2300 matches found
CVE-2025-10580
The Widget Options – The 1 WordPress Widget & Block Control Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple functions in all versions up to, and including, 4.1.2 due to insufficient input sanitization and output escaping. This makes it possible for...
EUVD-2025-35741
An incorrect permission assignment for a critical resource vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an attacker with low-privileged credentials to change their role, gaining full control access to the project...
CVE-2025-57521
CVE-2025-57521 affects Bambu Studio 2.1.1.52 and earlier. The vulnerability arises at application startup when the program loads a network plug‑in without validating its digital signature or verifying authenticity. A local attacker can place a malicious component in the expected location (e.g., u...
SAMSUNG Notes Information Disclosure Vulnerability
SAMSUNG Notes is a software application from Samsung South Korea. It is used to provide a record function. SAMSUNG Notes has an information disclosure vulnerability that can be exploited by an attacker to access shared notes...
HCL Traveler for Microsoft Outlook 安全漏洞
HCL Traveler for Microsoft Outlook is a software component in Microsoft Outlook from HCL India. A security vulnerability exists in HCL Traveler for Microsoft Outlook that stems from credential disclosure and could lead to an attacker accessing other computers or applications...
CVE-2025-59889
CVE-2025-59889 affects the Eaton IPP software installer. The root cause is improper authentication of library files within the installer, which could allow an attacker with access to the software package to execute arbitrary code. The issue is mitigated by a fix in the latest IPP version availabl...
Microsoft Windows Failover Cluster 日志信息泄露漏洞
The Microsoft Windows Failover Cluster is a group of independent computers from Microsoft Corporation USA that work together to improve the availability and scalability of cluster roles formerly known as clustered applications and services. A log information disclosure vulnerability exists in...
Microsoft Windows 信息泄露漏洞
Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. An information disclosure vulnerability exists in Microsoft Windows, which can be exploited by an attacker to obtain sensitive information...
CVE-2025-21054
Out-of-bounds read in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to potentially access out-of-bounds memory...
SAMSUNG Smart Switch 安全漏洞
SAMSUNG Smart Switch is a data migration tool from Samsung South Korea. A security vulnerability exists in SAMSUNG Smart Switch versions prior to 3.7.67.2, which stems from storing sensitive information in clear text and could lead to a local attacker accessing sensitive data...
EUVD-2025-33400
An Origin Validation Error vulnerability in an insufficient protected file of Juniper Networks Junos OS on EX4600 Series and QFX5000 Series allows an unauthenticated attacker with physical access to the device to create a backdoor which allows complete control of the system. When a device isn't...
PT-2025-41359
Name of the Vulnerable Software and Affected Versions Grafana Image Renderer versions 1.0.0 through 4.0.16 Description Grafana Image Renderer is susceptible to remote code execution due to an arbitrary file write issue. The /render/csv API endpoint lacks proper validation of the filePath paramete...
EUVD-2019-14278
Malware in sbrugna...
EUVD-2008-0057
Malware in sbrugna...
EUVD-2020-24870
Malware in sbrugna...
EUVD-2020-5456
Malware in sbrugna...
EUVD-2020-24818
Malware in sbrugna...
EUVD-2021-12566
Malware in sbrugna...