207 matches found
Trane多款产品 安全漏洞
Trane Tracer SC, among others, are products of the American company Trane. Trane Tracer SC is a building controller for monitoring and automation management. Trane Tracer SC+ is also a building controller for monitoring and automation management. Trane Tracer Concierge is a building management...
CVE-2026-3352
The Easy PHP Settings plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 1.0.4 via the updatewpmemoryconstants method. This is due to insufficient input validation on the wpmemorylimit and wpmaxmemorylimit settings before writing them to wp-config.php...
@atlassian/aui (>=9.3.22 <=10.0.0-M02), @charcoal-ui/icons (>=3.16.0 <=3.21.0) +115 more potentially affected by CVE-2025-15599 via dompurify (>=2.5.4 <=2.5.8)
dompurify NPM version =2.5.4, =9.3.22, =3.16.0, =3.0.0, =3.0.0, =0.0.0-canary-20240806060533, =0.0.0-canary-20240806060533, =0.0.0-canary-20240806060533, =0.0.0-canary-20240806060533, =0.0.0-canary-20240719153432, =0.0.0-fec-156-react19-20250116105607, =0.0.0-fec-156-react19-20250116105607,...
CVE-2025-1029
Use of Hard-coded Credentials vulnerability in Utarit Information Services Inc. SoliClub allows Read Sensitive Constants Within an Executable.This issue affects SoliClub: from 5.2.4 before 5.3.7...
CVE-2025-1029
Use of Hard-coded Credentials vulnerability in Utarit Information Services Inc. SoliClub allows Read Sensitive Constants Within an Executable.This issue affects SoliClub: from 5.2.4 before 5.3.7...
CVE-2025-1029
Use of Hard-coded Credentials vulnerability in Utarit Information Services Inc. SoliClub allows Read Sensitive Constants Within an Executable. This issue affects SoliClub: from 5.2.4 before 5.3.7...
CVE-2025-1029 Hardcoded Credentials in Utarit Informatics' SoliClub
Use of Hard-coded Credentials vulnerability in Utarit Information Services Inc. SoliClub allows Read Sensitive Constants Within an Executable. This issue affects SoliClub: from 5.2.4 before 5.3.7...
CVE-2025-1029 Hardcoded Credentials in Utarit Informatics' SoliClub
Use of Hard-coded Credentials vulnerability in Utarit Information Services Inc. SoliClub allows Read Sensitive Constants Within an Executable. This issue affects SoliClub: from 5.2.4 before 5.3.7...
CVE-2025-1029
CVE-2025-1029 concerns Utarit Information Services Inc. SoliClub, where hard-coded credentials permit reading sensitive constants from the executable. Multiple sources (NVD, Red Hat, CVE/CVEList, CNNVD, EUVD, etc.) consistently describe impact for SoliClub versions 5.2.4 through 5.3.7. The vulner...
PT-2025-52223
Use of Hard-coded Credentials vulnerability in Utarit Information Services Inc. SoliClub allows Read Sensitive Constants Within an Executable.This issue affects SoliClub: from 5.2.4 before 5.3.7...
MAL-2025-191145 Malicious code in victoria-wallet-constants (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 386cd3860a3dba5eeaebaa25b379430bd515f2295a2639ef6228b28b9dabb3cd The package victoria-wallet-constants was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199210
Malicious code in victoria-wallet-constants npm...
Malicious code in victoria-wallet-constants (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 386cd3860a3dba5eeaebaa25b379430bd515f2295a2639ef6228b28b9dabb3cd The package victoria-wallet-constants was found to contain malicious code. Source: ghsa-malware...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
MAL-2025-190606 Malicious code in airbnb-story-constants (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ee587585b5d6ce7a559b01b7ca42796dcd026647cce38e2056a0893bd4c7429 The package airbnb-story-constants was found to contain malicious code. Source: ossf-package-analysis...
EUVD-2025-198546
Malicious code in airbnb-story-constants npm...
Malicious code in airbnb-story-constants (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ee587585b5d6ce7a559b01b7ca42796dcd026647cce38e2056a0893bd4c7429 The package airbnb-story-constants was found to contain malicious code. Source: ossf-package-analysis...
CVE-2025-30189
When cache is enabled, some passdb/userdb drivers incorrectly cache all users with same cache key, causing wrong cached information to be used for these users. After cached login, all subsequent logins are for same user. Install fixed version or disable caching either globally or for the impacted...
JLSEC-2025-149 Unchecked Return Value, Out-of-bounds Read vulnerability in FFmpeg allows Read Sensitive Constants...
Unchecked Return Value, Out-of-bounds Read vulnerability in FFmpeg allows Read Sensitive Constants Within an Executable. This vulnerability is associated with program files https://github.Com/FFmpeg/FFmpeg/blob/master/libavfilter/afpan.C . This issue affects FFmpeg: 7.1. Issue was fixed: ...