OPEXUS eCASE Audit 安全漏洞

OPEXUS eCASE Audit is an audit management software from OPEXUS USA. A security vulnerability exists in OPEXUS eCASE Audit that originates from an authenticated attacker being able to save JavaScript in the Document Check Out feature, which could lead to cross-site scripting attacks...

CVE-1999-0575

A Windows NT system's user audit policy does not log an event success or failure, e.g. for Logon and Logoff, File and Object Access, Use of User Rights, User and Group Management, Security Policy Changes, Restart, Shutdown, and System, and Process Tracking...

CVE-1999-0579

A Windows NT system's registry audit policy does not log an event success or failure for non-critical registry keys...

CVE-1999-0576

A Windows NT system's file audit policy does not log an event success or failure for security-critical files or directories...

CVE-2019-7288

The issue was addressed with improved validation on the FaceTime server. This issue is fixed in macOS Mojave 10.14.3 Supplemental Update, iOS 12.1.4. A thorough security audit of the FaceTime service uncovered an issue with Live Photos...

CVE-2019-16293

The Create Discoveries feature of Open-AudIT before 3.2.0 allows an authenticated attacker to execute arbitrary OS commands via a crafted value for a URL field...

CVE-2019-16388

PEGA Platform 8.3.0 is vulnerable to Information disclosure via a direct prweb/sso/randomtoken/!STANDARD?pyStream=MyAlerts request to get Audit Log information while using a low-privilege account. NOTE: The vendor states that this vulnerability was discovered using an administrator account and th...

CVE-2019-12847

In JetBrains Hub versions earlier than 2018.4.11298, the audit events for SMTPSettings show a cleartext password to the admin user. It is only relevant in cases where a password has not changed since 2017, and if the audit log still contains events from before that period...

CVE-2025-4574 vulnerabilities

Vulnerabilities for packages: wadm, zed, fd, cargo-audit, deno, cargo-c, oxipng, nushell, pixi, yara-x, lychee, samply, yazi, ruff, rust-analyzer, wasmcloud, starship, oranda...

CVE-2025-4574 vulnerabilities

Vulnerabilities for packages: samply, wadm, pixi, starship, zed, cargo-c, fd, yara-x, rust-analyzer, nushell, ruff, ztunnel, deno, yazi, lychee, wasmcloud, oxipng, ztunnel-fips, cargo-audit, oranda...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000526)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000526 advisory. An issue was discovered in the Linux kernel through 5.3.9. There is a use-after-free when aalabelparse fails in aaauditruleinit in security/apparmor/audit.c. Tenable...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000355)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000355 advisory. An issue was discovered in the Linux kernel through 5.3.9. There is a use-after-free when aalabelparse fails in aaauditruleinit in security/apparmor/audit.c. Tenable...

SUSE CVE-2024-41260

A static initialization vector IV in the encrypt function of netbird management's service from v0.23.2 to v0.29.1 allows attackers to obtain sensitive information email addresses when in possession of the audit events database...

PT-2026-25886

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel has an issue where the 'at' variant of the getxattr and listxattr system calls are not included in the audit read class. This allows bypassing audit rules when calling...

Exploit for Deserialization of Untrusted Data in Facebook React

Agentic Vulnerability Monitor POC An AI-powered, automated vu...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993208)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993208 advisory. In the Linux kernel, the following vulnerability has been resolved: llc: do not use skbget before devqueuexmit syzbot is able to crash hosts 1, using llc and devices...

CVE-2025-15174

A security vulnerability has been detected in SohuTV CacheCloud up to 3.2.0. Affected by this vulnerability is the function doAppAuditList of the file src/main/java/com/sohu/cache/web/controller/AppManageController.java. Such manipulation leads to cross site scripting. The attack may be performed...

CVE-2025-15174 SohuTV CacheCloud AppManageController.java doAppAuditList cross site scripting

A security vulnerability has been detected in SohuTV CacheCloud up to 3.2.0. Affected by this vulnerability is the function doAppAuditList of the file src/main/java/com/sohu/cache/web/controller/AppManageController.java. Such manipulation leads to cross site scripting. The attack may be performed...

CVE-2025-15174

CVE-2025-15174 affects SohuTV CacheCloud up to 3.2.0, where the cross-site scripting vulnerability stems from the doAppAuditList function in AppManageController.java. The issue allows remote exploitation and has publicly disclosed exploit information per connected sources (including Red Hat, NVD,...

CVE-2025-15174 SohuTV CacheCloud AppManageController.java doAppAuditList cross site scripting

A security vulnerability has been detected in SohuTV CacheCloud up to 3.2.0. Affected by this vulnerability is the function doAppAuditList of the file src/main/java/com/sohu/cache/web/controller/AppManageController.java. Such manipulation leads to cross site scripting. The attack may be performed...