2025

Weblate is a web based localization tool. In versions prior to 5.15.1, it was possible to read arbitrary files from the

Improper neutralization of input during web page generation ('cross-site scripting') in Office Out-of-Box Experience all

'.../...//' in Microsoft Purview allows an authorized attacker to execute code over a network.

rofl0r/proxychains-ng versions up to and including 4.17 and prior to commit cc005b7 contain a stack-based buffer overflo

merbanan/rtl_433 versions up to and including 25.02 and prior to commit 25e47f8 contain a stack-based buffer overflow vu

An insecure deserialization vulnerability exists in the rss-mp3.php script of the MiczFlor RPi-Jukebox-RFID project thro

An insecure deserialization vulnerability exists in the download.php script of the to3k Twittodon application through co

BullWall Server Intrusion Protection (SIP) services are initialized after login services during system startup. A local,

BullWall Server Intrusion Protection has a noticeable configuration-dependent delay before the MFA check for RDP connect

BullWall Ransomware Containment supports configurable file and directory exclusions such as '$RECYCLE.BIN' to balance mo

BullWall Ransomware Containment may not always detect an encrypted file. This issue affects a specific file inspection m

Due to a product misconfiguration in certain deployment types, it was possible from different pods in the same namespace

Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to delete arbitrary files.

Advantech WebAccess/SCADA  is vulnerable to unrestricted file upload, which may allow an attacker to remotely execute ar

A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcpiface:2.1.

File Thingie 2.5.7 contains an authenticated file upload vulnerability that allows remote attackers to upload malicious

Codigo Markdown Editor 1.0.1 contains a code execution vulnerability that allows attackers to run arbitrary system comma

Hubstaff 1.6.14 contains a DLL search order hijacking vulnerability that allows attackers to replace a missing system32

A denial of service vulnerability in Kentico Xperience allows attackers to launch DoS attacks via specially crafted requ

An information disclosure vulnerability in Kentico Xperience allows attackers to view sensitive stack trace details via

A cryptography vulnerability in Kentico Xperience allows attackers to potentially manipulate URL hash values through exi

A SQL injection vulnerability in Kentico Xperience allows authenticated editors to inject malicious SQL queries via onli

An access control bypass vulnerability in Kentico Xperience allows administrators to modify global administrator user pr

An unrestricted file upload vulnerability in Kentico Xperience allows authenticated users with 'Read data' permissions t

MyHoard is a daemon for creating, managing and restoring MySQL backups. Starting in version 1.0.1 and prior to version 1

A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcpiface:2.1.

A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcpiface:2.1.

A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcpiface:2.1.

A denial-of-service vulnerability exists in the omec-upf (upf-epc-pfcpiface) in version upf-epc-pfcpiface:2.1.3-dev. Whe

A denial-of-service vulnerability exists in the omec-project UPF (component upf-epc/pfcpiface) up to at least version up

The free5GC UPF suffers from a lack of bounds checking on the SEID when processing PFCP Session Deletion Requests. An un

An issue was discovered in function LocalNode.Sess in free5GC 4.1.0 allowing attackers to cause a denial of service or o

An issue was discovered in Open5GS 2.7.5-49-g465e90f, when processing a PFCP Session Establishment Request (type=50), th

Dify v1.9.1 is vulnerable to Insecure Permissions. An unauthenticated attacker can directly send HTTP GET requests to th

Improper authentication vulnerability in TP-Link WA850RE (httpd modules) allows unauthenticated attackers to download th

Command Injection vulnerability in TP-Link WA850RE (httpd modules) allows authenticated adjacent attacker to inject arbi

due to insufficient sanitazation in Vega’s `convert()` function when `safeMode` is enabled and the spec variable is an a

A vulnerability was detected in D-Link DIR-605 202WWB03. Affected by this issue is some unknown functionality of the com

Tina is a headless content management system. In tinacms prior to version 3.1.1, tinacms uses the gray-matter package in

Arduino IDE is an integrated development environment. Prior to version 2.3.7, Arduino IDE for macOS is installed with wo

A vulnerability was identified in Campcodes Supplier Management System 1.0. This affects an unknown function of the file

Use of Hard-coded Credentials vulnerability in Utarit Informatics Services Inc. SoliClub allows Authentication Abuse. T

There is a stack-based buffer overflow vulnerability in NI LabVIEW in LVResFile::FindRsrcListEntry() when parsing a corr

There is a use-after-free vulnerability in sentry!sentry_span_set_data() when parsing a corrupted VI file. This vulnera

There is an out of bounds read vulnerability in NI LabVIEW in LVResFile::FindRsrcListEntry() when parsing a corrupted VI

There is an out of bounds read vulnerability in NI LabVIEW in lvre!ExecPostedProcRecPost() when parsing a corrupted VI f

There is an out of bounds read vulnerability in NI LabVIEW in lvre!DataSizeTDR() when parsing a corrupted VI file. This

There is an out of bounds read vulnerability in NI LabVIEW in lvre!VisaWriteFromFile() when parsing a corrupted VI file.

There is an out of bounds read vulnerability in NI LabVIEW in LVResource::DetachResource() when parsing a corrupted VI f

There is an out of bounds read vulnerability in NI LabVIEW in LVResFile::RGetMemFileHandle() when parsing a corrupted VI