Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from the drm/rockchip: vop2 module may cause a null pointer dereference in the absence of a master plane...

CVE-2025-55203

Plane is open-source project management software. Prior to version 0.28.0, a stored cross-site scripting XSS vulnerability exists in the descriptionhtml field of Plane. This flaw allows an attacker to inject malicious JavaScript code that is stored and later executed in other users’ browsers. The...

CVE-2025-55203 Plane Stored XSS in Add Work Item Functionality

Plane is open-source project management software. Prior to version 0.28.0, a stored cross-site scripting XSS vulnerability exists in the descriptionhtml field of Plane. This flaw allows an attacker to inject malicious JavaScript code that is stored and later executed in other users’ browsers. The...

CVE-2025-55203 Plane Stored XSS in Add Work Item Functionality

Plane is open-source project management software. Prior to version 0.28.0, a stored cross-site scripting XSS vulnerability exists in the descriptionhtml field of Plane. This flaw allows an attacker to inject malicious JavaScript code that is stored and later executed in other users’ browsers. The...

CVE-2025-55203

Plane is an open‑source project management tool. A stored XSS vulnerability exists in the description_html field prior to version 0.28.0, where unsanitized/uncleaned input allows attacker‑provided JavaScript to be saved in the database and executed in other users’ browsers. Impacts include potent...

CVE-2025-50251

Server side request forgery SSRF vulnerability in makeplane plane 0.23.1 via the password recovery...

Plane 跨站脚本漏洞

Plane is an open source, self-hosted project planning tool from Plane Open Source. A cross-site scripting vulnerability exists in Plane versions prior to 0.28.0, which stems from an insufficiently cleaned and escaped descriptionhtml field that could lead to a stored cross-site scripting attack...

PT-2025-33493 · Plane · Plane

Name of the Vulnerable Software and Affected Versions: Plane versions prior to 0.28.0 Description: Plane is open-source project management software. A stored cross-site scripting XSS vulnerability exists in the description html field. This flaw allows an attacker to inject malicious JavaScript co...

Malicious code in com.microsoft.mixedreality.toolkit.planefinding (npm)

The package com.microsoft.mixedreality.toolkit.planefinding was found to contain malicious code...

CVE-2025-50251

Server side request forgery SSRF vulnerability in makeplane plane 0.23.1 via the password recovery...

K000152001: HTTP/2 vulnerability CVE-2025-54500

Security Advisory Description An HTTP/2 implementation flaw allows a denial-of-service DoS that uses malformed HTTP/2 control frames to break the maximum concurrent streams limit HTTP/2 MadeYouReset Attack. CVE-2025-54500 Impact This vulnerability allows a remote, unauthenticated attacker to caus...

K000151546: BIG-IP APM vulnerability CVE-2025-46405

Security Advisory Description When Network Access is configured on a BIG-IP APM virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. CVE-2025-46405 Impact Traffic is disrupted while the TMM process restarts. This vulnerability allows a remote,...

K000141436: BIG-IP Client SSL profile vulnerability CVE-2025-52585

Security Advisory Description When a BIG-IP LTM Client SSL profile is configured on a virtual server with SSL Forward Proxy enabled and Anonymous Diffie-Hellman ADH ciphers enabled, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. CVE-2025-52585 Impact Traffic i...

K000152786: NGINX ngx_mail_smtp_module vulnerability CVE-2025-53859

Security Advisory Description NGINX Open Source and NGINX Plus have a vulnerability in the ngxmailsmtpmodule that might allow an unauthenticated attacker to over-read NGINX SMTP authentication process memory; as a result, the server side may leak arbitrary bytes sent in a request to the...

Plane 安全漏洞

Plane is an open source, self-hosted project planning tool from Plane Open Source. A security vulnerability exists in Plane version 0.23.1, which stems from a server-side request forgery in the password recovery feature...

CVE-2025-50251

Server side request forgery SSRF vulnerability in makeplane plane 0.23.1 via the password recovery...

CVE-2025-50251

CVE-2025-50251 describes a server-side request forgery (SSRF) in Makeplane (plane) version 0.23.1, triggered via the password recovery feature. The vulnerability affects makeplane plane 0.23.1 and is classified with high impact for confidentiality and integrity, with a CVSS v3.1 base score of 9.1...

CVE-2025-50251

Server side request forgery SSRF vulnerability in makeplane plane 0.23.1 via the password recovery...

Linux Distros Unpatched Vulnerability : CVE-2025-37783

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Fix error pointers in dpuplanevirtualatomiccheck The function...

Linux Distros Unpatched Vulnerability : CVE-2024-35902

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/rds: fix possible cp null dereference cp might be null, calling cp-cpconn would produce...