29525 matches found
OpenPrinting IPPUSBXD 安全漏洞
OpenPrinting IPPUSBXD is a printer daemon in the OpenPrinting open source. A security vulnerability exists in OpenPrinting IPPUSBXD version 1.34, which originates from a stack buffer overflow and could lead to the execution of arbitrary code in privileged services...
WSDL Import Success
WSDL schema file was successfully imported and can be used during the scan. No source data...
PT-2025-33725 · Lexmark · Lexmark Cloud Services
Name of the Vulnerable Software and Affected Versions: Lexmark Cloud Services affected versions not specified Description: A missing authorization vulnerability in Lexmark Cloud Services badge management allows an attacker to reassign badges within their organization. Recommendations: At the...
WSDL Import Failed
WSDL schema file could not be imported and cannot be used during the scan. No source data...
Wazuh for Regulatory Compliance
Organizations handling various forms of sensitive data or personally identifiable information PII require adherence to regulatory compliance standards and frameworks. These compliance standards also apply to organizations operating in regulated sectors such as healthcare, finance, government...
Low: Red Hat Security Advisory: rsync security update
An update for rsync is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, and Red Hat Enterprise Linux 8.8 Extended Update Support EXTENSION. Red Hat Product Security has rated this update as having a...
Linux Distros Unpatched Vulnerability : CVE-2020-13575
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A denial-of-service vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial...
Linux Distros Unpatched Vulnerability : CVE-2021-41556
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sqclass.cpp in Squirrel through 2.2.5 and 3.x through 3.1 allows an out-of-bounds read in the core interpreter that can lead to Code Execution. If a victim...
Huawei HarmonyOS Denial of Service Vulnerability (CNVD-2025-20843)
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A denial-of-service vulnerability exists in Huawei HarmonyOS, which can be exploited by an attacker to cause the availability of advertised services to be...
Huawei HarmonyOS Cross-Border Access Vulnerability
Huawei HarmonyOS is Huawei's self-developed distributed operating system for all scenarios. Huawei HarmonyOS suffers from an out-of-bounds access vulnerability, which is due to insufficient data validation in the location services module, and can be exploited by an attacker to affect availability...
CVE-2025-8013
The Quttera Web Malware Scanner plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.5.1.41 via the 'RunExternalScan' function. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests ...
CVE-2025-8680
The B Slider- Gutenberg Slider Block for WP plugin for WordPress is vulnerable to Server-Side Request Forgery in version less than, or equal to, 2.0.0 via the fsapirequest function. This makes it possible for authenticated attackers, with subscriber-level access and above to make web requests to...
Reducing False Positives with Active Behavioral Analysis for Cloud Security
Rule-based cloud security posture management CSPM solutions are known to produce a lot of false positives based on the limited contextual understanding and dependence on static heuristics testing. This paper introduces a validation-driven methodology that integrates active behavioral testing in...
CVE-2025-20263
A vulnerability in the web services interface of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected system. This vulnerability is due to...
CVE-2025-49264
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Cloud Infrastructure Services Cloud SAML SSO - Single Sign On Login cloud-sso-single-sign-on allows PHP Local File Inclusion.This issue affects Cloud SAML SSO - Single Sign On...
CVE-2025-2184
A credential management flaw in Palo Alto Networks Cortex XDR® Broker VM causes different Broker VM images to share identical default credentials for internal services. Users knowing these default credentials could access internal services on other Broker VM installations. The attacker must have...
RHSA-2025:13680 Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP1 security update
Bulletin has no description...
CVE-2025-8013
The Quttera Web Malware Scanner plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.5.1.41 via the 'RunExternalScan' function. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests ...
CVE-2025-8013
CVE-2025-8013 affects the Quttera Web Malware Scanner WordPress plugin and is an authenticated SSRF vulnerability via RunExternalScan in all versions up to 3.5.1.41. Exploitation requires Administrator-level access or higher and enables the attacker to trigger web requests to arbitrary locations ...
CVE-2025-8013 Quttera Web Malware Scanner <= 3.5.1.41 - Authenticated (Administrator+) Server-Side Request Forgery
The Quttera Web Malware Scanner plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.5.1.41 via the 'RunExternalScan' function. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests ...