4344 matches found
XWiki Platform SQL注入漏洞
XWiki Platform is XWiki's open source suite of Wiki platforms for creating web collaboration applications. A SQL injection vulnerability exists in XWiki Platform versions 9.4-rc-1 through 16.10.5 and 17.0.0-rc-1 through 17.2.2, which stems from a misbehavior of the parameter sort in...
@ccci/micro-server (>=1.0.57, <=1.0.132), @kevinkidd/aicommit (1.0.3) +10 more potentially affected by CVE-2025-8022 via bun (>=1.0.2, <=1.1.38)
bun NPM version =1.0.2, =1.0.57, =1.0.0, =0.0.0, =1.2.27, =1.2.21, =0.0.2, =0.0.33, =0.0.19-beta.11, =0.0.3, =0.0.4, =0.0.7 Source cves: CVE-2025-8022 Source advisory: OSV:GHSA-4J66-8F4R-3PJX...
GitLab 15.10 < 18.0.5 / 18.1 < 18.1.3 / 18.2 < 18.2.1 (CVE-2025-4700)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that, under specific circumstances, could have potentially...
Compojoom CComment component 跨站脚本漏洞
Compojoom CComment component is a plugin from Compojoom, Inc. A cross-site scripting vulnerability exists in Compojoom CComment component versions 5.0.0-6.1.14, which stems from a stored cross-site scripting vulnerability...
CVE-2024-38335
IBM Security QRadar Network Threat Analytics 1.0.0 through 1.3.1 could allow a privileged user to cause a denial of service due to improper allocation of resources...
TYPO3 powermail 安全漏洞
TYPO3 powermail is a mail form extension for TYPO3 open source. A security vulnerability exists in TYPO3 powermail versions 12.0.0 through 12.5.2 and 13.0.0, which stems from an insecure direct object reference that could lead to the download of arbitrary files from a web server...
ViewVC 路径遍历漏洞
ViewVC is ViewVC open source a Web-based CVS, SVN code repository browsing tool. A path traversal vulnerability exists in ViewVC versions 1.1.0 to 1.1.31 and 1.2.0 to 1.2.3, which stems from a directory traversal in the standalone.py script, which could lead to the disclosure of the contents of t...
candid-extractor (>=0.1.0, <=0.1.2), deterministic-wasi-ctx (0.1.14) +17 more potentially affected by CVE-2025-53901 via wasmtime (>=10.0.2, <=12.0.2)
wasmtime CARGO version =10.0.2, =0.1.0, =0.5.0, =0.5.0, =0.1.0, =0.1.0, =10.0.0, =10.0.0, =0.1.0, =0.1.2, =0.3.0, =10.0.0, =1.7.0, =1.8.0 and more Source cves: CVE-2025-53901 Source advisory: OSV:GHSA-FM79-3F68-H2FC...
RSJoomla! RSFiles! component for Joomla 资源管理错误漏洞
RSJoomla! RSFiles! component for Joomla is an extension component for the Joomla content management system from RSJoomla! A resource management error vulnerability exists in RSJoomla! RSFiles! component for Joomla versions 1.16.3 through 1.17.7, which stems from mishandling of the search function...
melange 安全漏洞
melange is a Chainguard open source for building APKs from source code. A security vulnerability exists in melange versions prior to 0.23.0 through 0.29.5, which stems from improperly set permissions on the SBOM file, which could lead to a tampering attack...
Multer 安全漏洞
Multer is an expressjs open source middleware for Node.js. A security vulnerability exists in Multer versions 1.4.4-lts.1 through prior to 2.0.2, which stems from an unhandled exception in the handling of malformed multipart upload requests, which could lead to a denial of service...
CVE-2025-30936
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Torod Company for Information Technology Torod torod allows SQL Injection.This issue affects Torod: from n/a through = 2.1...
Authen::SASL::Perl::DIGEST_MD5 安全漏洞
Authen::SASL::Perl::DIGESTMD5 is a module in the Perl language from the Perl community. A security vulnerability exists in Authen::SASL::Perl::DIGESTMD5 versions 2.04 through 2.1800 and earlier, which stems from insecure cnonce generation...
AZL-65267 CVE-2025-53023 affecting package mysql for versions less than 8.0.43-1
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Replication. Supported versions that are affected are 8.0.0-8.0.42. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attac...
UBUNTU-CVE-2025-50076
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 8.0.0-8.0.25. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of thi...
UBUNTU-CVE-2025-5992
When passing values outside of the expected range to QColorTransferGenericFunction it can cause a denial of service, for example, this can happen when passing a specifically crafted ICC profile to QColorSpace::fromICCProfile. This issue affects Qt from 6.6.0 through 6.8.3, from 6.9.0 through 6.9....
When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.
...
Serviio Media Server 安全漏洞
Serviio Media Server is a media server software from Serviio Individual Developers in the UK. A security vulnerability exists in Serviio Media Server versions 1.4 through 1.8, which stems from a command injection issue in the /rest/action API endpoint that could lead to remote code execution...
PYSEC-2025-249
A critical deserialization vulnerability exists in the run-llama/llamaindex library's JsonPickleSerializer component, affecting versions v0.12.27 through v0.12.40. This vulnerability allows remote code execution due to an insecure fallback to Python's pickle module. JsonPickleSerializer prioritiz...
SUSE CVE-2025-53103
JUnit is a testing framework for Java and the JVM. From version 5.12.0 to 5.13.1, JUnit's support for writing Open Test Reporting XML files can leak Git credentials. The impact depends on the level of the access token exposed through the OpenTestReportGeneratingListener. If these test reports are...