org.jenkins-ci.main:jenkins-test-harness (1.551), org.jenkins-ci.main:jenkins-war (1.551) +4 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.551)

org.jenkins-ci.main:jenkins-core MAVEN version 1.551 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.551 - org.jenkins-ci.main:jenkins-war 1.551 -...

org.jenkins-ci.main:jenkins-test-harness (1.553), org.jenkins-ci.main:jenkins-war (1.553) +2 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.553)

org.jenkins-ci.main:jenkins-core MAVEN version 1.553 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.553 - org.jenkins-ci.main:jenkins-war 1.553 -...

org.jenkins-ci.main:jenkins-test-harness (1.551), org.jenkins-ci.main:jenkins-war (1.551) +4 more potentially affected by CVE-2025-59475 via org.jenkins-ci.main:jenkins-core (1.551)

org.jenkins-ci.main:jenkins-core MAVEN version 1.551 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.551 - org.jenkins-ci.main:jenkins-war 1.551 -...

REXML 资源管理错误漏洞

REXML is a Ruby open source XML toolkit for Ruby. A resource management error vulnerability exists in REXML versions 3.3.3 through 3.4.1, which stems from mishandling when parsing XML containing multiple XML declarations, and could lead to a denial of service attack...

The vulnerability of the software platform based on Git for collaborative code development in GitLab CE/EE is related to deficiencies in the mechanism for limiting the amount of input data. This allows a violator to trigger a service failure.

The vulnerability of the Git-based software platform for collaborative code development on GitLab CE/EE is related to deficiencies in the mechanism for limiting the amount of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to trigger service...

CVE-2025-59375

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing...

Exploit for Unprotected Alternate Channel in Crushftp

CVE-2025-54309 - CrushFTP Affected Versions - 10.8.5 -...

CVE-2025-10200

Use after free in Serviceworker in Google Chrome on Desktop prior to 140.0.7339.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

Shibboleth Service Provider 安全漏洞

Shibboleth Service Provider is a single sign-on framework from Shibboleth UK. A security vulnerability exists in Shibboleth Service Provider 3.5.0 and earlier versions, which stems from a SQL injection in the ID attribute of a SAML response, which could lead to the disclosure of database...

Linux Distros Unpatched Vulnerability : CVE-2024-39126

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Roundup before 2.4.0 allows XSS via JavaScript in PDF, XML, and SVG documents. CVE-2024-39126 Note that Nessus relies on the presence of the package as reported...

CVE-2025-54251

Adobe Experience Manager versions 6.5.23.0 and earlier are affected by an XML Injection vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to manipulate XML queries and gain limited unauthorized write access...

CVE-2025-10183

A blind XML External Entity XXE injection in the OpenMessaging webservice in TecCom TecConnect 4.1 allows an unauthenticated attacker to exfiltrate arbitrary files to an attacker-controlled server. TecConnect 4.1 is considered end-of-life as of December 2023. Users are advised to upgrade to TecCo...

Apache HertzBeat 安全漏洞

Apache HertzBeat is a tool from Apache USA that monitors various components. A security vulnerability exists in Apache HertzBeat versions prior to 1.7.0, which stems from an XML parsing vulnerability that could lead to remote code execution...

CVE-2025-44593

Halo prior to 2.20.13 allows bypassing file type detection and uploading malicious files such as .exe and .html files. Specifically, .html files can trigger stored XSS vulnerabilities. This vulnerability is fixed in 2.20.13...

Netgate pfSense CE 安全漏洞

Netgate pfSense CE is a FreeBSD-based open source firewall and routing platform from Netgate, Inc. that supports enterprise-class network security and network management features. A security vulnerability exists in Netgate pfSense CE that stems from the policyname parameter not being cleaned of...

CVE-2025-44593

Halo prior to 2.20.13 allows bypassing file type detection and uploading malicious files such as .exe and .html files. Specifically, .html files can trigger stored XSS vulnerabilities. This vulnerability is fixed in 2.20.13...

Vulnerability: A software solution for security and access control of cloud applications and data with Dell CloudLink. This vulnerability arises from improper restrictions on XML links to external objects, allowing attackers to trigger service failures.

The vulnerability of Dell CloudLink’s software solutions for security and access control to cloud-based applications and data is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

Jinher OA 代码问题漏洞

Jinher OA is a collaborative management software from Jinher, China. A code issue vulnerability exists in Jinher OA 1.2 and earlier versions, which originates from an XML external entity reference vulnerability in the /c6/Jhsoft.Web.projectmanage/ProjectManage/XmlHttp.aspx file...

Jinher OA 代码问题漏洞

Jinher OA is a collaborative management software from Jinher, a Chinese company. A code issue vulnerability exists in Jinher OA 1.2 and prior versions, which arises from the presence of XML external entity references in the XML Handler component...

sslscan

This is a tool for scanning SSL/TLS protocols and ciphers on a target server. The tool is called sslscan and is written in C. It is designed to be a command-line interface for scanning SSL/TLS protocols and ciphers on a target server. The tool can be built on various platforms, including Linux an...