Aggregator

Submit #552172 / VDB-303615

Submit #552101 / VDB-303614

A vulnerability was found in Craft CMS 3.0.25 and classified as problematic. Affected by this issue is some unknown functionality of the file index.php?p=admin/actions/entries/save-entry. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2018-20418. The attack may be launched remotely. Furthermore, there is an exploit available.

A critical security vulnerability has been discovered in Bitdefender GravityZone Console that could allow remote attackers to execute arbitrary commands on affected systems.  The flaw tracked as CVE-2025-2244 has a CVSS score of 9.5. It stems from an insecure PHP deserialization issue that poses significant risks to enterprise security infrastructures relying on this widely used […]

The post Bitdefender GravityZone Console PHP Vulnerability Let Attackers Execute Arbitrary Commands appeared first on Cyber Security News.

近日宣布启动战略升级，将于近期推出基于AI大模型的全新产品与解决方案。

近日宣布启动战略升级，将于近期推出基于AI大模型的全新产品与解决方案。

谷歌紧急修复安卓2个零日漏洞，60余缺陷，塞尔维亚当局曾用于攻击。

Гик-культура пересекла новую границу технологического безумия.

A vulnerability was found in GNU C Library up to 2.82.4. It has been declared as critical. Affected by this vulnerability is the function g_date_time_new_from_iso8601 of the component GLib. The manipulation leads to buffer overflow. This vulnerability is known as CVE-2025-3360. Attacking locally is a requirement. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Gnuplot. It has been classified as critical. Affected is the function IO_str_init_static_internal. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2025-3359. The attack can only be done within the local network. There is no exploit available.

快速浏览！2025.3.31—4.6日安全动态。

近日宣布启动战略升级，将于近期推出基于AI大模型的全新产品与解决方案。

最近，在 Sante PACS Server 4.1.0 版本中发现了几个严重漏洞，这使得该版本极易遭受严重的安全威胁。

A vulnerability was found in OpenHarmony up to 5.0.2 and classified as problematic. This issue affects some unknown processing. The manipulation leads to out-of-bounds read. The identification of this vulnerability is CVE-2025-27534. An attack has to be approached locally. There is no exploit available.

A vulnerability has been found in OpenHarmony up to 5.0.2 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to memory leak. This vulnerability was named CVE-2025-25057. The attack needs to be approached locally. There is no exploit available.

A vulnerability, which was classified as problematic, was found in OpenHarmony up to 5.0.2. This affects an unknown part. The manipulation leads to out-of-bounds write. This vulnerability is uniquely identified as CVE-2025-24304. It is possible to launch the attack on the local host. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in OpenHarmony up to 5.0.2. Affected by this issue is some unknown functionality. The manipulation leads to out-of-bounds read. This vulnerability is handled as CVE-2025-22842. Attacking locally is a requirement. There is no exploit available.

A vulnerability classified as problematic was found in OpenHarmony up to 5.0.2. Affected by this vulnerability is an unknown functionality. The manipulation leads to out-of-bounds read. This vulnerability is known as CVE-2025-22452. Local access is required to approach this attack. There is no exploit available.

A vulnerability classified as problematic has been found in OpenHarmony up to 5.0.2. Affected is an unknown function. The manipulation leads to out-of-bounds read. This vulnerability is traded as CVE-2025-20102. An attack has to be approached locally. There is no exploit available.

A vulnerability was found in OpenHarmony up to 5.0.2. It has been rated as problematic. This issue affects some unknown processing of the component Pre-installed Apps. The manipulation leads to integer overflow. The identification of this vulnerability is CVE-2025-22851. The attack needs to be approached locally. There is no exploit available.