CVE-2021-0466

In startIpClient of ClientModeImpl.java, there is a possible identifier which could be used to track a device. This could lead to remote information disclosure to a proximal attacker, with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2024-58335

OpenXRechnungToolbox through 2024-10-05-3.0.0 before 6c50e89 allows XXE because the disallow-doctype-decl feature is not enabled in visualization/VisualizerImpl.java...

io.github.shuigedeng:taotao-cloud-starter-job-powerjob (>=2023.04, <=2023.05), tech.powerjob:powerjob-client (4.3.2) +7 more potentially affected by CVE-2025-14518 via tech.powerjob:powerjob-common (4.3.2)

tech.powerjob:powerjob-common MAVEN version 4.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on tech.powerjob:powerjob-common and may be impacted: - io.github.shuigedeng:taotao-cloud-starter-job-powerjob =2023.04, =2023.05 -...

CVE-2025-13268

A flaw has been found in Dromara dataCompare up to 1.0.1. The affected element is the function DbConfig of the file src/main/java/com/vince/xq/project/system/dbconfig/service/DbconfigServiceImpl.java of the component JDBC URL Handler. Executing manipulation can lead to injection. The attack can b...

PT-2025-47128

Name of the Vulnerable Software and Affected Versions Dromara dataCompare versions up to 1.0.1 Description A flaw exists in Dromara dataCompare related to the JDBC URL Handler component. The issue resides within the DbConfig function of the file...

org.sakaiproject.kernel:sakai-kernel-component (1.3.0-rc02) potentially affected by CVE-2025-62710 via org.sakaiproject.kernel:sakai-kernel-impl (1.3.0-rc02)

org.sakaiproject.kernel:sakai-kernel-impl MAVEN version 1.3.0-rc02 is affected by a known vulnerability. The following packages have a transitive dependency on org.sakaiproject.kernel:sakai-kernel-impl and may be impacted: - org.sakaiproject.kernel:sakai-kernel-component 1.3.0-rc02 Source cves:...

org.sakaiproject.kernel:sakai-kernel-component (1.3.0-b04) potentially affected by CVE-2025-62710 via org.sakaiproject.kernel:sakai-kernel-impl (1.3.0-b04)

org.sakaiproject.kernel:sakai-kernel-impl MAVEN version 1.3.0-b04 is affected by a known vulnerability. The following packages have a transitive dependency on org.sakaiproject.kernel:sakai-kernel-impl and may be impacted: - org.sakaiproject.kernel:sakai-kernel-component 1.3.0-b04 Source cves:...

org.sakaiproject.kernel:sakai-kernel-component (1.3.2) potentially affected by CVE-2025-62710 via org.sakaiproject.kernel:sakai-kernel-impl (1.3.2)

org.sakaiproject.kernel:sakai-kernel-impl MAVEN version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.sakaiproject.kernel:sakai-kernel-impl and may be impacted: - org.sakaiproject.kernel:sakai-kernel-component 1.3.2 Source cves:...

org.sakaiproject.kernel:sakai-kernel-component (10.7) potentially affected by CVE-2025-62710 via org.sakaiproject.kernel:sakai-kernel-impl (10.7)

org.sakaiproject.kernel:sakai-kernel-impl MAVEN version 10.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.sakaiproject.kernel:sakai-kernel-impl and may be impacted: - org.sakaiproject.kernel:sakai-kernel-component 10.7 Source cves: CVE-2025-6271...

org.sakaiproject.kernel:sakai-kernel-component (1.3.0-rc03) potentially affected by CVE-2025-62710 via org.sakaiproject.kernel:sakai-kernel-impl (1.3.0-rc03)

org.sakaiproject.kernel:sakai-kernel-impl MAVEN version 1.3.0-rc03 is affected by a known vulnerability. The following packages have a transitive dependency on org.sakaiproject.kernel:sakai-kernel-impl and may be impacted: - org.sakaiproject.kernel:sakai-kernel-component 1.3.0-rc03 Source cves:...

org.sakaiproject.kernel:sakai-kernel-component (1.3.1) potentially affected by CVE-2025-62710 via org.sakaiproject.kernel:sakai-kernel-impl (1.3.1)

org.sakaiproject.kernel:sakai-kernel-impl MAVEN version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.sakaiproject.kernel:sakai-kernel-impl and may be impacted: - org.sakaiproject.kernel:sakai-kernel-component 1.3.1 Source cves:...

org.sakaiproject.kernel:sakai-kernel-component (10.3) potentially affected by CVE-2025-62710 via org.sakaiproject.kernel:sakai-kernel-impl (10.3)

org.sakaiproject.kernel:sakai-kernel-impl MAVEN version 10.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.sakaiproject.kernel:sakai-kernel-impl and may be impacted: - org.sakaiproject.kernel:sakai-kernel-component 10.3 Source cves: CVE-2025-6271...

org.sakaiproject.kernel:sakai-kernel-component (1.3.0-rc01) potentially affected by CVE-2025-62710 via org.sakaiproject.kernel:sakai-kernel-impl (1.3.0-rc01)

org.sakaiproject.kernel:sakai-kernel-impl MAVEN version 1.3.0-rc01 is affected by a known vulnerability. The following packages have a transitive dependency on org.sakaiproject.kernel:sakai-kernel-impl and may be impacted: - org.sakaiproject.kernel:sakai-kernel-component 1.3.0-rc01 Source cves:...

thunderbird: firefox: Use-after-free in MediaTrackGraphImpl::GetInstance()

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in MediaTrackGraphImpl::GetInstance...

EUVD-2022-0715

Malicious code in bioql PyPI...

CVE-2025-11013

A vulnerability was identified in BehaviorTree up to 4.7.0. This vulnerability affects the function XMLParser::PImpl::loadDocImpl of the file /src/xmlparsing.cpp of the component XML Parser. The manipulation leads to null pointer dereference. The attack can only be performed from a local...

Cross-site Request Forgery (CSRF)

Overview com.liferay.portal:portal-impl is a Portal Impl Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the orderUuid parameter in the server license registration process. An attacker can register a server license without authorization by tricking an...

com.liferay.maven.plugins:liferay-maven-plugin (>=6.0.2, <=6.0.6), com.liferay.portal:util-taglib (>=6.0.2, <=6.0.6) +3 more potentially affected by CVE-2025-43809 via com.liferay.portal:portal-impl (>=6.0.2, <=6.0.6)

com.liferay.portal:portal-impl MAVEN version =6.0.2, =6.0.2, =6.0.2, =2.4-rc1, =1.0, =2.0, =2.5 Source cves: CVE-2025-43809 Source advisory: SNYK:JAVA-COMLIFERAYPORTAL-13003719...

Use of Default Credentials

Overview com.liferay.portal:com.liferay.portal.impl is a package part of Liferay. Affected versions of this package are vulnerable to Use of Default Credentials due to the API not restricting access before a user has changed their initial password. An attacker can gain unauthorized access and...

com.liferay:com.liferay.source.formatter (>=1.0.443, <=1.0.454) potentially affected by CVE-2025-43794 via com.liferay.portal:com.liferay.portal.impl (2.18.0)

com.liferay.portal:com.liferay.portal.impl MAVEN version 2.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - com.liferay:com.liferay.source.formatter =1.0.443, =1.0.454 Source cves:...