1624 matches found
USN-7747-1 rubygems vulnerability
It was discovered that RubyGems incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause RubyGems to consume resources, leading to a regular expression denial of service ReDoS...
webkitgtk: Processing maliciously crafted web content may lead to memory corruption
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling...
Apple多款产品 安全漏洞
Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.Apple macOS Tahoe is an operating system.... A security vulnerability exists in several Apple products that stems from improper handling of sensitive information and can be exploited...
Apple macOS Tahoe 安全漏洞
Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...
USN-7745-1: CUPS vulnerabilities
It was discovered that CUPS incorrectly handled authentication types other than Basic. An attacker could possibly use this issue to bypass authentication. CVE-2025-58060 It was discovered that CUPS incorrectly handled deserialization and validation of printer attributes. An attacker could possibl...
Security Updates for Microsoft SQL Server (September 2025)
The Microsoft SQL Server installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerabilities: - Improper Handling of Exceptional Conditions in Newtonsoft.Json CVE-2024-21907 - An information disclosure vulnerability CVE-2025-47997 - A privileg...
CVE-2025-25048 IBM Jazz Foundation path traversal
IBM Jazz Foundation 7.0.2 through 7.0.2 iFix033, 7.0.3 through 7.0.3 iFix012, and 7.1.0 through 7.1.0 iFix002 could allow an authenticated user to upload files to the system due to improper neutralization of sequences that can resolve to a restricted directory...
postgresql: PostgreSQL executes arbitrary code in restore operation
A flaw was found in PostgreSQL. This vulnerability allows a malicious user of the PostgreSQL server to inject arbitrary code in dump files created by pgdump, pgdumpall, pgrestore, and pgupgrade, causing arbitrary code execution on the client machine or SQL injection when these dump files are...
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Overview @aiondadotcom/mcp-ssh is a MCP Agent for managing SSH hosts - A Model Context Protocol server for SSH operations Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' due to using the execAsync...
Improper Handling of Exceptional Conditions
Overview @plone/volto is a Volto Affected versions of this package are vulnerable to Improper Handling of Exceptional Conditions via accessing a specific URL as an anonymous user. An attacker can cause the server process to terminate unexpectedly by sending crafted requests to the affected...
webkitgtk: Processing maliciously crafted web content may lead to memory corruption
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling...
webkitgtk: Processing maliciously crafted web content may lead to memory corruption
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling...
webkitgtk: Processing maliciously crafted web content may lead to memory corruption
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling...
ruoyi-go 安全漏洞
ruoyi-go is a backend management system for individual developers at lostvip.com. A security vulnerability exists in ruoyi-go 2.1 and earlier versions, which originates from the improper handling of the isAsc/orderByColumn parameter in the SelectListByPage function in the file...
WordPress plugin JetEngine 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
CVE-2025-9094 ThingsBoard Add Gateway special elements used in a template engine
A vulnerability was detected in ThingsBoard 4.1. This vulnerability affects unknown code of the component Add Gateway Handler. The manipulation leads to improper neutralization of special elements used in a template engine. The attack can be initiated remotely. The exploit has been disclosed to t...
Vvveb 安全漏洞
Vvveb is a powerful and easy-to-use CMS from Givan Personal Developers for building websites, blogs or e-commerce stores. A security vulnerability exists in Vvveb 1.0.5 and earlier versions, which stems from incorrect manipulation of the file /vadmin123/index.php?module=content/post&type=post...
webkitgtk: Processing maliciously crafted web content may lead to memory corruption
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling...
webkitgtk: Processing maliciously crafted web content may lead to memory corruption
A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling...
