Aggregator

A vulnerability labeled as problematic has been found in Js Communications RevoWorks SCVX and RevoWorks Browser. Affected by this vulnerability is an unknown functionality of the component VirusChecker/ThreatChecker. Such manipulation leads to protection mechanism failure. This vulnerability is listed as CVE-2024-25091. The attack must be carried out from within the local network. There is no available exploit. The affected component should be upgraded.

A vulnerability has been found in OpenText ArcSight Enterprise Security Manager up to 24.0 and classified as problematic. Affected is an unknown function. The manipulation leads to information disclosure. This vulnerability is traded as CVE-2024-0967. It is possible to initiate the attack remotely. There is no exploit available. The affected component should be upgraded.

A vulnerability, which was classified as critical, has been found in Dassault Systèmes Documentation Server. Affected by this vulnerability is an unknown functionality of the component HTTP Request Handler. The manipulation leads to os command injection. This vulnerability is documented as CVE-2024-1624. The attack can be initiated remotely. Additionally, an exploit exists.

A vulnerability identified as problematic has been detected in HP ThinPro up to 8.0 SP7. This affects an unknown function. This manipulation causes memory corruption. The identification of this vulnerability is CVE-2024-1174. The attack needs to be done within the local network. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability identified as critical has been detected in AVEVA Pipeline Simulation up to 2025 SP1. The affected element is an unknown function. The manipulation leads to missing authorization. This vulnerability is uniquely identified as CVE-2026-5387. The attack is possible to be carried out remotely. No exploit exists.

Apple approved a fake Ledger Live app on its App Store, allowing scammers to steal $9.5 million from more than 50 users. Did you install this app?

关键词数据泄露国外知名零工平台Fiverr因Cloudinary配置不当，超3万个用户文件暴露在公网，包括纳税

关键词苹果4月15日，苹果官微发文称安全研究人员发现针对旧版iOS的网页攻击，用户数据可能被盗。

关键词供应链安全2026年4月14日，美国对伊朗伊斯法罕省攻击期间，伊朗境内大量美制通信设备同时脱机或系统崩溃

A vulnerability identified as critical has been detected in NietThijmen ShoppingCart 0.0.2. This vulnerability affects unknown code of the component Connect Function. Performing a manipulation of the argument Port results in command injection. This vulnerability was named CVE-2024-53412. The attack may be initiated remotely. There is no available exploit.

A vulnerability was found in Lenovo Software Fix. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation results in link following. This vulnerability is known as CVE-2026-4135. Attacking locally is a requirement. No exploit is available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Lenovo Software Fix. The impacted element is an unknown function. Such manipulation leads to argument injection. This vulnerability is documented as CVE-2026-4145. The attack needs to be performed locally. There is not any exploit available. You should upgrade the affected component.

A vulnerability labeled as critical has been found in HP OMEN Gaming Hub up to 1101.2602. This issue affects some unknown processing. Executing a manipulation can lead to execution with unnecessary privileges. The identification of this vulnerability is CVE-2026-4667. The attack can only be executed locally. There is no exploit available. The affected component should be upgraded.

A vulnerability marked as critical has been reported in CentSDR e40795. Impacted is the function Thread1. The manipulation leads to stack-based buffer overflow. This vulnerability is referenced as CVE-2026-30364. The attack needs to be initiated within the local network. No exploit is available.

A vulnerability categorized as critical has been discovered in HP DeskJet 2800e All-in-One Printer, DeskJet 4200 All-in-One Printer, DeskJet Ink Advantage 4200 All-in-One Printer, DeskJet 4200e All-in-One Printer, DeskJet Ink Advantage Ultra 4900 and DeskJet Ink Advantage 2800 All-in-One Printer. This affects an unknown part of the component Web Services for Devices Scan Request Handler. Such manipulation leads to stack-based buffer overflow. This vulnerability is uniquely identified as CVE-2026-4682. The attack can only be initiated within the local network. No exploit exists. It is advisable to upgrade the affected component.

全球九成以上的大米产自亚洲，亚洲有逾十亿人口以大米为主食。历史数据显示，亚洲大米过去九千年很少能在年平均气温逾 28°C 或暖季最高气温逾 33°C 的地区茁壮成长，而全球暖化的速度比水稻能适应的速度快 5000 倍。根据发表在《Communications Earth & Environment》期刊上的一项研究，预计到 2070 年印度和东南亚等传统水稻种植区的温度将超过 40 摄氏度，在这种温度下现有的亚洲水稻无法正常生长，逾十亿人的粮食安全面临威胁。研究人员指出，现有的水稻未适应气温升高，而是其种植从较暖的地区扩大到了较凉的地区，种植面积增加了，但承受气候变化的能力并没有增长。以中国为例，水稻种植从华中扩大到华北，同时加大了炎热地区的灌溉力度，因此大米的产量才略有增长。

A vulnerability, which was classified as problematic, has been found in Emarket-design YouTube Showcase Plugin up to 3.5.1 on WordPress. This issue affects some unknown processing. This manipulation causes cross site scripting. This vulnerability is tracked as CVE-2025-15636. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability classified as problematic was found in Zaytech Smart Online Order for Clover Plugin up to 1.6.0 on WordPress. This vulnerability affects unknown code. The manipulation results in cross-site request forgery. This vulnerability is identified as CVE-2025-15635. The attack can be executed remotely. There is not any exploit available.

A vulnerability classified as problematic has been found in HashThemes Mini Ajax Cart for WooCommerce Plugin up to 1.3.4 on WordPress. This affects an unknown part. The manipulation leads to cross site scripting. This vulnerability is referenced as CVE-2026-6370. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability described as critical has been identified in Cisco ThousandEyes Enterprise Agent up to 5.1.2. Affected by this issue is some unknown functionality of the component CLI. Executing a manipulation can lead to link following. The identification of this vulnerability is CVE-2026-20161. The attack can only be executed locally. There is no exploit available. Upgrading the affected component is recommended.