【中文导读】weakness has been identified in UTT 存在内存破坏风险（高危风险）。具体受影响版本、触发条件和修复方案以 NVD/厂商公告为准。
【原始描述】A weakness has been identified in UTT 1200GW up to 3.0.0-170831. The affected element is an unknown function of the file /goform/formConfigDnsFilterGlobal. This manipulation of the argument GroupName causes buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
【中文导读】该 CVE 涉及反序列化（严重风险）。具体受影响产品、版本和修复方案以 NVD/厂商公告为准。
【原始描述】A deserialization vulnerability exists in h2oai/h2o-3 versions <= 3.46.0.8, allowing attackers to read arbitrary system files and execute arbitrary code. The vulnerability arises from improper handling of JDBC connection parameters, which can be exploited by bypassing regular expression checks and using double URL encoding. This issue impacts all users of the affected versions.
【中文导读】Sitecore Sitecore Experience Manager 存在跨站脚本风险（高危风险）。具体受影响版本、触发条件和修复方案以 NVD/厂商公告为准。
【原始描述】Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Cross-Site Scripting (XSS).This issue affects Sitecore Experience Manager (XM): from 9.2 through 10.4; Experience Platform (XP): from 9.2 through 10.4.