30849 matches found
BBMRI-ERIC Negotiator 安全漏洞
BBMRI-ERIC Negotiator is a biospecimen repository access tool from the Austrian company BBMRI-ERIC. A security vulnerability exists in BBMRI-ERIC Negotiator version v3.15.2, which stems from improper manipulation of the userID parameter and could lead to an insecure direct object reference attack...
CVE-2025-61984
ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. A configuration...
CVE-2025-61985
ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used...
The installers of DENSO TEN drive recorder viewer may insecurely load Dynamic Link Libraries
Overview The installers of DENSO TEN drive recorder viewer may insecurely load Dynamic Link Libraries. Uncontrolled search path element CWE-427 - CVE-2025-57781 This vulnerability is exploited by directing a user to download and place a crafted DLL file with the affected installer, and to execute...
CVE-2025-57781
The CVE-2025-57781 entry concerns the DENSO TEN drive recorder viewer installers. A DLL search path flaw (Uncontrolled search path element, CWE-427) may cause insecure DLL loading, enabling arbitrary code execution with the user’s privileges if the installer is run. Affected software is described...
EUVD-2025-32488
The installers of DENSO TEN drive recorder viewer contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privilege of the user invoking the installer...
IBM Standards Processing Engine 代码问题漏洞
IBM Standards Processing Engine Ibm Transformation Extender Advanced is a document conversion software from International Business Machines IBM. Used to automatically convert and validate large amounts of data. IBM Standards Processing Engine suffers from a deserialization vulnerability that stem...
Four-Faith Water Conservancy Informatization Platform 路径遍历漏洞
Four-Faith Water Conservancy Informatization Platform is a water conservancy informatization system from Four-Faith. A path traversal vulnerability exists in Four-Faith Water Conservancy Informatization Platform version 2.2 and prior versions, which stems from an incorrect manipulation of the...
EUVD-2025-32425
MacForge contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root.This issue affects MacForge: 1.2.0 Beta 1...
CVE-2025-10751
MacForge contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root.This issue affects MacForge: 1.2.0 Beta 1...
CVE-2025-10751
MacForge contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root.This issue affects MacForge: 1.2.0 Beta 1...
CVE-2025-10751
CVE-2025-10751 affects MacForge (1.2.0 Beta 1). The vulnerability is an insecure XPC service that enables local, unprivileged users to escalate to root. Publicly documented impact includes local privilege escalation with high severity (CVSS v3.1 base score 7.8; CVSS v4.0 base score 8.5). Connecte...
CVE-2025-10751 MacForge 1.2.0 Beta 1 - Local Privilege Escalation
MacForge contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root.This issue affects MacForge: 1.2.0 Beta 1...
CVE-2025-10751 MacForge 1.2.0 Beta 1 - Local Privilege Escalation
MacForge contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root.This issue affects MacForge: 1.2.0 Beta 1...
MacForge 安全漏洞
MacForge is an open source plugin for macEnhance. A security vulnerability exists in MacForge version 1.2.0 Beta 1, which stems from an insecure XPC service that could lead to elevated privileges...
CVE-2025-10696 OpenSupports 4.11.0 — Insecure Direct Object Reference in supervised list
OpenSupports exposes an endpoint that allows the list of 'supervised users' for any account to be edited, but it does not validate whether the actor is the owner of that list. A Level 1 staff member can modify the supervision relationship of a third party the target user, who can then view the...
CVE-2025-10696
CVE-2025-10696 affects OpenSupports 4.11.0. An endpoint allows editing the list of 'supervised users' for any account without verifying ownership, enabling a Level 1 staff member to modify the supervision relationship of a target user. This can let the target view tickets belonging to the added s...
EUVD-2021-32444
Malicious code in bioql PyPI...