42330 matches found
Soliton Systems K.K FileZen OS Command Injection Vulnerability
Soliton Systems K.K FileZen contains an OS command injection vulnerability when an user logs-in to the affected product and sends a specially crafted HTTP request...
Linux Distros Unpatched Vulnerability : CVE-2025-61143
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tifopen.c. CVE-2025-61143 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2025-61144
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function. CVE-2025-61144 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2026-3063
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in DevTools in Google Chrome prior to 145.0.7632.116 allowed an attacker who convinced a user to install a malicious extension to...
GHSA-QVHC-9V3J-5RFW vulnerabilities
Vulnerabilities for packages: dotnet...
CVE-2026-21218 vulnerabilities
Vulnerabilities for packages: dotnet...
CVE-2026-21435 vulnerabilities
Vulnerabilities for packages: ipfs-cluster, k3s, spegel-fips, rke2-runtime, ipfs-cluster-fips, kubo, spegel...
ImageMagick: ImageMagick vulnerable to denial of service via integer overflow in BMP decoder on 32-bit systems
A vulnerability for an integer overflow has been identified in the ImageMagick image processing software suite on 32-bit systems with non-default resource limits. An attacker can exploit this flaw by providing a specially crafted malicious image file BMP format for processing. Successful...
Crypt::NaCl::Sodium 安全漏洞
Crypt::NaCl::Sodium is an encryption/decryption library open source by CPAN authors. Versions of Crypt::NaCl::Sodium 2.001 and earlier have security vulnerabilities, which stem from integer overflow defects on 32-bit systems...
CVE-2026-2588
Crypt::NaCl::Sodium for Perl has an integer overflow in 32‑bit environments, affecting versions up to 2.001. The Sodium.xs code casts a STRLEN (size_t) to unsigned long long when passing a length pointer to libsodium, creating an overflow risk where 32‑bit size_t is 32‑bit but unsigned long long ...
CVE-2026-27199
Werkzeug is a comprehensive WSGI web application library. Versions 3.1.5 and below, the safejoin function allows Windows device names as filenames if preceded by other path segments. This was previously reported as GHSA-hgf8-39gv-g3f2, but the added filtering failed to account for the fact that...
GHSA-69X3-G4R3-P962 vulnerabilities
Vulnerabilities for packages: step, step-ca, caddy, step-issuer...
CVE-2026-26721
An issue in Key Systems Inc Global Facilities Management Software v.20230721a allows a remote attacker to obtain sensitive information via the sid query parameter...
CVE-2026-26724
Cross Site Scripting vulnerability in Key Systems Inc Global Facilities Management Software v. 20230721a allows a remote attacker to execute arbitrary code via the selectgroup and gn parameters on the /?Function=Groups endpoint...
CVE-2025-8055
Server-Side Request Forgery SSRF vulnerability in OpenText™ XM Fax allows Server Side Request Forgery. The vulnerability could allow an attacker to perform blind SSRF to other systems accessible from the XM Fax server. This issue affects XM Fax: 24.2...
GHSA-QQ5R-98HH-RXC9 vulnerabilities
Vulnerabilities for packages: kayenta-fips, thingsboard, kayenta, nacos, ontop, nacos-docker, ontop-fips...
CVE-2025-66614 vulnerabilities
Vulnerabilities for packages: kayenta-fips, thingsboard, kayenta, nacos, ontop, nacos-docker, ontop-fips...
ssm-erp和production_ssm 授权问题漏洞
productionssm is an ERP system developed by MegaGao’s individual developers using Spring+SpringMVC+Mybatis and jQuery EasyUI. ssm-erp is a production management ERP system developed by fenghaha’s individual developers. There are authorization issues between ssm-erp and productionssm...
Linux Distros Unpatched Vulnerability : CVE-2026-2492
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate...