2025

Tilesheets MediaWiki Extension adds a table lookup parser function for an item and returns the requested image. A missin

js-toml is a TOML parser for JavaScript, fully compliant with the TOML 1.0.0 Spec. In versions below 1.0.2, a prototype

The glpi-screenshot-plugin allows users to take screenshots or screens recording directly from GLPI. In versions below 2

Cursor is a code editor built for programming with AI. Cursor allows writing in-workspace files with no user approval in

Cursor is a code editor built for programming with AI. Cursor allows writing in-workspace files with no user approval in

Trilium Notes is an open-source, cross-platform hierarchical note taking application with focus on building large person

An Improper Input Validation in EdgeMAX EdgeSwitch (Version 1.10.4 and earlier) could allow a Command Injection by a mal

CyberGhostVPNSetup.exe (Windows installer) is signed using the weak cryptographic hash algorithm SHA-1, which is vulnera

Paramount Macrium Reflect through 2025-06-26 allows local attackers to execute arbitrary code with administrator privile

Paramount Macrium Reflect through 2025-06-26 allows attackers to execute arbitrary code with administrator privileges vi

Dell Enterprise SONiC OS, version 4.5.0, contains a cryptographic key vulnerability in SSH. An unauthenticated remote at

Dell ECS versions prior to 3.8.1.5/ ObjectScale version 4.0.0.0, contain a Use of Hard-coded Cryptographic Key vulnerabi

Dell Avamar, versions prior to 19.10 SP1 with patch 338904, contains a Trusting HTTP Permission Methods on the Server-Si

A cross-site scripting (XSS) vulnerability in Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 allows attackers

RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route.

Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP hea

RUCKUS Network Director (RND) before 4.5 allows jailed users to obtain root access vis a weak, hardcoded password.

Dell Digital Delivery, versions prior to 5.6.1.0, contains an Insufficiently Protected Credentials vulnerability. A remo

Certain Draytek products are affected by Insecure Configuration. This affects AP903 v1.4.18 and AP912C v1.4.9 and AP918R

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.

A cross-site scripting (XSS) vulnerability in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows attackers to execute arb

Software installed and run as a non-privileged user may conduct ptrace system calls to issue writes to GPU origin read o

Dell Unity, version(s) 5.5 and prior, contain(s) an OS Command Injection Vulnerability in its svc_nas utility. An authen

Dell Unity, version(s) 5.5 and prior, contain(s) an OS Command Injection Vulnerability in its svc_nfssupport utility. An

Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('

An Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 throu

An unauthenticated remote attacker may trigger a NULL pointer dereference in the affected CODESYS Control runtime system

A low-privileged attacker can remotely access the PKI folder of the CODESYS Control runtime system and thus read and wri

In the Airoha Bluetooth audio SDK, there is a possible unauthorized access to the RACE protocol. This could lead to remo

In the Airoha Bluetooth audio SDK, there is a possible way to pair Bluetooth audio device without user consent. This cou

In the Airoha Bluetooth audio SDK, there is a possible permission bypass that allows access critical data of RACE protoc

A vulnerability, which was classified as critical, has been found in code-projects Online Medicine Guide 1.0. Affected b

A vulnerability classified as critical was found in code-projects Online Medicine Guide 1.0. Affected by this vulnerabil

A vulnerability was found in code-projects Online Medicine Guide 1.0. It has been declared as critical. This vulnerabili

A security vulnerability has been detected in code-projects Online Medicine Guide 1.0. This vulnerability affects unknow

A weakness has been identified in code-projects Online Medicine Guide 1.0. This affects an unknown part of the file /cus

A vulnerability has been found in projectworlds Online Admission System 1.0 and classified as critical. Affected by this

A vulnerability, which was classified as critical, was found in code-projects Intern Membership Management System 1.0. A

In iperf before 3.19.1, net.c has a buffer overflow when --skip-rx-copy is used (for MSG_TRUNC in recv).

A vulnerability, which was classified as critical, has been found in code-projects Intern Membership Management System 1

OpenNebula Community Edition (CE) before 7.0.0 and Enterprise Edition (EE) before 6.10.3 have a critical FireEdge race c

A vulnerability classified as critical was found in code-projects Intern Membership Management System 1.0. This vulnerab

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause a stack bu

NVIDIA vGPU software for Linux-style hypervisors contains a vulnerability in the Virtual GPU Manager, where a malicious

NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker with local unprivileged access that can

NVIDIA .run Installer for Linux and Solaris contains a vulnerability where an attacker could use a race condition to esc

NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker might cause an improper index val

NVIDIA Display Driver for Linux and Windows contains a vulnerability in the kernel mode driver, where an attacker could

NVIDIA Installer for Windows contains a vulnerability where an attacker may be able to escalate privileges. A successful

A vulnerability, which was classified as critical, has been found in projectworlds Online Admission System 1.0. This iss