Adobe Substance3D Modeler 代码问题漏洞

Adobe Substance3D Modeler is the core tool in the Adobe Substance 3D series of software, designed for 3D modeling, supporting digital clay sculpting, symmetry tools, automated UV management, and other features for seamless switching across computer VR environments. Adobe Substance3D Modeler suffe...

IBM Engineering Lifecycle Optimization Publishing Cross-Site Scripting Vulnerability

IBM Engineering Lifecycle Optimization Publishing is an automated document generation solution from International Business Machines IBM. A cross-site scripting vulnerability exists in IBM Engineering Lifecycle Optimization Publishing versions 7.0.2 and 7.03 that originates from an unvalidated URI...

MINI-W88F-JQC6-5R4P

Bulletin has no description...

MINI-PV5Q-73X4-93MJ

Bulletin has no description...

MINI-GMF2-XJ7R-35RH

Bulletin has no description...

MINI-GH78-2JPG-C7RM

Bulletin has no description...

CGA-CV25-4PJ8-3Q47

Bulletin has no description...

CGA-C5J2-VJ94-V9PC

Bulletin has no description...

BELL-CVE-2025-47906

Bulletin has no description...

BIT-MASTODON-2025-54879 Mastodon e‑mail throttle misconfiguration allows unlimited email confirmations against unconfirmed emails

Mastodon is a free, open-source social network server based on ActivityPub Mastodon which facilitates LDAP configuration for authentication. In versions 3.1.5 through 4.2.24, 4.3.0 through 4.3.11 and 4.4.0 through 4.4.3, Mastodon's rate-limiting system has a critical configuration error where the...

CVE-2025-45766

poco v1.14.1-release was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key lengths are expected to be set by an application, not by this library. This dispute is subject to review under CNA rules 4.1.4, 4.1.14, and other rules; the dispute tagging is...

ExecuTorch integer overflow vulnerability

An integer overflow vulnerability in the loading of ExecuTorch models can cause overlapping allocations, potentially resulting in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit d158236b1dc84539c1b16843bc74054c9dcba006...

DEBIAN-CVE-2025-45765

ruby-jwt v3.0.0.beta1 was discovered to contain weak encryption. NOTE: the Supplier's perspective is "keysize is not something that is enforced by this library. Currently more recent versions of OpenSSL are enforcing some key sizes and those restrictions apply to the users of this gem also."...

CVE-2024-31409

creationtimestamp| type| source ---|---|--- 2025-08-07 18:54:15+00:00| seen| Telegram/j0O7DdKBOCZYj0oHXU3OYRsVmW89i4IOcvIKuIrcHxteqyw...

MINI-P9QJ-FVMG-RJMW

Bulletin has no description...

CVE-2025-50181 affecting package python-urllib3 for versions less than 2.0.7-2

CVE-2025-50181 affecting package python-urllib3 for versions less than 2.0.7-2. A patched version of the package is available...

PT-2025-32282 · Netwrix +1 · Netwrix Directory Manager +1

Name of the Vulnerable Software and Affected Versions: Netwrix Directory Manager formerly Imanami GroupID versions 11.0.0.0 through 11.1.25162.02 Description: The software contains a SQL injection issue. Authenticated users can exploit this issue. Recommendations: Update Netwrix Directory Manager...

PT-2025-32267 · Agora · Agora Foundation

Name of the Vulnerable Software and Affected Versions: Agora Foundation Agora versions prior to b087490 Description: The application is susceptible to a cross-site scripting XSS issue due to improper handling of the topicName parameter within the client/agora/public/js/editorManager.js file...

Security update for kubo (moderate)

openSUSE Security Update: Security update for kubo Announcement ID: openSUSE-SU-2025:0288-1 Rating: moderate References: 1241776 Cross-References: CVE-2025-22872 CVSS scores: CVE-2025-22872 SUSE: 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L Affected Products: openSUSE...

CVE-2025-54788

CVE-2025-54788 corresponds to a SQL injection in the SuiteCRM InboundEmail module. The issue allows arbitrary backend SQL queries, impacting confidentiality, integrity, and availability by enabling data retrieval, modification, or deletion. Affected: SuiteCRM (InboundEmail module) in versions pri...