KUNBUS PiCtory 安全漏洞

KUNBUS PiCtory is a graphical software tool from KUNBUS Corporation for configuring and managing the KUNBUS Revolution Pi industrial computer. A security vulnerability exists in KUNBUS PiCtory versions 2.5.0 through 2.11.1, which stems from a path traversal that could lead to authentication bypas...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the use of out-of-range arrays in the crct10difarch function...

@acala-network/api (>=0.2.0-beta.1, <=0.2.0-beta.8), @acala-network/types (>=0.2.0-beta.1, <=0.2.0-beta.8) +404 more potentially affected by CVE-2025-27611 via base-x (>=3.0.0, <=3.0.10)

base-x NPM version =3.0.0, =0.2.0-beta.1, =0.2.0-beta.1, =0.0.3, =0.1.2, =0.3.7, =0.1.7, =1.0.0, =1.0.0, =1.0.1, =1.0.0, =1.0.0, =1.0.2 and more Source cves: CVE-2025-27611 Source advisory: OSV:GHSA-XQ7P-G2VC-G82P...

PYSEC-2025-42

vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Versions starting from 0.6.5 and prior to 0.8.5, having vLLM integration with mooncake, are vulnerable to remote code execution due to using pickle based serialization over unsecured ZeroMQ sockets. The vulnerab...

vLLM 安全漏洞

vLLM is a high throughput and memory efficient inference and service engine for LLM from the vLLM open source. A security vulnerability exists in vLLM versions prior to 0.8.0 through 0.8.5, which stems from inefficiencies in the input preprocessing logic that could lead to resource exhaustion...

vLLM 代码问题漏洞

vLLM is a vLLM open source high throughput and memory efficient inference and service engine for LLM. A code issue vulnerability exists in vLLM versions prior to 0.6.5 to 0.8.5, which stems from the use of pickle-based serialization and could lead to remote code execution...

vLLM 安全漏洞

vLLM is a vLLM open source high throughput and memory efficient reasoning and service engine for LLM. A security vulnerability exists in vLLM versions prior to 0.5.2 through 0.8.5, which stems from ZeroMQ could lead to denial of service and data exposure...

Snowflake Connector for .NET 安全漏洞

Snowflake Connector for .NET is a . A security vulnerability exists in Snowflake Connector for .NET versions prior to 2.1.2 through 4.4.1, which stems from a TOCTOU contention condition that could result in the logging configuration being overwritten...

PT-2025-27988

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved. The issue is related to the vgacon scroll function, where a check for the vc origin address range has been added. The vulnerabili...

@blubox/body-parser (>=1.0.0, <=1.0.1), @breautek/storm (>=8.0.0, <=8.4.0) +72 more potentially affected by CVE-2025-46653 via formidable (>=3.2.4, <=3.5.2)

formidable NPM version =3.2.4, =1.0.0, =8.0.0, =0.0.1, =0.0.1, =0.0.1, =3.4.4, =0.1036.4000, =40.0.1, =1.2.1, =0.2.14, =16.0.1, =2.13.1, =2.15.3 and more Source cves: CVE-2025-46653 Source advisory: OSV:GHSA-75V8-2H7P-7M2M...

CVE-2025-46495

Cross-Site Request Forgery CSRF vulnerability in tomontoast Drop Caps drop-caps allows Stored XSS.This issue affects Drop Caps: from n/a through = 2.1...

CVE-2025-46457

Cross-Site Request Forgery CSRF vulnerability in Ahsanullah Akanda Wp Custom CMS Block wp-custom-cms-block allows Stored XSS.This issue affects Wp Custom CMS Block: from n/a through = 2.1...

CVE-2025-32531

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tychesoftwares Arconix FAQ arconix-faq allows Reflected XSS.This issue affects Arconix FAQ: from n/a through = 1.9.5...

CVE-2025-39421

Cross-Site Request Forgery CSRF vulnerability in Mustafa KUCUK WP Sticky Side Buttons wp-sticky-side-buttons allows Stored XSS.This issue affects WP Sticky Side Buttons: from n/a through = 2.1...

Andamiro Pump It Up 20th Anniversary 安全漏洞

Andamiro Pump It Up 20th Anniversary is a dance simulation game by South Korean company Andamiro. A security vulnerability exists in Andamiro Pump It Up 20th Anniversary versions 1.00.0 through 2.08.3, which stems from a denial of service that may result from a specific cancel operation...

Contrastive Learning for Continuous Touch-Based Authentication

Smart mobile devices have become indispensable in modern daily life, where sensitive information is frequently processed, stored, and transmitted-posing critical demands for robust security controls. Given that touchscreens are the primary medium for human-device interaction, continuous user...

SUSE CVE-2025-22112

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix out-of-range access of vnicinfo array The bnxtqueuestart | stop access vnicinfo as much as allocated, which indicates bp-nrvnics. So, it should not reach bp-vnicinfobp-nrvnics...

CVE-2025-2300

Hitachi Ops Center Common Services within Hitachi Ops Center OVA contains an information exposure vulnerability. This issue affects Hitachi Ops Center Common Services: from 11.0.3-00 before 11.0.4-00...

CVE-2025-26413: Improper Input Validation

Improper Input Validation vulnerability in Apache Kvrocks. The SETRANGE command didn't check if the offset input is a positive integer and use it as an index of a string. So it will cause the server to crash due to its index is out of range. This issue affects Apache Kvrocks: through 2.11.1. User...

Jmix 安全漏洞

Jmix is a set of libraries and tools from Jmix, Inc. for accelerating Spring Boot data-centric application development. A security vulnerability exists in Jmix versions 1.0.0 through 1.6.1 and 2.0.0 through 2.3.4, which stems from an improper file size limitation and could result in a denial of...