266 matches found
Apache OpenOffice 安全漏洞
Apache OpenOffice is an open source office software suite from the Apache USA Foundation. The suite contains text documents, spreadsheets, presentations, drawings, databases and more. A security vulnerability exists in Apache OpenOffice versions 4.1.15 and earlier, which stems from a lack of...
The vulnerability of the BIND DNS server, related to the loading of external, unreliable data alongside reliable data, allows a hacker to redirect traffic to a malicious website.
The vulnerability of the BIND DNS server relates to the loading of external, unreliable data alongside reliable data. Exploiting this vulnerability allows a malicious actor to remotely redirect traffic to a malicious website...
The vulnerability of the Unbound DNS server, related to the loading of external, unreliable data alongside reliable data, allows attackers to perform cache poisoning attacks.
The vulnerability of the Unbound DNS server relates to the loading of external, unreliable data alongside reliable data. Exploiting this vulnerability allows a remote attacker to perform cache poisoning attacks...
EUVD-2019-4347
Malware in sbrugna...
EUVD-2021-20306
Malware in sbrugna...
EUVD-2020-3806
Malware in sbrugna...
EUVD-2025-29627
Malicious code in bioql PyPI...
EUVD-2024-0124
Malicious code in bioql PyPI...
EUVD-2025-22338
Malicious code in bioql PyPI...
EUVD-2023-32650
Malicious code in bioql PyPI...
EUVD-2024-2376
Malicious code in bioql PyPI...
External Data Extraction Attacks against Retrieval-Augmented Large Language Models
In recent years, RAG has emerged as a key paradigm for enhancing large language models LLMs. By integrating externally retrieved information, RAG alleviates issues like outdated knowledge and, crucially, insufficient domain expertise. While effective, RAG introduces new risks of external data...
GHSA-7C3F-CG9X-F3GR JasperReports has a Java deserialisation vulnerability
A Java deserialisation vulnerability has been discovered in the Jaspersoft Library. Improper handling of externally supplied data may allow attackers to execute arbitrary code remotely on systems that use the affected library...
JasperReports has a Java deserialisation vulnerability
A Java deserialisation vulnerability has been discovered in the Jaspersoft Library. Improper handling of externally supplied data may allow attackers to execute arbitrary code remotely on systems that use the affected library...
CVE-2025-10492
A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling of externally supplied data may allow attackers to execute arbitrary code remotely on systems that use the affected library...
CVE-2025-10492
A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling of externally supplied data may allow attackers to execute arbitrary code remotely on systems that use the affected library...
UBUNTU-CVE-2025-10492
A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling of externally supplied data may allow attackers to execute arbitrary code remotely on systems that use the affected library...
Linux Distros Unpatched Vulnerability : CVE-2022-39050
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker who is logged into OTRS as an admin user may manipulate customer URL field to store JavaScript code to be run later by any other agent when clicking...
Path Traversal vulnerability in onnx.external_data_helper.save_external_data in ONNX 1.17.0 allows attackers to overwrite arbitrary files by supplying crafted external_data.location paths containing traversal sequences, bypassing intended directory restrictions.
...
