2025

A vulnerability was identified in Selleo Mentingo 2025.08.27. This issue affects some unknown processing of the file /ap

A security vulnerability has been detected in Portabilis i-Educar up to 2.10. The affected element is an unknown functio

A weakness has been identified in Portabilis i-Educar up to 2.10. Impacted is an unknown function of the file /intranet/

A vulnerability was identified in MiczFlor RPi-Jukebox-RFID up to 2.8.0. This vulnerability affects unknown code of the

A vulnerability was determined in MiczFlor RPi-Jukebox-RFID up to 2.8.0. This affects an unknown part of the file /htdoc

A vulnerability was found in MiczFlor RPi-Jukebox-RFID up to 2.8.0. Affected by this issue is some unknown functionality

A vulnerability has been found in MiczFlor RPi-Jukebox-RFID up to 2.8.0. Affected by this vulnerability is an unknown fu

A flaw has been found in MiczFlor RPi-Jukebox-RFID up to 2.8.0. Affected is an unknown function of the file /htdocs/inc.

A vulnerability was determined in WhatCD Gazelle up to 63b337026d49b5cf63ce4be20fdabdc880112fa3. The affected element is

A vulnerability was found in cdevroe unmark up to 1.9.3. Impacted is an unknown function of the file application/views/m

A vulnerability has been found in cdevroe unmark up to 1.9.3. This issue affects some unknown processing of the file /ap

A vulnerability was detected in iteachyou Dreamer CMS up to 4.1.3.2. This issue affects some unknown processing of the f

Due to a bug in Zabbix API, the hostprototype.get method lists all host prototypes to users that do not have any user gr

The jQuery Colorbox WordPress plugin through 4.6.3 uses the colorbox library, which does not sanitize title attributes o

A vulnerability has been found in roncoo roncoo-pay up to 9428382af21cd5568319eae7429b7e1d0332ff40. The affected element

A vulnerability was identified in erjinzhi 10OA 1.0. Affected by this vulnerability is an unknown functionality of the f

An issue was discovered in Subrion CMS 4.2.1, allowing authenticated adminitrators or moderators with access to the buil

A vulnerability was determined in Ascensio System SIA OnlyOffice up to 12.7.0. Impacted is an unknown function of the fi

A vulnerability was found in Ascensio System SIA OnlyOffice up to 12.7.0. This issue affects some unknown processing of

A vulnerability has been found in openDCIM 23.04. This vulnerability affects unknown code of the file /scripts/uploadifi

A flaw has been found in SEAT Queue Ticket Kiosk up to 20250827. This affects an unknown part of the component Java RMI

A weakness has been identified in lokibhardwaj PHP-Code-For-Unlimited-File-Upload up to 124fe96324915490c81eaf7db3234b0b

In version 0.7.8 of danny-avila/librechat, improper authorization controls in the conversation sharing feature allow una

A flaw has been found in Scada-LTS up to 2.7.8.1. This issue affects some unknown processing of the file /reports.shtm o

A vulnerability was detected in Scada-LTS up to 2.7.8.1. This vulnerability affects unknown code of the file /data_point

A vulnerability was detected in GrandNode up to 2.3.0. The impacted element is an unknown function of the file /checkout

Exposure of Sensitive Information to an Unauthorized Actor (CWE-200) in the diagnostic dump component in AxxonSoft Axxon

A flaw was found in libssh's handling of key exchange (KEX) processes when a client repeatedly sends incorrect KEX guess

An uncaught exception in the Bookmark Toolbar of TYPO3 CMS versions 11.0.0–11.5.47, 12.0.0–12.4.36, and 13.0.0–13.4.17 l

A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions). The affected device exposes ce

A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions). The affected device may be sus

The AI ChatBot for WordPress WordPress plugin before 7.1.0 does not sanitise and escape some of its settings, which cou

The Compress & Upload WordPress plugin before 1.0.5 does not properly validate uploaded files, allowing high privilege u

SAP NetWeaver AS Java application uses Adobe Document Service, installed with a vulnerable version of OpenSSL.Successful

Due to missing authorization checks, SAP HCM My Timesheet Fiori 2.0 application allows an authenticated attacker with in

Due to missing authorization checks, SAP HCM My Timesheet Fiori 2.0 application allows an authenticated attacker with in

A weakness has been identified in SourceCodester Simple To-Do List System 1.0. Impacted is an unknown function of the fi

dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction.

A weakness has been identified in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functiona

An issue was discoverd in file controllers/admin/AdminLoginController.php in PrestaShop before 8.2.1 allowing attackers

A vulnerability was detected in SourceCodester Time Tracker 1.0. The affected element is an unknown function of the file

RICOH Streamline NX versions 3.5.1 to 24R3 are vulnerable to tampering with operation history. If an attacker can perfor

A vulnerability has been found in running-elephant Datart up to 1.0.0-rc3. Affected by this issue is the function getTok

A security flaw has been discovered in SourceCodester Online Polling System 1.0. The impacted element is an unknown func

A vulnerability was identified in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the fil

Improper removal of sensitive information before storage or transfer in AMD Crash Defender could allow an attacker to ob

Improper initialization of CPU cache memory could allow a privileged attacker with hypervisor access to overwrite SEV-SN

An integer overflow in the SMU could allow a privileged attacker to potentially write memory beyond the end of the reser

An out-of-bounds read in the ASP could allow a privileged attacker with access to a malicious bootloader to potentially

Use of an uninitialized variable in the ASP could allow an attacker to access leftover data from a trusted execution env