2025

BBOT's git_clone module could be abused to disclose a GitHub API key to an attacker controlled server with a malicious f

Insufficient escaping in the report scheduler within Checkmk <2.4.0p13, <2.3.0p38, <2.2.0p46 and 2.1.0 (EOL) allows auth

Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions <2.4.0p13, <2.3.0p38, <2.2.0p4

IBM Aspera 5.0.0 through 5.0.13.1 could disclose sensitive user information from the system to an authenticated user d

IBM Aspera Faspex 5.0.0 through 5.0.13.1 could allow a privileged user to cause a denial of service from improperly vali

IBM Aspera Faspex 5.0.0 through 5.0.13.1 uses a cross-domain policy file that includes domains that should not be truste

The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘page_title’ parameter in all versi

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 5.2 prior to 18.2.8, 18.3 prior to 18.3.4, an

The Slider Revolution plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missin

In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp: Fix incorrect retrival of acp_chip_

In the Linux kernel, the following vulnerability has been resolved: clk: sunxi-ng: mp: Fix dual-divider clock rate read

Transient DOS while processing IOCTL call for image encoding.

Information disclosure while processing batch command execution in Video driver.

Transient DOS while processing video packets received from video firmware.

Information disclosure may occur while processing the hypervisor log.

Memory corruption may occur while processing IOCTL call for DMM/WARPNCC CONFIG request.

A weakness has been identified in code-projects Online Complaint Site 1.0. Affected is an unknown function of the file /

A vulnerability was detected in Tenda AC7 15.03.06.44. This vulnerability affects unknown code of the file /goform/AdvSe

The WP Go Maps (formerly WP Google Maps) plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in all

A weakness has been identified in code-projects Online Complaint Site 1.0. Impacted is an unknown function of the file /

A security flaw has been discovered in code-projects Online Complaint Site 1.0. This issue affects some unknown processi

A vulnerability was identified in code-projects Online Complaint Site 1.0. This vulnerability affects unknown code of th

A vulnerability was found in code-projects Voting System 1.0. Affected by this issue is some unknown functionality of th

A flaw has been found in code-projects E-Commerce Website 1.0. Affected is an unknown function of the file /pages/suppli

A vulnerability was detected in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /page

A security vulnerability has been detected in code-projects Voting System 1.0. This affects an unknown function of the f

A vulnerability was found in wonderwhy-er DesktopCommanderMCP up to 0.2.13. The impacted element is the function Command

A vulnerability has been found in wonderwhy-er DesktopCommanderMCP up to 0.2.13. The affected element is the function ex

Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to Open

Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to Open

A logic error exists in the Falcon sensor for Windows that could allow an attacker, with the prior ability to execute co

A race condition exists in the Falcon sensor for Windows that could allow an attacker, with the prior ability to execute

A security vulnerability has been detected in wonderwhy-er DesktopCommanderMCP up to 0.2.13. This vulnerability affects

A security flaw has been discovered in SourceCodester Farm Management System 1.0. Affected by this issue is some unknown

A vulnerability was identified in SourceCodester Farm Management System 1.0. Affected by this vulnerability is an unknow

A flaw has been found in varunsardana004 Blood-Bank-And-Donation-Management-System up to dc9e0393d826fbc85fad9755b5bc12c

SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/profile.php vi

HAProxy Kubernetes Ingress Controller before 3.1.13, when the config-snippets feature flag is used, accepts config snipp

In Tenable Security Center versions prior to 6.7.0, an improper access control vulnerability exists where an authenticat

A fastjson deserialization vulnerability in uzy-ssm-mall v1.1.0 allows attackers to execute arbitrary code via supplying

Sourcecodester Link Status Checker 1.0 is vulnerable to a Cross-Site Scripting (XSS) in the Enter URLs to check input fi

Multiple cross-site scripting (XSS) vulnerabilities in the Notifications widget in Liferay Portal 7.4.3.102 through 7.4.

Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an authorization bypass through user-controlled key vulnerab

Cross Site Scripting in vaahcms v.2.3.1 allows a remote attacker to execute arbitrary code via upload method in the stor

An XML External Entity (XXE) vulnerability in the /mall/wxpay/pay component of uzy-ssm-mall v1.1.0 allows attackers to e

redragon-erp v1.0 was discovered to contain a Shiro deserialization vulnerability caused by the default Shiro key.

WukongCRM-9.0-JAVA was discovered to contain a fastjson deserialization vulnerability via the /OaExamine/setOaExamine in

Configuroweb Sistema Web de Inventario 1.0 is vulnerable to a Stored Cross-Site Scripting (XSS) due to the lack of input

Stored cross-site scripting (XSS) vulnerability in Forms in Liferay Portal 7.3.2 through 7.4.3.111, and Liferay DXP 2023

Stored cross-site scripting (XSS) vulnerability in diagram type products in Commerce in Liferay Portal 7.4.3.18 through