2025

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-b

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary where a user may cause an out-of-

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-b

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to v

An authentication bypass vulnerability exists in multiple WSO2 products when FIDO authentication is enabled. When a user

A vulnerability has been found in Coinomi up to 1.7.6. This issue affects some unknown processing. Such manipulation lea

The SureForms WordPress plugin before 1.9.1 does not sanitise and escape some parameters when outputing them in the pag

A security vulnerability has been detected in code-projects Simple Food Ordering System 1.0. Affected by this vulnerabil

A vulnerability was found in axboe fio up to 3.41. This affects the function str_buffer_pattern_cb of the file options.c

Authorization Bypass Through User-Controlled Key vulnerability in Alex Content Mask content-mask allows Exploiting Incor

Missing Authorization vulnerability in codepeople CP Multi View Event Calendar cp-multi-view-calendar allows Exploiting

A vulnerability has been found in Smartstore up to 6.2.0. The affected element is an unknown function of the file /check

A vulnerability was detected in LionCoders SalePro POS up to 5.5.0. This issue affects some unknown processing of the co

A vulnerability has been found in Harness 3.3.0. Affected is an unknown function of the file /api/v1/login of the compon

A security vulnerability has been detected in htmly up to 3.1.0. The impacted element is an unknown function of the file

Mattermost versions 10.5.x <= 10.5.8, 9.11.x <= 9.11.17 fail to properly validate access controls which allows any authe

PureVPN client applications on Linux through September 2025 mishandle firewalling. They flush the system's existing ipta

PureVPN client applications on Linux through September 2025 allow IPv6 traffic to leak outside the VPN tunnel upon netwo

A vulnerability has been found in youth-is-as-pale-as-poetry e-learning 1.0. Impacted is the function encryptSecret of t

A security flaw has been discovered in Tor up to 0.4.7.16/0.4.8.17. Impacted is an unknown function of the component Oni

In some circumstances, when DNSdist is configured to use the nghttp2 library to process incoming DNS over HTTPS queries,

A vulnerability has been found in wangchenyi1996 chat_forum up to 80bdb92f5b460d36cab36e530a2c618acef5afd2. This impacts

A security flaw has been discovered in itsourcecode Online Petshop Management System 1.0. The affected element is an unk

A vulnerability was identified in itsourcecode Online Petshop Management System 1.0. Impacted is an unknown function of

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the code in the s

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, DragonFly2 uses t

Nuxt is an open-source web development framework for Vue.js. Prior to 3.19.0 and 4.1.0, A client-side path traversal vul

A weakness has been identified in Portabilis i-Educar up to 2.10. This affects an unknown function of the file /intranet

A vulnerability was identified in Portabilis i-Educar up to 2.10. Impacted is an unknown function of the file /intranet/

In Alludo MindManager before 25.0.208 on Windows, attackers could potentially execute code as other local users on the s

psPAS PowerShell module does not explicitly enforce TLS 1.2 within the 'Get-PASSAMLResponse' function during the SAML au

There is an an information disclosure vulnerability in ZTE T5400. Due to improper configuration of the access control me

Click Studios Passwordstate before 9.9 Build 9972 has a potential authentication bypass for Passwordstate emergency acce

The ip (aka node-ip) package through 2.0.1 (in NPM) might allow SSRF because the IP address value 0 is improperly catego

The ip (aka node-ip) package through 2.0.1 (in NPM) might allow SSRF because the IP address value 017700000001 is improp

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.7 and iPadOS 18

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.7 and iPadOS 18

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26 and iPadOS 26,

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. An app may be abl

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia

An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Tahoe 26. An app may be

libocpp before 0.28.0 allows a denial of service (EVerest crash) because a secondary exception is thrown during error me

The OCPP implementation in libocpp before 0.26.2 allows a denial of service (EVerest crash) via JSON input larger than 2

feiskyer mcp-kubernetes-server through 0.1.11 allows OS command injection, even in read-only mode, via /mcp/kubectl beca

feiskyer mcp-kubernetes-server through 0.1.11 does not consider chained commands in the implementation of --disable-writ

Mattermost versions 10.5.x <= 10.5.9 fail to properly validate redirect URLs which allows attackers to redirect users to

A vulnerability was identified in IbuyuCMS up to 2.6.3. Impacted is an unknown function of the file /admin/article.php?a

A vulnerability was found in newbee-mall 1.0. Impacted is the function mallKaptcha of the file /common/mall/kaptcha. The

IBM QRadar SIEM 7.5 through 7.5 Update Pack 13 Independent Fix 01 could allow a local privileged user to perform unautho