2025

A vulnerability has been found in giantspatula SewKinect up to 7fd963ceb3385af3706af02b8a128a13399dffb1. This affects th

Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 accepts the default Thundercomm TurboX 6490 Firehos

Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability. A high privi

A security vulnerability has been detected in LazyAGI LazyLLM up to 0.6.1. Affected by this issue is the function lazyll

A weakness has been identified in Wavlink NU516U1. Affected by this vulnerability is the function sub_401B30 of the file

An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via accessing a non-existent endpoint/ca

Cross Site Scripting vulnerability in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via a crafted

A security flaw has been discovered in Wavlink NU516U1 M16U1_V240425. Affected is the function sub_4016F0 of the file /c

A vulnerability was identified in Wavlink NU516U1 M16U1_V240425. This impacts the function sub_403198 of the file /cgi-b

vulnerability-lookup 2.16.0 allows XSS in bundle.py, comment.py, and user.py, by a user on a vulnerability-lookup instan

A NULL pointer dereference in TOTOLINK N600R firmware v4.3.0cu.7866_B2022506 allows attackers to cause a Denial of Servi

An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via the DELETE endpoint

A vulnerability was determined in Wavlink NU516U1 M16U1_V240425. This affects the function sub_4030C0 of the file /cgi-b

A vulnerability was found in Wavlink NU516U1 M16U1_V240425. The impacted element is the function sub_402D1C of the file

A vulnerability has been found in Wavlink NU516U1 M16U1_V240425. The affected element is the function sub_401778 of the

A flaw has been found in Wavlink NU516U1 M16U1_V240425. Impacted is the function sub_403010 of the file /cgi-bin/wireles

All versions of Dingtian DT-R002 are vulnerable to an Insufficiently Protected Credentials vulnerability that could allo

glib-networking's OpenSSL backend fails to properly check the return value of a call to BIO_write(), resulting in an out

TensorFlow v2.18.0 was discovered to output random results when compiling Embedding, leading to unexpected behavior in t

pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-.long().

Dell Cloud Disaster Recovery, version(s) prior to 19.20, contain(s) an Improper Neutralization of Special Elements used

IBM Watson Studio 4.0 through 5.2.0 on Cloud Pak for Data is vulnerable to cross-site scripting. This vulnerability allo

Dell BSAFE Crypto-J generates an error message that includes sensitive information about its environment and associated

Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Softwar

A security flaw has been discovered in geyang ml-logger up to acf255bade5be6ad88d90735c8367b28cbe3a743. Affected by this

A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired

Monkeytype is a minimalistic and customizable typing test. In versions 25.36.0 and prior, improper handling of user inpu

PyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py even though it lacks full consistency wit

In PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of-bounds values of the "other" a

In PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent results.

In PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error.

In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect results.

Dell PowerScale OneFS, versions 9.5.0.0 through 9.11.0.0, contains an exposure of sensitive information to an unauthoriz

A vulnerability was determined in geyang ml-logger up to acf255bade5be6ad88d90735c8367b28cbe3a743. Affected is the funct

Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.130.1, the project's OIDC redirec

iMonitor EAM 9.6394 transmits communication between the EAM client agent and the EAM server, as well as between the EAM

A flaw has been found in Sistemas Pleno Gestão de Locação up to 2025.7.x. The impacted element is an unknown function of

Improper input validation in Retail Mode prior to version 5.59.4 allows self attackers to execute privileged commands on

parse is a package designed to parse JavaScript SDK. A Prototype Pollution vulnerability in the SingleInstanceStateContr

json-schema-editor-visual is a package that provides jsonschema editor. A Prototype Pollution vulnerability in the setDa

Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to version 0.48.0, Omni Wireguard SideroLi

Horilla is a free and open source Human Resource Management System (HRMS). Prior to version 1.4.0, improper sanitization

A prototype pollution vulnerability exists in the ts-fns package versions prior to 13.0.7, where insufficient validation

The node-cube package (prior to version 5.0.0) contains a vulnerability in its handling of prototype chain initializatio

Llama Stack prior to version v0.2.20 accepted unverified parameters in the resolve_ast_by_type function which could pote

Horilla is a free and open source Human Resource Management System (HRMS). Prior to version 1.4.0, the file upload flow

A vulnerability exists in the 'counterpart' library for Node.js and the browser due to insufficient sanitization of user

The Runtime components of messageformat package for Node.js before 3.0.2 contain a prototype pollution vulnerability. Du

A vulnerability exists in the 'min-document' package prior to version 2.19.0, stemming from improper handling of namespa

Horilla is a free and open source Human Resource Management System (HRMS). A stored cross-site scripting (XSS) vulnerabi