Red Hat Single Sign-On 输入验证错误漏洞

Red Hat Single Sign-On is an authentication and access control system from Red Hat USA. The tool is responsible for authentication and access control functions for systems that support most authentication protocols Oauth, OpenId Connect, etc., and can easily integrate with most products such as...

CVE-2025-10259

The vulnerability CVE-2025-10259 affects Mitsubishi Electric MELSEC iQ-F Series CPU module. In the TCP communication function, improper validation of the specified quantity in input can allow a remote attacker to disconnect the targeted connection by sending specially crafted TCP packets, causing...

PT-2025-45134

A vulnerability in the API subsystem of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to obtain sensitive information from an affected system. This vulnerability is due to improper validation of requests to certain API endpoints. An attacker could exploit this...

CVE-2025-47352

CVE-2025-47352 is described as a memory corruption in Qualcomm chipsets during audio streaming processing, caused by improper validation of an array index in the audio path. The vulnerability is characterized in multiple feeds with the same description; one source (PT-2025-44924) explicitly ties ...

Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets that stems from a memory corruption when processing audio streaming operations...

Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets, which arises from a memory corruption when processing large input data from a communication interface from a remote source...

Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets that originates from a memory corruption that occurs when an out-of-range identifier is used to trigger a subsystem crash...

Origin Validation Error

@parcel/reporter-dev-server is vulnerable to an Origin Validation Error. The vulnerability is due to the server failing to verify and enforce the Origin header for XMLHttpRequests. An attacker can host a malicious webpage that issues cross-origin XMLHttpRequests to a developer's running dev serve...

Path Traversal

esm.sh is vulnerable to Path Traversal. The vulnerability is due to improper validation of the X-Zone-Id HTTP header when constructing filesystem paths, which allows an attacker to use ../ sequences to write files outside the intended storage directory and access arbitrary locations on the system...

Movary 输入验证错误漏洞

Movary is a movie review program by Lee Peuker Personal Developer. An input validation error vulnerability exists in Movary versions prior to 0.69.0, which stems from the login page not validating the redirection parameter, which could lead to a redirection attack...

CVE-2025-10925

GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

GIMP 输入验证错误漏洞

GIMP is an open source bitmap image editor from the GIMP team. An input validation error vulnerability exists in GIMP that stems from a lack of proper validation of user-supplied data when parsing FF files, which could lead to an integer overflow and remote code execution...

CVE-2025-12245

A vulnerability was identified in chatwoot up to 4.7.0. This vulnerability affects the function initPostMessageCommunication of the file app/javascript/sdk/IFrameHelper.js of the component Widget. The manipulation of the argument baseUrl leads to origin validation error. Remote exploitation of th...

CVE-2025-12245

A vulnerability was identified in chatwoot up to 4.7.0. This vulnerability affects the function initPostMessageCommunication of the file app/javascript/sdk/IFrameHelper.js of the component Widget. The manipulation of the argument baseUrl leads to origin validation error. Remote exploitation of th...

EUVD-2025-36123

A vulnerability was identified in chatwoot up to 4.7.0. This vulnerability affects the function initPostMessageCommunication of the file app/javascript/sdk/IFrameHelper.js of the component Widget. The manipulation of the argument baseUrl leads to origin validation error. Remote exploitation of th...

Plane 输入验证错误漏洞

Plane is an open source, self-hosted project planning tool from Plane Open Source. An input validation error vulnerability exists in Plane versions prior to 1.1.0, which stems from the nextpath parameter allowing the passing of an arbitrary scheme that could lead to a cross-site scripting attack...

Veeder-Root TLS4B Automatic Tank Gauge System 输入验证错误漏洞

Veeder-Root TLS4B Automatic Tank Gauge System is a security management system for gas stations, tank farms, or industrial storage tanks from Veeder-Root USA. An input validation error vulnerability exists in the Veeder-Root TLS4B Automatic Tank Gauge System, which stems from improper handling of...

MOLGENIS EMX2 输入验证错误漏洞

MOLGENIS EMX2 is a MOLGENIS open source data platform. An input validation error vulnerability exists in MOLGENIS EMX2 version v11.14.0 that stems from the manipulation of redirection parameters that could create malicious URLs, potentially causing users to be redirected to phishing websites or...

Siemens SIMATIC Devices Improper Input Validation (CVE-2025-21806)

net: let net.core.devweight always be non-zero. The following problem was encountered during stability test: NULL netdevice. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

Origin Validation Error

Overview Affected versions of this package are vulnerable to Origin Validation Error which can be triggered via unauthenticated cluster messages. An attacker can inject malicious data into the cluster. Remediation Upgrade com.liferay:com.liferay.portal.cluster.multiple to version 5.0.35 or higher...