19523 matches found
CVE-2025-32966
DataEase is an open-source BI tool alternative to Tableau. Prior to version 2.10.8, authenticated users can complete RCE through the backend JDBC link. This issue has been patched in version 2.10.8...
CVE-2024-56156
creationtimestamp| type| source ---|---|--- 2025-04-25 17:19:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnnq76r3yt24 2025-04-25 19:11:04+00:00| seen| https://t.me/cvedetector/23761 2025-04-25 21:36:02+00:00| seen|...
CVE-2025-31478
Zulip is an open-source team collaboration tool. Zulip supports a configuration where account creation is limited solely by being able to authenticate with a single-sign on authentication backend, meaning the organization places no restrictions on email address domains or invitations being requir...
CVE-2025-43862
Dify is an open-source LLM app development platform. Prior to version 0.6.12, a normal user is able to access and modify APP orchestration, even though the web UI of APP orchestration is not presented for a normal user. This access control flaw allows non-admin users to make unauthorized access a...
LightDSA: a Python-Based Hybrid Digital Signature Library and Performance Analysis of RSA, DSA, ECDSA and EdDSA in Variable Configurations, Elliptic Curve Forms and Curves
Digital signature algorithms DSAs are fundamental to cryptographic security, ensuring data integrity and authentication. While RSA, DSA, ECDSA, and EdDSA are widely used, their performance varies significantly depending on key sizes, hash functions, and elliptic curve configurations. In this pape...
z2d 安全漏洞
z2d is an open source 2D graphics library written in the pure Zig language by Chris Marchesi, an individual developer. A security vulnerability exists in z2d version 0.6.0, which stems from the possibility that the source surface may be completely out of bounds on the x-axis when using...
Mattermost Information Disclosure Vulnerability
Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an information disclosure vulnerability that stems from not checking if a file has been deleted, which can be exploited by an attacker to cause a file metadata disclosure...
Apache Roller Code Issue Vulnerability
Apache Roller is the United States Apache Apache Foundation of a Java-based multi-user open source blogging system. A code issue vulnerability exists in Apache Roller 6.1.4 and earlier versions, which stems from a password change that does not properly invalidate the session and can be exploited ...
Malicious code in poc-npm-hooks (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c566d52416b7be560224ad7d3f57924013882a6ee87a79754da4ba6f174c2106 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
159 CVEs Exploited in Q1 2025 — 28.3% Within 24 Hours of Disclosure
As many as 159 CVE identifiers have been flagged as exploited in the wild in the first quarter of 2025, up from 151 in Q4 2024. "We continue to see vulnerabilities being exploited at a fast pace with 28.3% of vulnerabilities being exploited within 1-day of their CVE disclosure," VulnCheck said in...
Code-Projects Online Class and Exam Scheduling System 安全漏洞
Code-Projects Online Class and Exam Scheduling System is an online class and exam scheduling system from Code-Projects open source. A security vulnerability exists in Code-Projects Online Class and Exam Scheduling System version 1.0, which is caused by SQL injection due to incorrect manipulation ...
Code-Projects Online Class and Exam Scheduling System 安全漏洞
Code-Projects Online Class and Exam Scheduling System is an online class and exam scheduling system from Code-Projects open source. A security vulnerability exists in Code-Projects Online Class and Exam Scheduling System version 1.0, which originates from a SQL injection due to incorrect...
Mattermost 安全漏洞
Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an input validation error vulnerability that stems from insufficient props validation, which can be exploited by an attacker to cause a denial of service attack...
Centreon 安全漏洞
Centreon is a set of open source system monitoring tools from the French company Centreon . The product provides monitoring capabilities for resources such as networks, systems and applications. Centreon suffers from a security vulnerability that originates from SQL injection and could lead to...
CVE-2025-32966
DataEase is an open-source BI tool alternative to Tableau. Prior to version 2.10.8, authenticated users can complete RCE through the backend JDBC link. This issue has been patched in version 2.10.8...
CVE-2025-32966 Dataease H2 JDBC Connection Remote Code Execution
DataEase is an open-source BI tool alternative to Tableau. Prior to version 2.10.8, authenticated users can complete RCE through the backend JDBC link. This issue has been patched in version 2.10.8...
virtuoso-opensource: DoS in sqlc_add_distinct_node
A flaw was found in Virtuoso-OpenSource. This vulnerability allows attackers to cause a denial of service DoS via crafted SQL statements...
[SECURITY] Fedora 41 Update: chromium-135.0.7049.95-1.fc41
Chromium is an open-source web browser, powered by WebKit Blink...
[SECURITY] Fedora 41 Update: moodle-4.4.8-1.fc41
Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators create effective online learning communities...