2025

Insecure Permissions vulnerability in PDQ Smart Deploy V.3.0.2040 allows a local attacker to execute arbtirary code via

An issue was discovered in Shopizer 3.2.7. The server's CORS implementation reflects the client-supplied Origin header v

An issue was discovered in the changePassword method in file /usr/share/php/openmediavault/system/user.inc in OpenMediaV

In the Linux kernel, the following vulnerability has been resolved: xfrm: state: initialize state_ptrs earlier in xfrm_

In the Linux kernel, the following vulnerability has been resolved: arm64/entry: Mask DAIF in cpu_switch_to(), call_on_

In the Linux kernel, the following vulnerability has been resolved: iio: fix potential out-of-bound write The buffer i

In the Linux kernel, the following vulnerability has been resolved: net: appletalk: Fix use-after-free in AARP proxy pr

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8365-dai-i2s: pass correct size t

In the Linux kernel, the following vulnerability has been resolved: platform/x86: alienware-wmi-wmax: Fix `dmi_system_i

In the Linux kernel, the following vulnerability has been resolved: gfs2: No more self recovery When a node withdraws

In the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: Do not complete commands twice if n

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: mcc: prevent shift wrapping in rtw89_c

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_st

In the Linux kernel, the following vulnerability has been resolved: proc: use the same treatment to check proc_lseek as

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid out-of-boundary access in devs.p

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Add missing lock in cfg80211_check_

In the Linux kernel, the following vulnerability has been resolved: bpf: Disable migration in nf_hook_run_bpf(). syzbo

In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_nfacct: don't assume acct name is nul

In the Linux kernel, the following vulnerability has been resolved: rv: Use strings in da monitors tracepoints Using D

In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix UAF of f2fs_inode_info in f2fs_

In the Linux kernel, the following vulnerability has been resolved: zloop: fix KASAN use-after-free of tag set When a

In the Linux kernel, the following vulnerability has been resolved: media: ti: j721e-csi2rx: fix list_del corruption I

QuantumNous new-api v.0.8.5.2 is vulnerable to Cross Site Scripting (XSS).

IBM QRadar SIEM 7.5 through 7.5.0 UP13 could allow an authenticated user to escalate their privileges via a misconfigure

In the Linux kernel, the following vulnerability has been resolved: vsock: Do not allow binding to VMADDR_PORT_ANY It

In the Linux kernel, the following vulnerability has been resolved: net/packet: fix a race in packet_set_ring() and pac

In the Linux kernel, the following vulnerability has been resolved: tls: handle data disappearing from under the TLS UL

In the Linux kernel, the following vulnerability has been resolved: tls: stop recv() if initial process_rx_list gave us

In MindManager Windows versions prior to 24.1.150, attackers could potentially write to unexpected directories in victim

WebITR developed by Uniong has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitr

The WP Talroo WordPress plugin through 2.4 does not sanitise and escape a parameter before outputting it back in the pag

hippo4j 1.0.0 to 1.5.0, uses a hard-coded secret key in its JWT (JSON Web Token) creation. This allows attackers with ac

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an

Untrusted pointer dereference in Windows MBT Transport driver allows an authorized attacker to elevate privileges locall

The vulnerability, if exploited, could allow an authenticated miscreant (with privileges to create or access publicatio

HTML injection vulnerability in the registration interface in Evolution Consulting Kft. HRmaster module v235 allows an a

Unauthorized users can access INFINITT PACS System Manager without proper authorization, which could lead to unauthoriz

Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains a Buffer Access with Incorrect Length Value vulnera

On N-central, it is possible for any authenticated user to read, write and modify syslog configuration across customers

Insecure permissions in Agent-Zero v0.8.* allow attackers to arbitrarily reset the system via unspecified vectors.

Aikaan IoT management platform v3.25.0325-5-g2e9c59796 sends a newly generated password to users in plaintext via email

An authentication bypass vulnerability in PandoraNext-TokensTool v0.6.8 and before. An attacker can exploit this vulnera

A vulnerability was identified in itsourcecode Apartment Management System 1.0. Affected by this issue is some unknown f

WeGIA is a Web manager for charitable institutions. Prior to 3.4.10, there is a SQL Injection vulnerability in the /html

A flaw has been found in PHPGurukul Online Course Registration 3.1. This affects an unknown function of the file /admin/

UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Before 0.2.1, the i

UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Before 0.2.1, UnoPi

A Reflected Cross Site Scripting (XSS) vulnerability was found in /index.php in FoxCMS v1.2.6. When a crafted script is

A security vulnerability has been detected in SourceCodester Online Bank Management System 1.0. The affected element is

A weakness has been identified in SourceCodester Online Bank Management System 1.0. Impacted is an unknown function of t