1015 matches found
The Dark Side of Digital Twins: Adversarial Attacks on AI-Driven Water Forecasting
Digital twins DTs are improving water distribution systems by using real-time data, analytics, and prediction models to optimize operations. This paper presents a DT platform designed for a Spanish water supply network, utilizing Long Short-Term Memory LSTM networks to predict water consumption...
CVE-2025-1568
Access Control Vulnerability in Gerrit chromiumos project configuration in Google ChromeOS 16063.87.0 allows an attacker with a registered Gerrit account to inject malicious code into ChromeOS projects and potentially achieve Remote Code Execution and Denial of Service via editing trusted pipelin...
Moderate: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.14.6
The 1.14.6 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.14.6 release of Red Hat OpenShift Pipelines Operator...
CVE-2025-2544
The AI Content Pipelines plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and...
CVE-2025-2544 AI Content Pipelines <= 1.6 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
The AI Content Pipelines plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and...
CVE-2025-2544 AI Content Pipelines <= 1.6 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
The AI Content Pipelines plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and...
WordPress plugin AI Content Pipelines 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
Critical Flaw in Apache Parquet Allows Remote Attackers to Execute Arbitrary Code
A maximum severity security vulnerability has been disclosed in Apache Parquet's Java Library that, if successfully exploited, could allow a remote attacker to execute arbitrary code on susceptible instances. Apache Parquet is a free and open-source columnar data file format that's designed for...
go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment
Impact The issue only occurs when the CLIENT SETINFO command times out during connection establishment. The following circumstances can cause such a timeout: 1. The client is configured to transmit its identity. This can be disabled via the DisableIndentity flag. 2. There are network connectivity...
AZL-59156 CVE-2025-29923 affecting package telegraf 1.31.0-15
go-redis is the official Redis client library for the Go programming language. Prior to 9.5.5, 9.6.3, and 9.7.3, go-redis potentially responds out of order when CLIENT SETINFO times out during connection establishment. This can happen when the client is configured to transmit its identity, there...
Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.18.0
The 1.18.0 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.18.0 release of Red Hat OpenShift Pipelines Operator...
Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.18.0
The 1.18.0 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.18.0 release of Red Hat OpenShift Pipelines Operator...
CVE-2025-1550 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server...
GHSA-48G7-3X6R-XFHP vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server...
CVE-2025-1550 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server...
CVE-2025-27152 vulnerabilities
Vulnerabilities for packages: prism, kubeflow-pipelines, tileserver-gl, jitsucom-jitsu, kubeflow-centraldashboard, lerna...
CVE-2025-27152 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, jitsucom-jitsu, opensearch-dashboards-fips, prism, tileserver-gl, opensearch-dashboards, airflow, kubeflow-centraldashboard, tileserver-gl-fips, lerna...
GHSA-JR5F-V2JV-69X6 vulnerabilities
Vulnerabilities for packages: prism, kubeflow-pipelines, tileserver-gl, jitsucom-jitsu, kubeflow-centraldashboard, lerna...
GHSA-JR5F-V2JV-69X6 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, jitsucom-jitsu, opensearch-dashboards-fips, prism, tileserver-gl, opensearch-dashboards, airflow, kubeflow-centraldashboard, tileserver-gl-fips, lerna...
