The vulnerability of the SAP Business Warehouse data management and analytics system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the SAP Business Warehouse data management and analytics system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an uninitialized data structure that could lead to a null pointer dereference...

The vulnerability of the Splunk Enterprise operating analysis platform, related to the lack of measures taken to protect the website structure, allows attackers to carry out XSS attacks.

The vulnerability of the Splunk Enterprise platform for operational analysis is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of software for developing and executing applications in the ABAP language on the SAP NetWeaver Application Server ABAP lies in the lack of measures taken to protect the structure of web pages. This allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the software used for developing and executing applications in the ABAP language of SAP NetWeaver Application Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripti...

The vulnerability of the SAP NetWeaver Application Server ABAP software integration platform, related to the lack of protective measures for website structures, allows attackers to carry out XSS attacks.

The vulnerability of the SAP NetWeaver Application Server ABAP software integration platform is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

SUSE CVE-2025-68330

In the Linux kernel, the following vulnerability has been resolved: iio: accel: bmc150: Fix irq assumption regression The code in bmc150-accel-core.c unconditionally calls bmc150accelsetinterrupt in the iiobuffersetupops, such as on the runtime PM resume path giving a kernel splat like this if th...

PT-2025-52859

Name of the Vulnerable Software and Affected Versions: LangChain versions prior to 0.3.81 and 1.2.5 Description: A serialization injection vulnerability exists in LangChain's dumps and dumpd functions. These functions do not properly escape dictionaries containing 'lc' keys when serializing data...

CVE-2025-68330 iio: accel: bmc150: Fix irq assumption regression

In the Linux kernel, the following vulnerability has been resolved: iio: accel: bmc150: Fix irq assumption regression The code in bmc150-accel-core.c unconditionally calls bmc150accelsetinterrupt in the iiobuffersetupops, such as on the runtime PM resume path giving a kernel splat like this if th...

CVE-2025-14267 Unintended temporary cached data included in a structure only copy intended to be empty of data

Incomplete removal of sensitive information before transfer vulnerability in M-Files Corporation M-Files Server allows data leak exposure affecting versions before 25.12.15491.7...

The vulnerability of IBM OpenPages, a risk management platform for enterprises, relates to the lack of measures taken to protect the structure of the web page. This allows attackers to execute arbitrary HTML code.

The vulnerability of IBM OpenPages, a risk management platform for enterprises, is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary HTML code...

Security Bulletin: IBM Storage Ceph is vulnerable to Improper Handling of Syntactically Invalid Structure in Grafana (CVE-2025-22865)

Summary Grafana is used by IBM Storage Ceph as part of the dashboard to monitor the stats for each cluster. CVE-2025-22865 Vulnerability Details CVEID:CVE-2025-22865 DESCRIPTION: Using ParsePKCS1PrivateKey to parse a RSA key that is missing the CRT values would panic when verifying that the key i...

EUVD-2025-203948

AVideo versions prior to 20.0 disclose absolute filesystem paths via multiple public API endpoints. Returned metadata includes full server paths to media files, revealing underlying filesystem structure and facilitating more effective attack chains...

The vulnerability of Schneider Electric’s ATV, ILC, VW series software products stems from the lack of protective measures for the website structure, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Schneider Electric’s ATV, ILC, and VW series software products is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the JoomlaUX JUX Real Estate plugin for the Joomla content management system (CMS) arises from insufficient measures taken to protect the structure of web pages. This allows attackers to execute cross-site scripting attacks.

The vulnerability of the JoomlaUX JUX Real Estate plugin for the Joomla content management system is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the synchronization application for Qsync Central files relates to the lack of security measures for the SQL query structure, allowing a hacker to execute arbitrary code.

The vulnerability of the Qsync Central file synchronization application is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

AVideo 安全漏洞

AVideo is an open source broadcast network creation tool from World Wide Broadcast Network. A security vulnerability exists in AVideo versions prior to 20.0, which stems from multiple public API endpoints leaking absolute filesystem paths, potentially exposing the underlying filesystem structure...

The vulnerability of the GET Parameter Handler component of the JoomlaUX JUX Real Estate plugin for the Joomla content management system allows a hacker to execute arbitrary SQL code.

The vulnerability of the GET Parameter Handler component in the JoomlaUX JUX Real Estate plugin for the Joomla content management system is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL code remotely...

Vulnerability in the definition of the rx_agg_cmp{} structure in the drivers/net/ethernet/broadcom/bnxt/bnxt.h file – a driver for supporting Ethernet network adapters in the Linux operating system, which allows a hacker to cause a service failure.

The vulnerability of the rxaggcmp structure definition in the drivers/net/ethernet/broadcom/bnxt/bnxt.h file – the driver for supporting Ethernet network adapters in Linux’s kernel – is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to cause a system...

The vulnerability of the Nagios Network Analyzer software, a monitoring and network traffic analysis tool, arises from the lack of security measures taken to protect the website structure. This vulnerability allows attackers to execute arbitrary code.

The vulnerability of the Nagios Network Analyzer software relates to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

The vulnerability of the Nagios Fusion software for visualizing IT infrastructure working conditions lies in the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the Nagios Fusion software for visualizing IT infrastructure’s operational status is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...