26317 matches found
CVE-2025-26687
Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network...
CVE-2025-27079
CVE-2025-27079 affects HPE AOS-8 Instant and AOS-10 AP CLI file creation. A vulnerability in the file creation process could allow an authenticated remote attacker to perform remote code execution (RCE), enabling execution of arbitrary OS commands on the underlying host and potential system compr...
Microsoft Windows Telephony Server 安全漏洞
Microsoft Windows Telephony Server is a component of Microsoft Corporation USA that supports the Telephony Application Programming Interface TAPI, which allows computer programs to communicate with shared telephony services. A security vulnerability exists in Microsoft Windows Telephony Server. T...
PT-2025-15505 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a use after free vulnerability in the implementation of the Lightweight Directory Access Protocol LDAP in the Windows operating system. This vulnerability allows an...
Hewlett Packard Enterprise AOS 安全漏洞
Hewlett Packard Enterprise AOS HPE AOS is a network operating system for data centers, campuses, and edges from Hewlett Packard Enterprise USA. A security vulnerability exists in Hewlett Packard Enterprise AOS that stems from a command injection vulnerability that allows an authenticated attacker...
HGiga iSherlock 操作系统命令注入漏洞
HGiga iSherlock is a series of software products from China Henderson HGiga. HGiga iSherlock suffers from an operating system command injection vulnerability that originates from OS command injection, which could allow a remote unauthorized attacker to execute arbitrary system commands...
Fortinet FortiIsolator 操作系统命令注入漏洞
Fortinet FortiIsolator is a Fortinet application that provides remote security isolation capabilities for browsers. The application adds additional advanced threat protection capabilities to the Fortinet Security Fabric and protects critical business data from sophisticated threats on the Web...
AXIS OS 安全漏洞
AXIS OS is an edge device operating system from Axis Sweden. AXIS OS has a security vulnerability that originates from allowing an attacker to obtain a system username via the VAPIX Device Configuration SSH Management API...
HGiga iSherlock 操作系统命令注入漏洞
HGiga iSherlock is a series of software products from China Henderson HGiga. HGiga iSherlock suffers from an operating system command injection vulnerability that originates from OS command injection, which could allow a remote unauthorized attacker to execute arbitrary system commands...
Microsoft Windows Digital Media 资源管理错误漏洞
Microsoft Windows Digital Media is a collection of technologies and features for playing, managing, sharing, delivering, and protecting digital media content from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows Digital Media. An attacker could...
Microsoft Windows Resilient File System（ReFS） 访问控制错误漏洞
Microsoft Windows Resilient File System ReFS is a resilient file system from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Windows Resilient File System ReFS. An attacker could exploit this vulnerability to obtain sensitive information. The following product...
Microsoft HTTP.sys 资源管理错误漏洞
Microsoft HTTP.sys is an application protocol from Microsoft Corporation USA.HTTP application protocol. A resource management error vulnerability exists in Microsoft HTTP.sys. An attacker could exploit this vulnerability to cause a denial of service on the system. The following products and...
Hewlett Packard Enterprise AOS（HPE AOS） 安全漏洞
Hewlett Packard Enterprise AOS HPE AOS is a network operating system for data centers, campuses, and edges from Hewlett Packard Enterprise USA. A security vulnerability exists in Hewlett Packard Enterprise AOS HPE AOS that stems from a reflective cross-site scripting vulnerability that allows an...
Adobe ColdFusion 操作系统命令注入漏洞
Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion has an OS command injection vulnerability that arises from the application failing to...
Hewlett Packard Enterprise AOS 操作系统命令注入漏洞
Hewlett Packard Enterprise AOS HPE AOS is a network operating system for data centers, campuses, and edges from Hewlett Packard Enterprise USA. Hewlett Packard Enterprise AOS suffers from an operating system command injection vulnerability that stems from a flaw in the file creation process that...
Adobe ColdFusion 操作系统命令注入漏洞
Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion has an OS command injection vulnerability that can be exploited by an attacker to...
Microsoft DWM Core Library 输入验证错误漏洞
The Microsoft Windows DWM Core Library is a core library in the Windows operating system. An elevation of privilege vulnerability exists in Microsoft Windows DWM Core Library, which can be exploited by an attacker to elevate privileges...
Microsoft Lightweight Directory Access Protocol（LDAP） 资源管理错误漏洞
Microsoft Lightweight Directory Access Protocol LDAP is a directory services protocol from Microsoft Corporation USA that runs on a layer above the TCP/IP stack. A resource management error vulnerability exists in Microsoft Lightweight Directory Access Protocol LDAP. An attacker exploiting this...
HPE Aruba Networking Virtual Intranet Access (VIA) Client < 4.7.2 Multiple Vulnerabilities (hpesbnw04841)
The version of HPE Aruba Networking Virtual Intranet Access VIA Client running on the remote host is affected by multiple vulnerabilities, as referenced in the hpesbnw04841 advisory. - DHCP can add routes to a clientâs routing table via the classless static route option 121. VPN-based security...
