2025

IBM Transformation Extender Advanced 10.0.1 stores potentially sensitive information in log files that could be read by

The EKEN video doorbell T6 BT60PLUS_MAIN_V1.0_GC1084_20230531 periodically sends debug logs to the EKEN cloud servers wi

NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an User/Attacker may cause

Rapid7 AppSpider Pro versions below 7.5.021 suffer from a project name validation vulnerability, whereby an attacker can

Medical Informatics Engineering Enterprise Health allows authenticated users to upload arbitrary files. The impact of th

Medical Informatics Engineering Enterprise Health includes the user's current session token in debug output. An attacker

The openml/openml.org web application version v2.0.20241110 uses incremental user IDs and insufficient email ownership v

A vulnerability has been found in Gstarsoft GstarCAD up to 9.4.0. This affects an unknown function of the component File

A security vulnerability has been detected in Cudy TR1200 1.16.3-20230804-164635. Impacted is an unknown function of the

A vulnerability has been found in code-projects Project Monitoring System 1.0. Affected is an unknown function of the fi

A vulnerability was detected in GNU Binutils 2.45. This issue affects the function dump_dwarf_section of the file binuti

A vulnerability was determined in westboy CicadasCMS 1.0. Affected by this issue is some unknown functionality of the fi

A vulnerability was found in westboy CicadasCMS 1.0. Affected by this vulnerability is an unknown functionality of the f

A vulnerability has been found in Projectworlds Visitor Management System 1.0. Affected is an unknown function of the fi

IBM Lakehouse (watsonx.data 2.2) stores potentially sensitive information in log files that could be read by a local use

A vulnerability was identified in givanz Vvveb up to 1.0.7.2. Affected by this issue is some unknown functionality of th

IBM Cognos Controller 11.0.0 through 11.0.1, and IBM Controller 11.1.0 through 11.1.1 could allow an attacker to obtain

A vulnerability was determined in givanz Vvveb up to 1.0.7.2. Affected by this vulnerability is an unknown functionality

A vulnerability has been found in Total.js CMS up to 19.9.0. This impacts an unknown function of the component Files Men

A vulnerability was detected in OGRECave Ogre up to 14.4.1. The impacted element is the function Ogre::LogManager::strea

A vulnerability was identified in BehaviorTree up to 4.7.0. This vulnerability affects the function XMLParser::PImpl::lo

A vulnerability was found in BehaviorTree up to 4.7.0. Affected by this issue is the function JsonExporter::fromJson of

An issue has been discovered in GitLab CE/EE affecting all versions from 17.10 before 18.2.7, 18.3 before 18.3.3, and 18

An issue has been discovered in GitLab CE/EE affecting all versions from 17.4 before 18.2.7, 18.3 before 18.3.3, and 18.

An issue has been discovered in GitLab EE affecting all versions from 16.6 before 18.2.7, 18.3 before 18.3.3, and 18.4 b

An issue has been discovered in GitLab CE/EE affecting all versions from 18.1 before 18.2.7, 18.3 before 18.3.3, and 18.

A username enumeration vulnerability exists in multiple WSO2 products when Multi-Attribute Login is enabled. In this con

A vulnerability was determined in Open Babel up to 3.1.1. This affects the function PQSFormat::ReadMolecule of the file

The ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution plugin for WordPress is vulnerable

A vulnerability was found in Open Babel up to 3.1.1. The impacted element is the function CacaoFormat::SetHilderbrandt o

A vulnerability has been found in Open Babel up to 3.1.1. The affected element is the function ChemKinFormat::ReadReacti

A vulnerability was identified in JeecgBoot up to 3.8.2. Impacted is an unknown function of the file /sys/tenant/deleteB

A vulnerability was determined in JeecgBoot up to 3.8.2. This issue affects some unknown processing of the file /api/get

glib-networking's OpenSSL backend fails to properly check the return value of memory allocation routines. An out of memo

Rapid7 Appspider Pro versions below 7.5.021, suffer from a broken access control vulnerability in the application's conf

A vulnerability was found in Changsha Developer Technology iView Editor up to 1.1.1. This impacts an unknown function of

ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup. This

Dify is an open-source LLM app development platform. In version 1.8.1, a broken access control vulnerability on the /con

A vulnerability was detected in nuz007 smsboom up to 01b2f35bbbc23f3e0f60f38ca0e3d1b286f8d674. The affected element is a

A security vulnerability has been detected in nuz007 smsboom up to 01b2f35bbbc23f3e0f60f38ca0e3d1b286f8d674. Impacted is

A weakness has been identified in yi-ge get-header-ip up to 589b23d0eb0043c310a6a13ce4bbe2505d0d0b15. This issue affects

A security flaw has been discovered in MikeCen WeChat-Face-Recognition up to 6e3f72bf8547d80b59e330f1137e4aa505f492c1. T

A vulnerability was found in Total.js CMS 1.0.0. Affected by this vulnerability is the function layouts_save of the file

A security flaw has been discovered in Mangati NovoSGA up to 2.2.9. The impacted element is an unknown function of the f

NVIDIA CUDA Toolkit contains a vulnerability in cuobjdump, where an unprivileged user can cause a NULL pointer dereferen

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-b

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in cuobjdump where an attacker may cause a stack-based bu

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where a user may cause an out-of-bounds write

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where an attacker may cause a heap-based buff

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvJPEG where a local authenticated user may cause a di