FFmpeg 安全漏洞

FFmpeg is a complete solution for recording, converting, and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg version 7.1 and prior versions, which stems from a null pointer dereference. An attacker exploiting this vulnerability could cause a denial of...

PMWeb 安全漏洞

PMWeb is a web-based platform from PMWeb, Inc. which is used to manage the lifecycle of a user's schedule and build operations. A security vulnerability exists in PMWeb version 7.2.0, which stems from an insufficient password strength requirement in the Settings Processing component, which could...

CmsEasy 路径遍历漏洞

CmsEasy is a content management system CMS for creating responsive websites from China's CmsEasy company. A path traversal vulnerability exists in CmsEasy version 7.7.7.9, which stems from the parameter imgname of the function deleteimgaction that causes path traversal...

PT-2025-6711 · Ibm · Ibm I

Name of the Vulnerable Software and Affected Versions: IBM i versions 7.4 through 7.5 Description: A database access denial of service can occur due to a bypass of a database capabilities restriction check. This allows a privileged bad actor to remove or impact database infrastructure files,...

CVE-2024-13346

The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 7.11.13. This is due to the software allowing users to execute an action that does not properly validate a value before running...

WordPress plugin Avada | Website Builder For WordPress & WooCommerce 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code injection vulnerability exists in...

CVE-2022-24851

LDAP Account Manager LAM is an open source web frontend for managing entries stored in an LDAP directory. The profile editor tool has an edit profile functionality, the parameters on this page are not properly sanitized and hence leads to stored XSS attacks. An authenticated user can store XSS...

WordPress Admin and Site Enhancements (ASE) Pro Plugin <= 7.6.2.1 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Admin and Site Enhancements ASE Pro versions = 7.6.2.1...

RHSA-2025:0692 Red Hat Security Advisory: redis:7 security update

Bulletin has no description...

SUSE CVE-2025-24389

Certain errors of the upstream libraries will insert sensitive information in the OTRS or OTRS Community Edition log mechanism and mails send to the system administrator. This issue affects: OTRS 7.0.X OTRS 8.0.X OTRS 2023.X OTRS 2024.X OTRS Community Edition: 6.0.x Products based on the OTRS...

Baidu Haokan Video 安全漏洞

Baidu Haokan Video 好看视频 is a video software from the Chinese company Baidu. A security vulnerability exists in Baidu Haokan Video version 7.70.0 that originates from an attacker being able to access sensitive user information by providing a carefully crafted link...

Couchbase Server 安全漏洞

Couchbase Server is a distributed open source NoSQL non-relational database from Couchbase, Inc. in the United States. It supports data query, full-text search and active global replication. A security vulnerability exists in Couchbase Server versions 7.6.x through 7.6.3. An attacker could exploi...

IBM i 访问控制错误漏洞

IBM i is a suite of operating systems from International Business Machines IBM running in IBM Power Systems and IBM PureSystems. An access control error vulnerability exists in IBM i that stems from insufficient privilege requests. The following versions are affected: version 7.2, version 7.3,...

Apache Wicket 资源管理错误漏洞

Apache Wicket is the United States Apache Apache Foundation of a set of open source , lightweight , component-based framework , which provides an object-oriented way to develop Web-based dynamic UI applications . A resource management error vulnerability exists in Apache Wicket version 7.0.0. The...

WordPress Link Library plugin <= 7.7.2 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Colin Xu in WordPress Plugin Link Library versions = 7.7.2...

WordPress plugin Super Socializer SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

Oracle Virtualization 安全漏洞

Oracle Virtualization is a suite of virtualization solutions from Oracle Corporation USA. The product is used to unify the management of the entire hardware and software architecture from applications to disk, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the...

IBM Maximo MXAPIASSET API 路径遍历漏洞

The IBM Maximo MXAPIASSET API is a remote asset monitoring application program interface from International Business Machines IBM. A path traversal vulnerability exists in the IBM Maximo MXAPIASSET API version 7.6.1.3, which originates from allowing a remote attacker to view arbitrary files on th...

PT-2025-3422 · Otcms · Otcms

Name of the Vulnerable Software and Affected Versions: OtCMS versions =7.46 Description: The issue allows for Server-Side Request Forgery SSRF in the "/admin/read.php" API endpoint, enabling arbitrary system file reads. Recommendations: For OtCMS versions =7.46, as a temporary workaround, conside...

OTCMS 代码问题漏洞

OTCMS OTCMS is a content management system CMS for article-based websites from OTCMS. A code issue vulnerability exists in OTCMS version 7.46 and prior versions, which stems from /admin/read.php containing a server-side request forgery issue...