5007 matches found
vLLM 代码问题漏洞
vLLM is a vLLM open source high throughput and memory efficient inference and service engine for LLM. A code issue vulnerability exists in vLLM versions 0.6.5 through 0.8.4, which stems from PyNcclPipe KV cache transfers not properly limiting the scope of TCPStore interface access...
CVE-2025-39372
CVE-2025-39372 – Reflected Cross‑Site Scripting in the WordPress Events Calendar Registration & Tickets plugin (versions
CVE-2025-39451
Missing Authorization vulnerability in Crocoblock JetBlocks For Elementor jet-blocks allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetBlocks For Elementor: from n/a through = 1.3.16...
CVE-2025-39374
CVE-2025-39374 : Cross-Site Request Forgery (CSRF) leading to Stored XSS in the WordPress plugin “Best Posts Summary” for versions up to 1.0. The CVE is documented with CVSS v3.1 base score 7.1 (HIGH) and network attack vector, low confidentiality/integrity/availability impact, and user interacti...
3m (=0.1.0), aaa-ml-datasets-course (=1.0.0) +1595 more potentially affected by CVE-2025-2099 via transformers (>=4.0.0 <=4.4.2)
transformers PYPI version =4.0.0, =0.1.0, =0.1.1, =0.1.0, =0.0.3, =0.0.0.dev20230804, =0.1.0, =0.3.0, =0.1.0, =0.2.5, =0.0.1, =0.1.0, =0.1.1 and more Source cves: CVE-2025-2099 Source advisory: SNYK:PYTHON-TRANSFORMERS-10185677...
3m (=0.1.0), aaa-ml-datasets-course (=1.0.0) +1623 more potentially affected by CVE-2025-2099 via transformers (>=2.10.0 <=4.48.3)
transformers PYPI version =2.10.0, =0.1.0, =0.1.1, =0.1.0, =0.0.3, =0.0.1, =0.0.0.dev20230804, =0.1.0, =0.3.0, =0.1.0, =0.2.5, =0.0.1, =0.1.2 and more Source cves: CVE-2025-2099 Source advisory: OSV:PYSEC-2025-40...
paicoding 安全漏洞
paicoding is an open source community system for itwanger individual developers. A security vulnerability exists in paicoding versions 1.0.0, 1.0.1, 1.0.2, and 1.0.3, which stems from an improper cross-domain policy due to misuse of the file CrossUtil.java...
CVE-2025-48134
Deserialization of Untrusted Data vulnerability in ShapedPlugin LLC WP Tabs wp-expand-tabs-free allows Object Injection.This issue affects WP Tabs: from n/a through = 2.2.12...
CVE-2025-32307
CVE-2025-32307 affects LambertGroup Chameleon HTML5 Audio Player With/Without Playlist (plugin slug lbg-audio1-html5), vulnerable through version 3.5.6 due to improper neutralization of special elements in SQL commands (SQL Injection). The CVE’s technical details in connected sources confirm an S...
2vyper (=0.3.0), ape-dasy (=0.1.0) +30 more potentially affected by CVE-2025-47285 via vyper (>=0.1.0b12 <=0.4.1)
vyper PYPI version =0.1.0b12, =0.7.1, =0.1.0, =0.0.0, =0.0.0, =0.0.5, =0.1.0, =0.1.0, =0.7.2, =0.1.10.0, =1.0.1, =0.1.0, =1.4.0, =1.21.0 and more Source cves: CVE-2025-47285 Source advisory: OSV:GHSA-QHR6-MGQR-MCHM...
Hitachi Ops Center Analyzer和Hitachi Infrastructure Analytics Advisor 安全漏洞
Hitachi Ops Center Analyzer and Hitachi Infrastructure Analytics Advisor are both products of Hitachi, Ltd. of Japan.Hitachi Ops Center Analyzer is a data center management software. It monitors, reports, and correlates end-to-end performance from servers to storage.Hitachi Infrastructure Analyti...
Hitachi Ops Center Analyzer viewpoint 安全漏洞
Hitachi Ops Center Analyzer viewpoint is an application from Hitachi, Ltd. It provides visibility and data analysis of heterogeneous IT resources across the complete data path of an application. A security vulnerability exists in Hitachi Ops Center Analyzer viewpoint versions prior to 10.0.0-00...
CVE-2025-26481
Dell PowerScale OneFS, versions 9.4.0.0 through 9.9.0.0, contains an uncontrolled resource consumption vulnerability. A remote unprivileged attacker could potentially exploit this vulnerability, leading to denial of service...
pycodium (>=0.1.0 <=0.2.1), reflex-icon-library (=1.4.2) potentially affected by CVE-2025-47425 via reflex (>=0.7.12 <=0.7.14)
reflex PYPI version =0.7.12, =0.1.0, =0.2.1 - reflex-icon-library =1.4.2 Source cves: CVE-2025-47425 Source advisory: SNYK:PYTHON-REFLEX-10442544...
Progress Telerik UI 资源管理错误漏洞
Progress Telerik UI is a suite of UI user interface controls for application development from Progress, Inc. A security vulnerability exists in Progress Telerik UI versions 2011.2.712 through 2025.1.218, which stems from insecure reflection that could lead to unhandled exceptions, which in turn...
Centreon 安全漏洞
Centreon is a set of open source system monitoring tools from the French company Centreon . The product provides monitoring capabilities for resources such as networks, systems and applications. A security vulnerability exists in Centreon versions prior to 24.04.0 to 24.04.10 and 24.10.0 to...
NetAlertX 安全漏洞
NetAlertX is a network intruder and presence detector from the jokob-sk individual developer. A security vulnerability exists in NetAlertX versions prior to 23.01.14 through 24.10.12, which stems from unauthenticated command injection and could lead to arbitrary command execution...
Kanboard 跨站脚本漏洞
Kanboard is a suite of open source visual task board software from Kanboard Open Source. The software has the ability to customize the panels based on the business. A cross-site scripting vulnerability exists in Kanboard versions 1.2.26 through 1.2.44, which stems from the presence of stored...
