2025

Improper Encoding or Escaping of Output vulnerability in Hallo Welt! GmbH BlueSpice (Extension:BlueSpiceAvatars) allows

Improper Encoding or Escaping of Output vulnerability in Hallo Welt! GmbH BlueSpice (Extension:AtMentions) allows Cross-

A security flaw has been discovered in APEUni PTE Exam Practice App up to 10.8.0 on Android. The impacted element is an

A vulnerability has been found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 20250831. This vulnerability affects unknown co

A flaw has been found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 20250831. This affects an unknown part of the file /inde

A vulnerability was detected in Four-Faith Water Conservancy Informatization Platform 1.0. Affected by this issue is som

A security vulnerability has been detected in Four-Faith Water Conservancy Informatization Platform 1.0. Affected by thi

A weakness has been identified in JeecgBoot up to 3.8.2. Affected is an unknown function of the file /message/sysMessage

Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series Q03

Tronclass developed by WisdomGarden has an Insecure Direct object Reference vulnerability, allowing remote attackers wit

Grafana is an open-source platform for monitoring and observability. Grafana-Zabbix is a plugin for Grafana allowing to

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Pusula Communication Information Internet Industry

The function responsible for handling BLE connection responses does not verify whether a response is expected—that is, w

The Download Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘user_ids’ parameter i

The Kubio AI Page Builder plugin for WordPress is vulnerable to unauthorized plugin installation due to a missing capabi

In the @digitalocean/do-markdownit package through 1.16.1 (in npm), the callout and fence_environment plugins perform .i

SMSEagle before 6.11 allows reflected XSS via a username or contact phone number.

In Internet2 Grouper 5.17.1 before 5.20.5, group admins who are not Grouper sysadmins can configure loader jobs.

Snipe-IT before 8.1.18 allows unsafe deserialization.

Snipe-IT before 8.1.18 allows XSS.

OpenGrok 1.14.1 has a reflected Cross-Site Scripting (XSS) issue when producing the cross reference page. This happens t

A vulnerability was identified in D-Link DIR-645 105B01. This issue affects the function soapcgi_main of the file /soap.

If the PATH environment variable contains paths which are executables (rather than just directories), passing certain st

A crafted system call argument can cause memory corruption.

IBM Lakehouse (watsonx.data 2.2) could allow an authenticated user to obtain sensitive server component version informat

IBM Lakehouse (watsonx.data 2.2) could allow an authenticated privileged user to execute arbitrary commands on the syste

IBM Lakehouse (watsonx.data 2.2) is vulnerable to stored cross-site scripting. This vulnerability allows a privileged us

A weakness has been identified in fuyang_lipengjun platform 1.0. Affected is the function BrandController of the file /b

A security flaw has been discovered in fuyang_lipengjun platform 1.0. This impacts the function AttributeController of t

A vulnerability was identified in fuyang_lipengjun platform 1.0. This affects the function AttributeCategoryController o

In the Linux kernel, the following vulnerability has been resolved: f2fs: don't reset unchangable mount option in f2fs_

In the Linux kernel, the following vulnerability has been resolved: drm/ttm: fix bulk_move corruption when adding a ent

In the Linux kernel, the following vulnerability has been resolved: mfd: arizona: Use pm_runtime_resume_and_get() to pr

In the Linux kernel, the following vulnerability has been resolved: ice: Block switchdev mode when ADQ is active and vi

In the Linux kernel, the following vulnerability has been resolved: bpf: cpumap: Fix memory leak in cpu_map_update_elem

In the Linux kernel, the following vulnerability has been resolved: net: skb_partial_csum_set() fix against transport h

In the Linux kernel, the following vulnerability has been resolved: x86/MCE: Always save CS register on AMD Zen IF Pois

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Handle cameras with invalid descri

In the Linux kernel, the following vulnerability has been resolved: scsi: snic: Fix possible memory leak if device_add(

In the Linux kernel, the following vulnerability has been resolved: cassini: Fix a memory leak in the error handling pa

In the Linux kernel, the following vulnerability has been resolved: remoteproc: imx_dsp_rproc: Add custom memory copy i

In the Linux kernel, the following vulnerability has been resolved: net: add vlan_get_protocol_and_depth() helper Befo

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: dma: fix memory leak running mt76_dma_t

In the Linux kernel, the following vulnerability has been resolved: powercap: arm_scmi: Remove recursion while parsing

In the Linux kernel, the following vulnerability has been resolved: media: platform: mediatek: vpu: fix NULL ptr derefe

In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: fix of_iomap memory leak Smatch rep

In the Linux kernel, the following vulnerability has been resolved: objtool: Fix memory leak in create_static_call_sect

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fw: fix memory leak in debugfs Fix

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Reinit blkg_iostat_set after clearing i

In the Linux kernel, the following vulnerability has been resolved: rcu: Protect rcu_print_task_exp_stall() ->exp_tasks