2025

Adacore Ada Web Server (AWS) before 25.2 is vulnerable to a denial-of-service (DoS) condition due to improper handling o

In phpgurukul Doctor Appointment Management System 1.0, an authenticated doctor user can inject arbitrary JavaScript cod

Incomplete validation of dunder attributes allows an attacker to escape from the Local Python execution environment sand

Inappropriate implementation in Extensions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to bypass c

A vulnerability was identified in 1000projects Beauty Parlour Management System 1.0. This affects an unknown function of

Tenda AC8 v16.03.34.06 is vulnerable to Buffer Overflow in the formWifiBasicSet function via the parameter security or s

A security vulnerability in HCL Compass can allow attacker to gain unauthorized database access.

Deserialization of Untrusted Data vulnerability in enituretechnology LTL Freight Quotes - TQL Edition ltl-freight-quotes

Deserialization of Untrusted Data vulnerability in enituretechnology LTL Freight Quotes – Daylight Edition ltl-freight-q

Deserialization of Untrusted Data vulnerability in enituretechnology LTL Freight Quotes – Day & Ross Edition ltl-freight

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFunnels Mail Min

phpgurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting (XSS) in admin/userprofile.php via the

phpgurukul Complaint Management System in PHP 2.0 is vulnerable to Cross Site Scripting (XSS) in admin/subcategory.php v

A SQL Injection vulnerability was found in phpgurukul Complaint Management System 2.0. The vulnerability is due to lack

phpgurukul Complaint Management System in PHP 2.0 is vulnerable to SQL Injection in user/reset-password.php via the mobi

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft LimonDesk allows Authentication Bypa

DeepSeek R1 through V3.1 allows XSS, as demonstrated by JavaScript execution in the context of the run-html-chat.deepsee

Origin Validation Error vulnerability in Akinsoft LimonDesk allows Forceful Browsing. This issue affects LimonDesk: fro

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Sitecore Sitecore Experience Manager (XM), S

Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) a

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: reject duplicate device on up

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft MyRezzta allows Authentication Bypas

Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can execute any shell script s

The mikecao/flight PHP framework in versions prior to v1.2 is vulnerable to Denial of Service (DoS) attacks due to eager

SSH dissector crash in Wireshark 4.4.0 to 4.4.8 allows denial of service

Improper input validation vulnerability in CertByte prior to SMR Apr-2023 Release 1 allows local attackers to launch pri

Access of Memory Location After End of Buffer vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows lo

Out-of-bounds Write vulnerability in libaudiosaplus_sec.so library prior to SMR Apr-2023 Release 1 allows local attacker

Out-of-bounds Write vulnerability in libaudiosaplus_sec.so library prior to SMR Apr-2023 Release 1 allows local attacker

Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. In versions 0.9

A security vulnerability has been detected in ScriptAndTools Real Estate Management System 1.0. The affected element is

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Versions 1.8.185 and earlier contain

Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. Version

A security flaw has been discovered in itsourcecode Student Information Management System 1.0. The affected element is a

A vulnerability was identified in itsourcecode Student Information Management System 1.0. Impacted is an unknown functio

In multiple functions of DevicePolicyManagerService.java, there is a possible way to install unauthorized applications i

In onLastAccessedStackLoaded of ActionHandler.java , there is a possible way to bypass storage restrictions across apps

In afterKeyEventLockedInterruptable of InputDispatcher.cpp, there is a possible use after free. This could lead to local

In setMediaButtonReceiver of multiple files, there is a possible way to launch arbitrary activities from background due

In handleKeyGestureEvent of PhoneWindowManager.java, there is a possible lock screen bypass due to a logic error in the

In canForward of IntentForwarderActivity.java, there is a possible bypass of the cross profile intent filter most common

In hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible way to grant permissions to an app on t

In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to grant notification access above t

In ParseTag of dng_ifd.cpp, there is a possible way to crash the image renderer due to a missing bounds check. This coul

In multiple locations, there is a possible way to mislead a user into approving an authentication prompt for one app whe

In multiple locations, there is a possible way to mislead the user into enabling malicious phone calls forwarding due to

In multiple locations, there is a possible confused deputy due to Intent Redirect. This could lead to local escalation o

In finishTransition of Transition.java, there is a possible way to bypass touch filtering restrictions due to a tapjacki