libheif 输入验证错误漏洞

libheif is an ISO/IEC 23008-12:2017 HEIF file format decoder and encoder from struktur open source. An input validation error vulnerability exists in versions prior to libheif 1.21.0, which stems from a specially crafted HEIF file triggering an over-read of the heap buffer, which may result in a...

Priority Web 输入验证错误漏洞

Priority Web is the Web side of an enterprise resource planning system from Priority Israel. Priority Web suffers from an input validation error vulnerability that originates from a URL redirection to an untrusted site, which could lead to an open redirection attack...

CVE-2025-52600

Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems ICS and OT/IoT security, has discovered a vulnerability in camera video analytics that Improper input validation. This vulnerability could allow an attacker to execute specific commands on the...

Megasys Telenium Online Web Application 输入验证错误漏洞

Megasys Telenium Online Web Application is a web page for a network management system from Megasys Canada. An input validation error vulnerability exists in MegaSys Telenium Online Web Application, which stems from improper Perl script input validation and could lead to remote code execution...

NSF Unidata NetCDF-C 输入验证错误漏洞

NSF Unidata NetCDF-C is a tool for processing NetCDF files from NSF Unidata, USA. An input validation error vulnerability exists in NSF Unidata NetCDF-C that stems from a lack of validation of user-supplied data when parsing NC variables, which could lead to an integer overflow and remote code...

GIMP 输入验证错误漏洞

GIMP is an open source bitmap image editor from the GIMP team. GIMP suffers from an input validation error vulnerability that stems from a lack of proper validation of user-supplied data when parsing PNM files, which could lead to an integer overflow and remote code execution...

Restajet Online Food Delivery System 输入验证错误漏洞

Restajet Online Food Delivery System is an online food ordering and delivery system from Restajet Turkey. An input validation error vulnerability exists in Restajet Online Food Delivery System version 19122025 and prior versions, which originates from URL redirection to an untrusted site and can...

Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets that stems from a memory corruption when processing large packets, which could result in a denial of service...

Adobe DNG Software Development Kit (SDK) Input Validation Error Vulnerability

Adobe DNG Software Development Kit SDK is a software development kit from the American company Audobee Adobe. An input validation error vulnerability exists in Adobe DNG Software Development Kit SDK, which can be exploited by an attacker to execute arbitrary code on a system or cause an applicati...

WordPress plugin Fox LMS – WordPress LMS Plugin 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. WordPress...

WordPress plugin TI WooCommerce Wishlist 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. An input...

Microsoft Exchange Server Input Validation Error Vulnerability (CNVD-2025-3057284)

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A security vulnerability exists in Microsoft Exchange Server. An attacker could exploit the...

CVE-2025-36932

In tracepointmsghandler of cpm/google/lib/tracepoint/tracepointipc.c, there is a possible memory overwrite due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

glib 输入验证错误漏洞

glib is a general-purpose, portable utility library from the GNOME project. It provides many useful data types, macros, type conversions, string utilities, file utilities, main loop abstractions, and more. An input validation error vulnerability exists in glib, which stems from an integer overflo...

Adobe ColdFusion 输入验证错误漏洞

Adobe ColdFusion is a suite of rapid application development platforms from the American company Audobee Adobe. The platform includes an integrated development environment and a scripting language. An input validation error vulnerability exists in Adobe ColdFusion versions 2025.4, 2023.16, 2021.2...

glib 输入验证错误漏洞

glib is a general-purpose, portable utility library from the GNOME project. Many useful data types, macros, type conversions, string utilities, file utilities, main loop abstractions, etc. are provided. An input validation error vulnerability exists in glib, which stems from a GVariant parser...

Siemens SINEC Security Monitor 输入验证错误漏洞

Siemens SINEC Security Monitor is an industrial security monitor from Siemens Germany. An input validation error vulnerability exists in Siemens SINEC Security Monitor versions prior to V4.10.0, which stems from a lack of input validation for the date parameter in the report generation function,...

Siemens RUGGEDCOM 输入验证错误漏洞

Siemens RUGGEDCOM is a communications device from Siemens Germany. It provides fast and reliable communications for power, transportation, oil and gas, and other industries. Siemens RUGGEDCOM suffers from an input validation error vulnerability that stems from insufficient input validation during...

Adobe DNG SDK 输入验证错误漏洞

Adobe DNG Software Development Kit SDK is a software development kit from the American company Audobee Adobe. An input validation error vulnerability exists in Adobe DNG Software Development Kit SDK, which can be exploited by an attacker to execute arbitrary code on a system or cause an applicati...

Microsoft Message Queuing 输入验证错误漏洞

Microsoft Message Queuing is a Microsoft Corporation USA solution for implementing asynchronous and synchronous scenarios that require high performance. An input validation error vulnerability exists in Microsoft Message Queuing. An attacker could exploit the vulnerability to elevate privileges...