2025

A stack-based buffer overflow exists in the get_merge_ipaddr function of the httpd binary on Linksys E1200 v2 routers (F

A vulnerability in the web-based management interface of Cisco Catalyst Center Virtual Appliance could allow an unauthen

A vulnerability in the web-based management interface of Cisco Catalyst Center could allow an unauthenticated, remote at

A vulnerability in the REST API of Cisco Catalyst Center could allow an authenticated, remote attacker to execute arbitr

A vulnerability in Cisco Catalyst Center could allow an authenticated, remote attacker to execute operations that should

A vulnerability in Cisco Catalyst Center Virtual Appliance could allow an authenticated, remote attacker to elevate priv

A security vulnerability has been detected in cameasy Liketea 1.0.0. Impacted is the function list of the file laravel/a

A vulnerability exists in Keycloak's server distribution where enabling debug mode (--debug <port>) insecurely defaults

js-yaml is a JavaScript YAML parser and dumper. In js-yaml before 4.1.1 and 3.14.2, it's possible for an attacker to mod

ZITADEL is an open source identity management platform. Starting in version 2.50.0 and prior to versions 2.71.19, 3.4.4,

PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Starting in version 1.7.7 and prior

MaxKB is an open-source AI assistant for enterprise. In versions prior to 2.3.1, a user can get sensitive informations b

Astro is a web framework. In Astro versions 2.16.0 up to but excluding 5.15.5 which utilizeon-demand rendering, request

MaxKB is an open-source AI assistant for enterprise. In versions prior to 2.3.1, a user can access internal network serv

Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthent

An unauthenticated command injection vulnerability exists in the Start_EPI function of the httpd binary on Linksys E1200

A stack buffer overflow vulnerability exists in the ToToLink LR1200GB (V9.1.0u.6619_B20230130) and NR1800X (V9.1.0u.6681

An unauthenticated command injection vulnerability exists in the ToToLink LR1200GB Router firmware V9.1.0u.6619_B2023013

A local stack-based buffer overflow vulnerability exists in the infostat.cgi and cstecgi.cgi binaries of ToToLink router

A stack buffer overflow exists in the ToToLink A720R Router firmware V4.1.5cu.614_B20230630 within the sysconf binary (s

A stack buffer overflow vulnerability exists in the ToToLink LR1200GB (V9.1.0u.6619_B20230130) and NR1800X (V9.1.0u.6681

A command injection vulnerability exists in the ToToLink A720R Router firmware V4.1.5cu.614_B20230630 within the sysconf

A command injection vulnerability exists in the ToToLink A720R Router firmware V4.1.5cu.614_B20230630 within the cloudup

Lichess lila before commit 11b4c0fb00f0ffd823246f839627005459c8f05c (2025-06-02) contains a Server-Side Request Forgery

A vulnerability has been found in mruby up to 3.4.0. This vulnerability affects the function sort_cmp of the file src/ar

Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an unauthenticated user to

Improper verification of cryptographic signature in the installer for Zoom Workplace VDI Client for Windows may allow an

External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure

External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user

Improper removal of sensitive information in certain Zoom Clients before version 6.5.10 may allow an unauthenticated use

Cross-site scripting in Zoom Workplace for Windows before version 6.5.10 may allow an unauthenticated user to impact int

Improper certificate validation in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of inf

Symlink following in the installer for the Zoom Workplace VDI Plugin macOS Universal installer before version 6.3.14, 6.

A flaw has been found in Fabian Ros/SourceCodester Simple E-Banking System 1.0. This affects an unknown part. This manip

A vulnerability was detected in macrozheng mall-swarm up to 1.0.3. Affected by this issue is the function paySuccess of

A security vulnerability has been detected in macrozheng mall-swarm and mall up to 1.0.3. Affected by this vulnerability

Insecure Direct Object Reference (IDOR) vulnerability in DeporSite of T-INNOVA. This vulnerability allows an attacker to

A weakness has been identified in macrozheng mall-swarm and mall up to 1.0.3. Affected is the function cancelUserOrder o

A security flaw has been discovered in macrozheng mall-swarm and mall up to 1.0.3. This impacts the function detail of t

A vulnerability was identified in macrozheng mall-swarm up to 1.0.3. This affects the function updateAttr of the file /c

Cross-site Scripting (XSS) vulnerability reflected in xCally's Omnichannel v3.30.1. This vulnerability allowsan attacker

Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network

Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against

pgAdmin <= 9.9  is affected by a vulnerability in the LDAP authentication mechanism allows bypassing TLS certificate ver

pgAdmin <= 9.9  is affected by an LDAP injection vulnerability in the LDAP authentication flow that allows an attacker t

pgAdmin 4 versions up to 9.9 are affected by a command injection vulnerability on Windows systems. This issue is caused

pgAdmin versions up to 9.9 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in serve

The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unauthorized modification

Supermicro BMC Insyde SMASH shell program has a stacked-based overflow vulnerability

Missing Authorization vulnerability in jetmonsters JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configure