2025

A flaw has been found in DinukaNavaratna Dee Store 1.0. Affected is an unknown function. Executing manipulation can lead

A vulnerability was detected in itsourcecode Online Voting System 1.0. This impacts an unknown function of the file /ind

An improper permissions vulnerability was reported in Lenovo App Store that could allow a local authenticated user to ex

An improper default permission vulnerability was reported in Lenovo Dock Manager that, under certain conditions during i

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap Community Editio

Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Neutralization of Special Elements used

Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Neutralization of Special Elements used

IBM OpenPages 9.0 and 9.1 is vulnerable to information disclosure of sensitive information due to a weaker than expected

A security vulnerability has been detected in SourceCodester Survey Application System 1.0. This affects an unknown func

A weakness has been identified in SourceCodester Alumni Management System 1.0. The impacted element is an unknown functi

A security flaw has been discovered in soerennb eXtplorer up to 2.1.15. The affected element is an unknown function of t

An arbitrary file upload vulnerability was reported in the Lenovo Scanner Pro client during an internal security assessm

A vulnerability was reported in the Lenovo Scanner pro application during an internal security assessment that, under ce

A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zon

Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Control of Generation of Code ('Code Inj

Open Access Management (OpenAM) is an access management solution. In versions prior to 16.0.0, if the "claims_parameter_

A null pointer dereference vulnerability exists in airpig2011 IEC104 thru Commit be6d841 (2019-07-08). When multiple thr

A heap-use-after-free vulnerability exists in airpig2011 IEC104 thru Commit be6d841 (2019-07-08). During multi-threaded

free5gc v4.1.0 and before is vulnerable to Buffer Overflow. When AMF receives an UplinkRANConfigurationTransfer NGAP mes

The Datadog Agent collects events and metrics from hosts and sends them to Datadog. A vulnerability within the Datadog L

A stored cross-site scripting (XSS) in the Business Line Management module of Xxl-api v1.3.0 attackers to execute arbitr

CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the for

A Cross-Site Request Forgery (CSRF) vulnerability in Salmen2/Simple-Faucet-Script v1.07 via crafted POST request to admi

A SQL injection vulnerability exists in the login functionality of WellSky Harmony version 4.1.0.2.83 within the 'xmHarm

A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Impacted is an unknown function o

Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argume

Mintty is a terminal emulator for Cygwin, MSYS, and WSL. In versions 2.3.6 through 3.7.4, several escape sequences can c

Fujitsu / Fsas Technologies iRMC S6 on M5 before 1.37S mishandles Redfish/WebUI access if the length of a username is ex

Fujitsu fbiosdrv.sys before 2.5.0.0 allows an attacker to potentially affect system confidentiality, integrity, and avai

An issue was discovered in dvsekhvalnov jose2go 1.5.0 thru 1.7.0 allowing an attacker to cause a Denial-of-Service (DoS)

A Cross-Site Request Forgery (CSRF) in xxl-api v1.3.0 allows attackers to arbitrarily add users to the management module

Omnissa Workspace ONE UEM contains an observable response discrepancy vulnerability. A malicious actor may be able to en

In Splunk Enterprise versions below 10.0.1, 9.4.5, 9.3.7, and 9.2.9 and Splunk Cloud Platform versions below 9.3.2411.11

In Splunk Enterprise versions below 10.0.1, 9.4.5, 9.3.7, 9.2.9, and Splunk Cloud Platform versions below 10.0.2503.5, 9

Cross Site Scripting (XSS) vulnerability in CrushFTP 11.3.6_48. The Web-Based Server has a feature where users can share

Cross Site Scripting vulnerability in CentralSquare Community Development 19.5.7 via form fields.

If an attacker causes kdcproxy to connect to an attacker-controlled KDC server (e.g. through server-side request forgery

If kdcproxy receives a request for a realm which does not have server addresses defined in its configuration, by default

Cross-site scripting (XSS) vulnerability in the generate report functionality in Rarlab WinRAR 7.11, allows attackers to

A flaw was found in the Observability Operator. The Operator creates a ServiceAccount with *ClusterRole* upon deployment

Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.166 allowed a remote attacker to potentially exp

A maliciously crafted DWG file, when parsed through Autodesk 3ds Max, can force a Use-After-Free vulnerability. A malici

A maliciously crafted JPG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A

N-central < 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Golemiq 0 Day Anal

An Authentication Bypass issue in CentralSquare Community Development 19.5.7 allows attackers to access the admin panel

A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permi

A vulnerability in FiberHome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password (WPA/WPA2 pre-s

Sogexia Android App Compile Affected SDK v35, Max SDK 32 and fixed in v36, was discovered to contain hardcoded encryptio

N-central versions < 2025.4 are vulnerable to multiple XML External Entities injection leading to information disclosure