2025

Cross-Site Request Forgery (CSRF) vulnerability in HCL Technologies Ltd. Unica 12.0.0.

Keras version 3.11.3 is affected by a path traversal vulnerability in the keras.utils.get_file() function when extractin

Netskope was notified about a potential gap in its agent (NS Client) on Windows systems. If this gap is successfully ex

Stack-based Buffer Overflow vulnerability in ABB Terra AC wallbox.This issue affects Terra AC wallbox: through 1.8.33.

WebITR developed by Uniong has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit

WebITR developed by Uniong has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrar

WebITR developed by Uniong has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrar

WebITR developed by Uniong has an Authentication Bypass vulnerability, allowing authenticated remote attackers to log in

app/Model/EventReport.php in MISP before 2.5.27 allows path traversal in view picture for a site-admin.

UsersController::edit in Cerebrate before 1.30 allows an authenticated non-privileged user to escalate their privileges

app/Controller/EventsController.php in MISP before 2.5.24 has invalid logic in checking for uploaded file validity, rela

In libexpat through 2.7.3, a crafted file with an approximate size of 2 MiB can lead to dozens of seconds of processing

Mustang before 2.16.3 allows exfiltrating files via XXE attacks.

Peppol-py before 1.1.1 allows XXE attacks because of the Saxon configuration. When validating XML-based invoices, the XM

Kivitendo before 3.9.2 allows XXE injection. By uploading an electronic invoice in the ZUGFeRD format, it is possible to

Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability ma

UAF vulnerability in the USB driver module. Impact: Successful exploitation of this vulnerability will affect availabili

Vulnerability of improper criterion security check in the call module. Impact: Successful exploitation of this vulnerabi

Identity authentication bypass vulnerability in the Gallery app. Impact: Successful exploitation of this vulnerability m

Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability ma

Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affec

The Nextend Social Login and Register plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions u

Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability

Permission control vulnerability in the memory management module. Impact: Successful exploitation of this vulnerability

Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may a

Permission control vulnerability in the Notepad module. Impact: Successful exploitation of this vulnerability may affect

DoS vulnerability in the video-related system service module. Impact: Successful exploitation of this vulnerability may

Permission control vulnerability in the Wi-Fi module. Impact: Successful exploitation of this vulnerability may affect s

Vulnerability of accessing invalid memory in the component driver module. Impact: Successful exploitation of this vulner

Permission control vulnerability in the App Lock module. Impact: Successful exploitation of this vulnerability may affec

Permission control vulnerability in the distributed component. Impact: Successful exploitation of this vulnerability may

Permission control vulnerability in the startup recovery module. Impact: Successful exploitation of this vulnerability w

UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may af

UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may af

Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect s

An issue was discovered in Logpoint before 7.7.0. Sensitive information is exposed in System Processes for an extended p

An issue was discovered in Logpoint before 7.7.0. An improperly configured access control policy exposes sensitive Logpo

An issue was discovered in Logpoint before 7.7.0. Insufficient input validation and a lack of output escaping in multipl

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to to verify that t

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to sanitize team em

Exposure of email service credentials to users without administrative rights in Devolutions Server.This issue affects De

Exposure of credentials in unintended requests in Devolutions Server.This issue affects Server: through 2025.2.20, throu

SQL Injection vulnerability in last usage logs in Devolutions Server.This issue affects Devolutions Server: through 2025

Mattermost versions 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12, 11.0.x <= 11.0.3 fail to properly validat

Firmware in SDMC NE6037 routers prior to version 7.1.12.2.44 has a network diagnostics tool vulnerable to a shell comman

The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uplo

The application contains an insecure 'redirectToUrl' mechanism that incorrectly processes the value of the 'redirectUrlP

The Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager plugin for WordPress is vul

In Apache CloudStack, a gap in access control checks affected the APIs - createNetworkACL - listNetworkACLs - listResour

In Apache CloudStack improper control of generation of code ('Code Injection') vulnerability is found in the following