ROS-20260512-73-0016

A vulnerability in the Core component of Oracle VM VirtualBox virtual machine is related to insufficient input validation. Exploitation of the vulnerability could allow an attacker to gain full control over the application...

CVE-2025-55267

HCL Aftermarket DPC is affected by Unrestricted File Upload vulnerability, allows attacker to upload and execute malicious scripts, gaining full control over the server...

Xylem AquaView 信任管理问题漏洞

Xylem AquaView is a next-generation SCADA system from Xylem USA, Inc. to meet the needs of water and wastewater related professionals for a simpler, more personalized way to be able to monitor, control, and optimize their assets anytime, anywhere, from any device. A trust management issue...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability of the Windows AppX Deployment Server component of the operating system allows a hacker to gain control over the system.

The vulnerability of the Windows AppX Deployment Server component of the operating system is related to insecure management of privileges. Exploiting this vulnerability can allow a perpetrator to gain control over the system through a specially created application...

The vulnerability of the Object Store component in the Sun ZFS Storage Appliance Kit (AK) allows a hacker to gain full control over the application.

The vulnerability of the Object Store component in the Sun ZFS Storage Appliance Kit is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain full control over the application...

Struts2 Command Execution Vulnerability in Government Network System

The Government Web System is a set of software designed to provide website building services for the government. A struts2 command-and-execute vulnerability exists in the GovWeb system, which can be exploited by an attacker to gain control of the website...