2025

In the Linux kernel, the following vulnerability has been resolved: lib/crypto: arm/poly1305: Fix register corruption i

In the Linux kernel, the following vulnerability has been resolved: btrfs: abort transaction on unexpected eb generatio

A security vulnerability has been detected in Campcodes Computer Sales and Inventory System 1.0. The affected element is

A weakness has been identified in Campcodes Computer Sales and Inventory System 1.0. Impacted is an unknown function of

The Chaos Controller Manager in Chaos Mesh exposes a GraphQL debugging server without authentication to the entire Kuber

A security flaw has been discovered in Campcodes Online Job Finder System 1.0. This issue affects some unknown processin

A vulnerability was identified in Tenda AC9 and AC15 15.03.05.14/15.03.05.18. This vulnerability affects the function fo

Mattermost versions 10.10.x <= 10.10.1, 10.5.x <= 10.5.9, 10.9.x <= 10.9.4 fail to validate the redirect_to parameter, a

A weakness has been identified in Campcodes Computer Sales and Inventory System 1.0. The impacted element is an unknown

A security flaw has been discovered in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unk

A security flaw has been discovered in itsourcecode Online Laundry Management System 1.0. This affects an unknown functi

A vulnerability was identified in 1000projects Online Student Project Report Submission and Evaluation System 1.0. The i

A vulnerability was determined in 1000projects Online Student Project Report Submission and Evaluation System 1.0. The a

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is

A security flaw has been discovered in Campcodes Grocery Sales and Inventory System 1.0. Affected is an unknown function

A vulnerability was identified in Campcodes Grocery Sales and Inventory System 1.0. This impacts an unknown function of

A vulnerability was determined in Campcodes Grocery Sales and Inventory System 1.0. This affects an unknown function of

A vulnerability was found in Campcodes Grocery Sales and Inventory System 1.0. The impacted element is an unknown functi

A vulnerability has been found in Campcodes Grocery Sales and Inventory System 1.0. The affected element is an unknown f

A vulnerability was determined in itsourcecode Baptism Information Management System 1.0. Affected is an unknown functio

A vulnerability was found in itsourcecode Baptism Information Management System 1.0. This impacts an unknown function of

A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown function of t

A flaw has been found in PHPGurukul Beauty Parlour Management System 1.1. The impacted element is an unknown function of

A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. Affected by this issue is some un

In One Identity OneLogin before 2025.3.0, a request returns the OIDC client secret with GET Apps API v2 (even though thi

A vulnerability has been found in Mercury KM08-708H GiGA WiFi Wave2 1.1. Affected by this issue is the function sub_450B

A security flaw has been discovered in Shenzhen Sixun Business Management System 7/11. This affects an unknown part of t

A security flaw has been discovered in eCharge Hardy Barth Salia PLCC up to 2.3.81. This issue affects some unknown proc

A vulnerability was detected in Wavlink WL-WN578W2 221110. This impacts the function sub_404DBC of the file /cgi-bin/wir

A security vulnerability has been detected in Wavlink WL-WN578W2 221110. This affects the function sub_404850 of the fil

The The Hack Repair Guy's Plugin Archiver plugin for WordPress is vulnerable to arbitrary file deletion due to insuffici

A stack overflow in the FTP service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to cause a Denial of

An issue in Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to arbitrarily overwrite files via supplying a

Incorrect access control in the web service of Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to download

Liferay Portal 7.4.0 through 7.4.3.101, and Liferay DXP 2023.Q3.0 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA

A vulnerability was determined in Wavlink WL-WN578W2 221110. This affects the function sub_401C5C of the file firewall.c

A vulnerability was found in Wavlink WL-WN578W2 221110. The impacted element is the function sub_409184 of the file /wiz

OpenSynergy BlueSDK (aka Blue SDK) through 6.x mishandles a function call. The specific flaw exists within the BlueSDK B

An issue in TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh-V2.0.0 allows a remote attacker to execute arbitrary code vi

An issue in H3C Magic M Device M2V100R006 allows a remote attacker to execute arbitrary code via the default password

An issue in H3C Device R365V300R004 allows a remote attacker to execute arbitrary code via the default password. NOTE: t

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix the setting of capabilities when automount

In the Linux kernel, the following vulnerability has been resolved: xfrm: Duplicate SPI Handling The issue originates

In the Linux kernel, the following vulnerability has been resolved: net: lapbether: ignore ops-locked netdevs Syzkalle

In the Linux kernel, the following vulnerability has been resolved: io_uring/memmap: cast nr_pages to size_t before shi

In the Linux kernel, the following vulnerability has been resolved: dm: Always split write BIOs to zoned device limits

A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, sp

A Zabbix adminitrator can inject arbitrary SQL during the autoremoval of hosts by inserting malicious SQL in the 'Visibl

Certain models of NVR developed by Digiever has an OS Command Injection vulnerability, allowing authenticated remote att

Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitra