2025

Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti Z

CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before

Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti Z

Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti Z

Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti Z

K7RKScan.sys 23.0.0.10, part of the K7 Security Anti-Malware suite, allows an admin-privileged user to send crafted IOCT

An issue in Open5GS v2.7.2 and before allows a remote attacker to cause a denial of service via a crafted Create Session

APTIOV contains vulnerabilities in the BIOS where a privileged user may cause “Write-what-where Condition” and “Exposure

An open database issue exists in the affected product and version. The security issue stems from an over permissive Redi

A denial-of-service security issue exists in the affected product and version. The security issue stems from the control

A security issue exists within FactoryTalk Optix MQTT broker due to the lack of URI sanitization. This flaw enables the

A server-side request forgery security issue exists within Rockwell Automation ThinManager® software due to the lack of

A security issue exists within FactoryTalk Activation Manager. An error in the implementation of cryptography within th

Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Apache HertzBeat .

XML Injection RCE by parse http sitemap xml response vulnerability in Apache HertzBeat. The attacker needs t

Missing authorization checks in the Backend Routing of TYPO3 CMS versions 9.0.0‑9.5.54, 10.0.0‑10.4.53, 11.0.0‑11.5.47,

An unauthenticated attacker can trick a local user into executing arbitrary commands by opening a deliberately manipulat

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC

The AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress plugin for WordP

A vulnerability was determined in D-Link DIR-823X up to 250416. Affected by this vulnerability is the function sub_41502

When a user logs in via SAP Business One native client, the SLD backend service fails to enforce proper encryption of ce

Due to missing input validation, an attacker with high privilege access to ABAP reports could delete the content of arbi

Due to missing input validation, an attacker with high privilege access to ABAP reports could delete the content of arbi

A vulnerability was detected in Tenda AC20 up to 16.03.08.12. The impacted element is the function strcpy of the file /g

A security vulnerability has been detected in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. The

A vulnerability was identified in SiempreCMS up to 1.3.6. This vulnerability affects unknown code of the file /docs/admi

A vulnerability was determined in SiempreCMS up to 1.3.6. This affects an unknown part of the file user_search_ajax.php.

A vulnerability was found in PHPGurukul Small CRM 4.0. Affected by this issue is some unknown functionality of the file

MONAI (Medical Open Network for AI) is an AI toolkit for health care imaging. In versions up to and including 1.5.0, the

MONAI (Medical Open Network for AI) is an AI toolkit for health care imaging. In versions up to and including 1.5.0, in

MONAI (Medical Open Network for AI) is an AI toolkit for health care imaging. The extractall function `zip_file.extracta

A security vulnerability has been detected in itsourcecode Student Information Management System 1.0. This affects an un

A weakness has been identified in itsourcecode Student Information Management System 1.0. The impacted element is an unk

WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was identified in WeGIA versions 3.4.1

WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was identified in WeGIA versions 3.4.1

A security flaw has been discovered in itsourcecode Student Information Management System 1.0. The affected element is a

A vulnerability was determined in Campcodes Online Loan Management System 1.0. This issue affects some unknown processin

Fides is an open-source privacy engineering platform. Prior to version 2.69.1, the OAuth client creation and update endp

Fides is an open-source privacy engineering platform. Prior to version 2.69.1, the Fides Webserver API's built-in IP-bas

A vulnerability was found in Campcodes Online Loan Management System 1.0. This vulnerability affects unknown code of the

Assertion failure in function ngap_build_downlink_nas_transport in file src/amf/ngap-build.c, the Access and Mobility Ma

An Insecure Direct Object Reference (IDOR) in Envasadora H2O Eireli - Soda Cristal v40.20.4 allows authenticated attacke

A security vulnerability has been detected in code-projects Online Event Judging System 1.0. Affected is an unknown func

The Doccure theme for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the 'do

WeiPHP v5.0 and before is vulnerable to SQL Injection via the SucaiController.class.php file and the cancelTemplatee

A weakness has been identified in code-projects Online Event Judging System 1.0. This impacts an unknown function of the

A security flaw has been discovered in code-projects Online Event Judging System 1.0. This affects an unknown function o

An arbitrary file upload vulnerability in the Chat Trigger component of N8N v1.95.3, v1.100.1, and v1.101.1 allows attac