CVE-2025-33013

IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, 3.6.0, and MQ Operator SC2 3.2.0 through 3.2.13 Container could disclose sensitive information to a local user due to improper clearing of heap memory before release...

The vulnerability of the Multi-Account Container function in the Mozilla Firefox browser allows attackers to circumvent existing security restrictions of proxy servers and disclose protected information.

The vulnerability of the Multi-Account Container function in the Mozilla Firefox browser is related to insufficient protection of service data. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions of proxy servers and disclose sensitive information b...

CVE-2025-33013

IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, 3.6.0, and MQ Operator SC2 3.2.0 through 3.2.13 Container could disclose sensitive information to a local user due to improper clearing of heap memory before release...

The vulnerability of the NetworkServlet.processImportRequest() function in the system for centrally managing network devices and ports of the Advantech iView platform allows a hacker to disclose protected information.

The vulnerability of the NetworkServlet.processImportRequest function in the system for centrally managing network devices and ports of the Advantech iView platform is related to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow a maliciou...

The vulnerability of Zoom, a video conferencing software, related to the falsification of cross-site requests, allows attackers to disclose protected information.

The vulnerability of Zoom video conferencing software is related to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

Apache Jena Path Traversal Vulnerability

Apache Jena is the Apache Software Foundation's Semantic Web framework for building and processing RDF data. A path traversal vulnerability exists in Apache Jena 5.4.0 and earlier versions, which originates from a user with administrator privileges being able to create database files outside of t...

The vulnerability of the sub_41F0FC function in the /H5/webgl.data file of the D-Link DI-7003GV2 router’s microprogramming software, which allows a hacker to disclose confidential information

The vulnerability of the sub41F0FC function in the /H5/webgl.data file of the D-Link DI-7003GV2 router’s microprogramming system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to disclose confidential information remotely...

Liner 安全漏洞

Liner is an AI large language modeling platform from Liner. A security vulnerability exists in Liner version 2025-06-03 and earlier, which stems from improper access control of the spaceid, threadid, and messageid parameters, which could lead to the disclosure of sensitive information...

Dell AppSync 代码问题漏洞

Dell AppSync is a data backup and recovery management software from Dell. An XML External Entity Reference Improper Restriction vulnerability exists in Dell AppSync version 4.6.0.0, which stems from improper handling of XML external entity parsing. An attacker could exploit this vulnerability to...

Apache Jena 安全漏洞

Apache Jena is the Apache Software Foundation's Semantic Web framework for building and processing RDF data. A path traversal vulnerability exists in Apache Jena 5.4.0 and earlier versions, which originates from a user with administrator privileges being able to create database files outside of t...

Two App Studio Journey 安全漏洞

Two App Studio Journey is a cross-platform digital diary application from Two App Studio Singapore. A security vulnerability exists in Two App Studio Journey version 5.5.9, which stems from unencrypted storage of the database and could lead to the disclosure of sensitive data...

IBM Cognos Analytics Mobile 安全漏洞

IBM Cognos Analytics Mobile is an application from International Business Machines IBM, Inc. Integrates reporting, modeling, analytics, dashboards, cases, and event management. A security vulnerability exists in IBM Cognos Analytics Mobile versions 1.1.0 through 1.1.22, which originates from the...

IBM Cognos Analytics Mobile 加密问题漏洞

IBM Cognos Analytics Mobile is an application from International Business Machines IBM, Inc. Integrated reporting, modeling, analytics, dashboards, cases and event management. An encryption issue vulnerability exists in IBM Cognos Analytics Mobile versions 1.1.0 through 1.1.22, which stems from t...

VulnCheck KEV: CVE-2025-47188

A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones through 6.4 SP4 R6.4.0.4006, and the 6970 Conference Unit through 6.4 SP4 R6.4.0.4006 or version V1 R0.1.0, could allow an unauthenticated attacker to conduct a command injection attack due to insufficient paramete...

Unspecified Vulnerability in Oracle Fusion Middleware (CVE-2025-50064)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. WebLogic Server is one of the application server components for cloud and traditional...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free in the mbedtlsx509stringtonames function. An attacker can potentially achieve code execution, information disclosure, or cause a denial of service by triggering use of memory after it has been freed, such as by manipulati...

Perplexity AI Web Application 安全漏洞

Perplexity AI Web Application is a big data search engine application utilizing a big language model from Perplexity, Inc. in the United States. A security vulnerability exists in Perplexity AI Web Application GPT-4 version 2.51.0, which stems from mishandling of the token component and could lea...

The vulnerability of the gf_ac4parser_bs function in the MP4Box multimedia platform of GPAC allows a hacker to cause a service failure or disclose protected information.

The vulnerability of the gfac4parserbs function in the MP4Box utility of the GPAC multimedia platform is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause system failures or disclose protected information...

Oracle PeopleSoft 安全漏洞

Oracle PeopleSoft is a suite of enterprise human capital management solutions from Oracle Corporation USA. The product provides human capital management, financial management, vendor relationship management, and other capabilities. A security vulnerability exists in Oracle PeopleSoft's PeopleSoft...

Oracle Analytics 访问控制错误漏洞

Oracle Analytics is an enterprise analytics solution from Oracle Corporation USA. Oracle Analytics has a security vulnerability in Oracle BI Publisher versions 7.6.0.0.0, 8.2.0.0.0, and 12.2.1.4.0 that stems from a web server vulnerability that could lead to data tampering and disclosure...