534 matches found
Adobe ColdFusion 输入验证错误漏洞
Adobe ColdFusion is a dynamic Web server platform and application development framework maintained by Adobe for rapidly building and deploying data-driven dynamic Web sites, Web applications, and enterprise-class services. An improper input validation vulnerability exists in Adobe ColdFusion, whi...
Important: Red Hat Security Advisory: Red Hat JBoss Web Server 5.8.6 release and security update
An update is now available for Red Hat JBoss Web Server 5.8 on Red Hat Enterprise Linux versions 7, 8, and 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Description of the security update for Office 2016: December 9, 2025 (KB5002812)
None None...
PT-2025-49673
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the ext4 filesystem related to rbtree traversal within the ext4 mb use preallocated function. Specifically, the issue arises during memory allocation...
Managed TLS under Migration: Authentication Authority across CDN and Hosting Transitions
Managed TLS has become a common approach for deploying HTTPS, with platforms generating and storing private keys and automating certificate issuance on behalf of domain operators. This model simplifies operational management but shifts control of authentication material from the domain owner to t...
CVE-2025-66566 yawkat LZ4 Java has a possible information leak in Java safe decompressor
yawkat LZ4 Java provides LZ4 compression for Java. Insufficient clearing of the output buffer in Java-based decompressor implementations in lz4-java 1.10.0 and earlier allows remote attackers to read previous buffer contents via crafted compressed input. In applications where the output buffer is...
EUVD-2025-201456
yawkat LZ4 Java provides LZ4 compression for Java. Insufficient clearing of the output buffer in Java-based decompressor implementations in lz4-java 1.10.0 and earlier allows remote attackers to read previous buffer contents via crafted compressed input. In applications where the output buffer is...
CVE-2025-66547
Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 31.0.1, non-privileged users can modify tags on files they should not have access to via bulk tagging. This vulnerability is fixed in 31.0.1...
CVE-2025-2486
The Ubuntu edk2 UEFI firmware packages accidentally allowed the UEFI Shell to be accessed in Secure Boot environments, possibly allowing bypass of Secure Boot constraints. Versions 2024.05-2ubuntu0.3 and 2024.02-2ubuntu0.3 disable the Shell. Some previous versions inserted a secure-boot-based...
EUVD-2025-102994
Malicious code in previouscockroachz3n npm...
EUVD-2025-102992
Malicious code in previousstorkz3n npm...
Malicious code in previous_rat_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fed1a58f1effb2f6b4d27d46bbd8e0d6f0d52945c7d1b2f3613d672f1a0c3e14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-61814
InDesign Desktop versions 20.5, 19.5.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
EUVD-2025-89438
Malicious code in previousrhinocerosz3n npm...
EUVD-2025-89439
Malicious code in previousmarsupialz3n npm...
kernel: information leak via transient execution vulnerability in some AMD processors
A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information...
Description of the security update for Office 2016: November 11, 2025 (KB5002810)
None None...
EUVD-2025-75967
Malicious code in previousquokka-gooddev npm...