2025

A vulnerability was identified in SourceCodester Student Grading System 1.0. Affected by this vulnerability is an unknow

A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, sp

A vulnerability was detected in D-Link DIR-823x up to 250416. The affected element is an unknown function of the file /g

A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Impacted is an unknown

IBM PowerVM Hypervisor FW950.00 through FW950.E0, FW1050.00 through FW1050.50, and FW1060.00 through FW1060.40 could all

A weakness has been identified in Korzh EasyQuery up to 7.4.0. This issue affects some unknown processing of the file /a

A security flaw has been discovered in fcba_zzm ics-park Smart Park Management System 2.0. This vulnerability affects un

A vulnerability was identified in Magicblack MacCMS 2025.1000.4050. This affects an unknown part of the component API Ha

A vulnerability was found in Magicblack MacCMS 2025.1000.4050. Affected by this vulnerability is the function col_url of

A vulnerability has been found in fcba_zzm ics-park Smart Park Management System 2.0. Affected is an unknown function of

A flaw has been found in miurla morphic up to 0.4.5. This impacts the function fetchHtml of the file /api/advanced-searc

A security vulnerability has been detected in CRMEB up to 5.6.1. The impacted element is the function testOutUrl of the

A weakness has been identified in CRMEB up to 5.6.1. The affected element is the function editAddress of the file app/se

A security flaw has been discovered in CRMEB up to 5.6.1. Impacted is the function Save of the file app/services/system/

A vulnerability was determined in codesiddhant Jasmin Ransomware up to 1.0.1. This vulnerability affects unknown code of

A vulnerability was found in Yida ECMS Consulting Enterprise Management System 1.0. This affects an unknown part of the

A flaw has been found in yangzongzhuan RuoYi up to 4.8.1. Affected by this vulnerability is an unknown functionality of

A flaw has been found in cdevroe unmark up to 1.9.3. This vulnerability affects unknown code of the file application/vie

A vulnerability was detected in cdevroe unmark up to 1.9.3. This affects an unknown part of the file /application/contro

A security vulnerability has been detected in MiczFlor RPi-Jukebox-RFID up to 2.8.0. Affected by this issue is some unkn

Multiple stored cross-site scripting (XSS) vulnerabilities in Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attacke

A weakness has been identified in MiczFlor RPi-Jukebox-RFID up to 2.8.0. Affected by this vulnerability is an unknown fu

A security flaw has been discovered in MiczFlor RPi-Jukebox-RFID up to 2.8.0. Affected is an unknown function of the fil

Open redirect vulnerability in the System Settings in Liferay Portal 7.1.0 through 7.4.3.101, and Liferay DXP 2023.Q3.1

A vulnerability was identified in Wavlink WL-WN578W2 221110. This impacts the function sub_401340/sub_401BA4 of the file

A vulnerability has been found in Wavlink WL-WN578W2 221110. The affected element is an unknown function of the file /sy

A flaw has been found in Wavlink WL-WN578W2 221110. Impacted is an unknown function of the file /live_online.shtml. Exec

An issue was discovered in AXIS BANK LIMITED Axis Mobile App 9.9 that allows attackers to obtain sensitive information w

PHPGURUKUL Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting (XSS) due to lack of input sanitization in t

A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q3.0, 2

OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Incorrect Control Flow Scoping. The specific flaw exists within the B

OpenSynergy BlueSDK (aka Blue SDK) through 6.x has Improper Input Validation. The specific flaw exists within the BlueSD

In the Linux kernel, the following vulnerability has been resolved: block: avoid possible overflow for chunk_sectors ch

In the Linux kernel, the following vulnerability has been resolved: ARM: tegra: Use I/O memcpy to write to IRAM Kasan

Viber Desktop 25.6.0 is vulnerable to HTML Injection via the text parameter of the message compose/forward interface

A security flaw has been discovered in JeecgBoot up to 3.8.2. Affected by this issue is some unknown functionality of th

Hono is a Web application framework that provides support for any JavaScript runtime. In versions prior to 4.9.7, a flaw

httpsig-rs is a Rust implementation of IETF RFC 9421 http message signatures. Prior to version 0.0.19, the HMAC signatur

A vulnerability was identified in JeecgBoot up to 3.8.2. Affected by this vulnerability is an unknown functionality of t

NUP Portal developed by NewType Infortech has a Missing Authentication vulnerability, allowing unauthenticated remote at

The Contact Form 7 reCAPTCHA WordPress plugin through 1.2.0 does not escape the $_SERVER['REQUEST_URI'] parameter before

An issue has been discovered in GitLab CE/EE affecting all versions from 7.8 before 18.1.6, 18.2 before 18.2.6, and 18.3

An issue has been discovered in GitLab CE/EE affecting all versions from 15.1 before 18.1.6, 18.2 before 18.2.6, and 18.

WTW-EAGLE App does not properly validate server certificates, which may allow a man-in-the-middle attacker to monitor en

An issue has been discovered in GitLab CE/EE affecting all versions from 15.0 before 18.1.6, 18.2 before 18.2.6, and 18.

A weakness has been identified in linlinjava litemall up to 1.8.0. This affects the function WxAftersaleController of th

curl's websocket code did not update the 32 bit mask pattern for each new outgoing frame as the specification says. Ins

A vulnerability was found in roncoo roncoo-pay up to 9428382af21cd5568319eae7429b7e1d0332ff40. The impacted element is a

An issue has been discovered in GitLab CE/EE affecting all versions from 10.7 before 18.1.6, 18.2 before 18.2.6, and 18.

The Ultimate Blogroll plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includ