allows an unauthenticated attacker with physical access to the device to create a backdoor which allows complete control of the system. When a device isn't...
PT-2025-41359
Name of the Vulnerable Software and Affected Versions Grafana Image Renderer versions 1.0.0 through 4.0.16 Description Grafana Image Renderer is susceptible to remote code execution due to an arbitrary file write issue. The /render/csv API endpoint lacks proper validation of the filePath paramete...
EUVD-2018-14834
Malware in sbrugna...