1604 matches found
UBUNTU-CVE-2025-61748
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 21.0.8 and 25; Oracle GraalVM for JDK: 21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15...
CVE-2025-62250
Improper Authentication in Liferay Portal 7.4.0 through 7.4.3.132, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows remote attackers to send malicious data to the Lifer...
MCP-server Input Validation Disclosure
The vulnerability of the MCP-server for integrating AI-powered assistants, such as Slack Model Context Protocol, is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
Ivanti Endpoint Manager SQL Injection Information Disclosure
The vulnerability of the Ivanti Endpoint Manager software management tool is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to read arbitrary data remotely...
Ivanti Endpoint Manager SQL Injection Information Disclosure
The vulnerability of the Ivanti Endpoint Manager software management tool is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to read arbitrary data remotely...
Ivanti Endpoint Manager SQL Injection Information Disclosure
The vulnerability of the Ivanti Endpoint Manager software management tool is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to read arbitrary data remotely...
Ivanti Endpoint Manager SQL Injection Information Disclosure
The vulnerability of the Ivanti Endpoint Manager software management tool is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to read arbitrary data remotely...
Ivanti Endpoint Manager SQL Injection Information Disclosure
The vulnerability of the Ivanti Endpoint Manager software management tool is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to read arbitrary data remotely...
Ivanti Endpoint Manager SQL Injection Information Disclosure
The vulnerability of the Ivanti Endpoint Manager software management tool is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to read arbitrary data remotely...
Ivanti Endpoint Manager SQL Injection Information Disclosure
The vulnerability of the Ivanti Endpoint Manager software management tool is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to read arbitrary data remotely...
Ivanti Endpoint Manager SQL Injection Information Disclosure
The vulnerability of the Ivanti Endpoint Manager software management tool is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to read arbitrary data remotely...
Ivanti Endpoint Manager SQL Injection Information Disclosure
The vulnerability of the Ivanti Endpoint Manager software management tool is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to read arbitrary data remotely...
Ivanti Endpoint Manager SQL Injection Information Disclosure
The vulnerability of the Ivanti Endpoint Manager software management tool is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to read arbitrary data remotely...
Advisory ROSA-SA-2025-3030
software: glibc 2.33 AXIS: ROSA-CHROME unaffected versions = glibc-2.33-11.git5f08d1.3 affected versions glibc-2.33-11.git5f08d1.3 CVE-ID: CVE-2023-0687 BDU-ID: 2023-00731 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the monstartup function of the monstartup file gmon.c of the GNU C System Call...
Data Protection PowerProtect Cryptographic
The vulnerabilities of the data protection software through PowerProtect Data Domain backup, the data protection software for corporate environments using cloud technologies like APEX Protection Storage, the PowerProtect DD Virtual Edition data protection platform, and the PowerProtect Data Domai...
CVE-2017-20201
CCleaner v5.33.6162 and CCleaner Cloud v1.07.3191 32-bit builds contained a malicious pre-entry-point loader that diverts execution from scrtcommonmainseh into a custom loader. That loader decodes an embedded blob into shellcode, allocates executable heap memory, resolves Windows API functions at...
CVE-2017-20201 CCleaner v5.33.6162 & CCleaner Cloud v1.07.3191 Malicious Backdoor Supply Chain Compromise
CCleaner v5.33.6162 and CCleaner Cloud v1.07.3191 32-bit builds contained a malicious pre-entry-point loader that diverts execution from scrtcommonmainseh into a custom loader. That loader decodes an embedded blob into shellcode, allocates executable heap memory, resolves Windows API functions at...
CVE-2017-20201 CCleaner v5.33.6162 & CCleaner Cloud v1.07.3191 Malicious Backdoor Supply Chain Compromise
CCleaner v5.33.6162 and CCleaner Cloud v1.07.3191 32-bit builds contained a malicious pre-entry-point loader that diverts execution from scrtcommonmainseh into a custom loader. That loader decodes an embedded blob into shellcode, allocates executable heap memory, resolves Windows API functions at...
CCleaner和CCleaner Cloud 安全漏洞
CCleaner and CCleaner Cloud are both products of CCleaner, a UK-based company.CCleaner is a system cleaner and optimizer.CCleaner Cloud is a cloud-based system cleaner and optimizer. A security vulnerability exists in CCleaner version v5.33.6162 and CCleaner Cloud version v1.07.3191, which...
