2025

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with administrative pri

A vulnerability in the access control list (ACL) programming of Cisco IOS XE Software for Cisco Catalyst 9500X and 9600X

A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with level-15 privileges or an una

Multiple vulnerabilities in Cisco IOS XE Software of could allow an authenticated, local attacker with level-15 privileg

A vulnerability in the Day One setup process of Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers for

A vulnerability in the Web Authentication feature of Cisco IOS XE Software could allow an unauthenticated, remote attack

A vulnerability in the CLI of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker

A vulnerability in the IPv6 Router Advertisement (RA) packet processing of Cisco Access Point Software could allow an un

A vulnerability in the Device Analytics action frame processing of Cisco Wireless Access Point (AP) Software could allow

A vulnerability in the access control list (ACL) processing of IPv4 packets of Cisco SD-WAN vEdge Software could allow a

Information disclosure when Video engine escape input data is less than expected minimum size.

Information disclosure while running video usecase having rogue firmware.

information disclosure while invoking calibration data from user space to update firmware size.

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvJPEG where a local authenticated user may cause a GP

NVIDIA nvJPEG contains a vulnerability in jpeg encoding where a user may cause an out-of-bounds read by providing a mali

NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially

The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in all vers

nncp before 8.12.0 allows path traversal (for reading or writing) during freqing and file saving via a crafted path in p

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix memory leak in ath12k_service_rea

Improper permission check in ZooKeeper AdminServer lets authorized clients to run snapshot and restore command with insu

Observable Timing Discrepancy vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive Web allows Cross-Doma

The web application allows an unauthenticated remote attacker to learn information about existing user accounts with the

Deserialization of Untrusted Data vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 2.0

A Insufficient Session Expiration vulnerability in the Liferay Portal 7.4.3.121 through 7.3.3.131, and Liferay DXP 2024.

A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.112, and Liferay DXP 2024

An improper resource shutdown or release vulnerability has been identified in the Click Plus C2-03CPU-2 device running f

An improper resource shutdown or release vulnerability has been identified in the Click Plus C2-03CPU-2 device running f

An authorization bypass vulnerability has been discovered in the Click Plus C2-03CPU2 device firmware version 3.60. Thro

The use of a hard-coded cryptographic key was discovered in firmware version 3.60 of the Click Plus PLC. The vulnerabili

Cleartext storage of sensitive information was discovered in Click Programming Software version v3.60. The vulnerability

Improper input validation in Satellite Management Controller (SMC) may allow an attacker with privileges to manipulate R

Improper input validation in Satellite Management Controller (SMC) may allow an attacker with privileges to use certain

In Shenzhen C-Data Technology Co. FD602GW-DX-R410 (firmware v2.2.14), the web management interface contains an authentic

OS Command injection vulnerability in D-Link C1 2020-02-21. The sub_47F028 function in jhttpd contains a command injecti

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WordPress allows S

Indian Bank IndSMART Android App 3.8.1 is vulnerable to Missing SSL Certificate Validation in NuWebViewActivity.

Sunshine is a self-hosted game stream host for Moonlight. Prior to version 2025.923.33222, the Windows service SunshineS

An issue in PocketVJ CP PocketVJ-CP-v3 pvj 3.9.1 allows remote attackers to execute arbitrary code via the submit_size.p

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to v

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to v

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to v

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to v

Insertion of Sensitive Information Into Sent Data vulnerability in WordPress allows Retrieve Embedded Sensitive Data. Th

OS Command injection vulnerability in Tenda AC9 1.0 was discovered to contain a command injection vulnerability via the

SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the execSqlFile fu

SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the execSqlFile fu

A reflected cross-site scripting (XSS) vulnerability exists in the account registration flow of WSO2 Identity Server due

Cross-site scripting (XSS) vulnerability in YzmCMS thru 7.3 via the referer header in the register page.

A cross-tenant authentication vulnerability exists in multiple WSO2 products due to improper cryptographic design in Ada

A content spoofing vulnerability exists in multiple WSO2 products due to improper error message handling. Under certain