The vulnerability of the drm_dp_mst_up_req_work() function in the driver drivers/gpu/drm/display/drm_dp_mst_topology.c, which supports the Direct Rendering Infrastructure (DRI) of the Linux operating system’s kernel, allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the drmdpmstupreqwork function in the driver drivers/gpu/drm/display/drmdpmsttopology.c, which is part of the Direct Rendering Infrastructure DRI support for the Linux kernel, relates to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker...

The vulnerability of Adobe Illustrator’s graphic editor lies in the ability to read data beyond the buffer in memory, allowing attackers to bypass ASLR protection and gain unauthorized access to protected information.

The vulnerability of Adobe Illustrator’s graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to bypass ASLR protection and gain unauthorized access to protected information...

The vulnerability of Adobe Illustrator’s graphic editor lies in the ability to read data beyond the buffer in memory, allowing attackers to bypass ASLR protection and gain unauthorized access to protected information.

The vulnerability of Adobe Illustrator’s graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to bypass ASLR protection and gain unauthorized access to protected information...

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS and Apple iPadOS that stems from file handling improvements and could result ...

The vulnerability of the cmd/go component of the GOAUTH function in the Golang programming language library allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the cmd/go function GOAUTH in the Golang programming language library is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of video surveillance cameras for monitoring and surveillance systems, related to insufficient protection of operational data, allows intruders to gain unauthorized access to protected information.

The vulnerability of video surveillance cameras for monitoring and surveillance systems is related to insufficient protection of operational data. Exploiting this vulnerability can allow an unauthorized intruder to gain unauthorized access to protected information...

CVE-2024-13407

CVE-2024-13407 (Omnipress WordPress plugin) affects Omnipress plugin versions up to and including 1.5.4. The vulnerability is information exposure via the megamenu block, caused by insufficient restrictions on which posts can be included. An authenticated attacker with Contributor level access or...

PT-2025-19324

Name of the Vulnerable Software and Affected Versions VideoPlayer2 affected versions not specified Synology Router Manager SRM affected versions not specified Description A flaw exists in VideoPlayer2 that could allow authorized remote users to read .srt subtitle files. A security issue in Synolo...

WordPress plugin Omnipress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2025-19322

Name of the Vulnerable Software and Affected Versions Synology Router Manager SRM affected versions not specified FileStation affected versions not specified Description A security issue exists in Synology Router Manager SRM related to insufficient protection of service data. Remote attackers may...

The command-line interface vulnerability of the FortiSandbox system allows a intruder to gain unauthorized access to protected information.

The vulnerability of the command-line interface of the FortiSandbox threat detection and removal system is related to the use of a strictly encrypted cryptographic key. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the software installer for Zoom video conferencing allows a hacker to disclose protected information.

The vulnerability of the software installer for Zoom video conferencing relates to the improper assignment of ownership rights. Exploiting this vulnerability can allow a perpetrator to disclose protected information...

The vulnerability of the TIFF Image development platform QNX SDP allows attackers to disclose protected information.

The vulnerability of the TIFF Image development platform QNX SDP is related to an off-by-one error. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the system’s security measures...

The vulnerability of the JavaScript script handler interface of Google Chrome’s V8 engine allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the JavaScript script handler interface of Google Chrome’s V8 engine is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of microprogrammed multifunctional devices (MFUs) such as Versalink, Phaser, and WorkCentre, related to deficiencies in authentication procedures, allows attackers to disclose protected information.

The vulnerability of microprogrammed multifunctional devices such as Versalink, Phaser, and WorkCentre is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose protected information...

The vulnerability of Zoom video conferencing software, related to improper assignment of ownership rights, allows a violator to disclose protected information.

The vulnerability of Zoom video conferencing software is related to the improper assignment of ownership rights. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, Thunderbird ESR, are related to information representation errors in the user interface. These vulnerabilities allow attackers to influence the integrity of protected information.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, Thunderbird ESR, are related to information representation errors in the user interface. Exploiting these vulnerabilities can allow an attacker to influence the integrity of protected information...

The vulnerability of the corporate version of the GitHub Enterprise Server, related to errors in verifying cryptographic signatures, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the corporate version of the GitHub Enterprise Server is related to errors in checking the cryptographic signature. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the NTFS file system of the Windows operating system, which allows a perpetrator to disclose protected information

The vulnerability of the NTFS file system in Windows operating systems is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of Zoom’s video conferencing software, related to improper handling of user actions, allows attackers to disclose sensitive information.

The vulnerability of Zoom video conferencing software is related to improper handling of user actions. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...