2025

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerab

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Use-After-Free vulnerability.

A maliciously crafted PRT file, when linked or imported into certain Autodesk products, can force an Out-of-Bounds Read

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerab

A maliciously crafted 3DM file, when linked or imported into certain Autodesk products, can force a Heap-Based Overflow

A maliciously crafted X_T file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerabili

A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm/Wan6to4TunnelCfgRpm.ht

A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm/WzdWlanSiteSurveyRpm_A

A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm/WlanNetworkRpm_APC.htm

A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm/WlanNetworkRpm_AP.htm

A vulnerability has been found in TP-Link TL-WR841N v11, TL-WR842ND v2 and TL-WR494N v3. The vulnerability exists in the

SQL Injection affecting the Archiver role.

MapTiler Tileserver-php v2.0 is vulnerable to Directory Traversal. The renderTile function within tileserver.php is resp

Improper access restrictions in HCL BigFix Remote Control Server WebUI (versions 10.1.0.0248 and lower) allow non-admin

Grandstream Networks GXP1628 <=1.0.4.130 is vulnerable to Incorrect Access Control. The device is configured with direct

A SQL Injection vulnerability exists in the action.php endpoint of PuneethReddyHC Online Shopping System Advanced 1.0 du

An issue in FlashMQ v1.14.0 allows attackers to cause an assertion failure via sending a crafted retain message, leading

FlashMQ v1.14.0 was discovered to contain an assertion failure in the function PublishCopyFactory::getNewPublish, which

Unauthorized access and impersonation can occur in versions 4.6.2.3226 and below of Progress Software's Hybrid Data Pipe

In HDP Server versions below 4.6.2.2978 on Linux, unauthorized access could occur via IP spoofing using the X-Forwarded-

Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in DECE Software Geodi allows HTTP Request Sp

The Hydra Booking plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the tf

The Bricks theme for WordPress is vulnerable to blind SQL Injection via the ‘p’ parameter in all versions up to, and inc

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Samsung DMS(Data Management Server) al

Deserialization of Untrusted Data in Samsung DMS(Data Management Server) allows attackers to execute arbitrary code via

An authenticated, read-only user can upload a file and perform a directory traversal to have the uploaded file placed in

Improper session invalidation in the component /carrental/update-password.php of PHPGurukul Car Rental Project v3.0 allo

Improper session invalidation in the component /crm/change-password.php of PHPGurukul Online Course Registration v3.1 al

An authenticated remote code execution vulnerability in PowerStick Wave Dual-Band Wifi Extender V1.0 allows an attacker

There is a defect in the CPython “tarfile” module affecting the “TarFile” extraction and entry enumeration APIs. The tar

Improper session invalidation in the component /bbdms/change-password.php of PHPGurukul Blood Bank & Donor Management Sy

Improper session invalidation in the component /crm/change-password.php of PHPGurukul Small CRM v3.0 allows attackers to

Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allo

Improper session invalidation in the component /banker/change-password.php of PHPGurukul Bank Locker Management System v

Improper session invalidation in the component /srms/change-password.php of PHPGurukul Student Result Management System

Improper session invalidation in the component /library/change-password.php of PHPGurukul Online Library Management Syst

In JetBrains TeamCity before 2025.07 path traversal was possible via plugin unpacking on Windows

In JetBrains TeamCity before 2025.07 privilege escalation was possible due to incorrect directory permissions

Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Car Washing Management System v

Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Doctor Appointment Management S

Improper session invalidation in the component /elms/emp-changepassword.php of PHPGurukul Student Result Management Syst

Prior to version 25.4.270.0, a local authenticated attacker can manipulate user profile files to add illegitimate challe

IBM Informix Dynamic Server 12.10 and 14.10 uses an inadequate account lockout setting that could allow a remote attacke

Insufficient input validation within GitLab Language Server 7.6.0 and later before 7.30.0 allows arbitrary GraphQL query

A flaw was found in GLib. A denial of service on Windows platforms may occur if an application attempts to spawn a progr

A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. Affected by this

Incorrect Use of Privileged APIs vulnerability in Beamsec PhishPro allows Privilege Abuse. This issue affects PhishPro:

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: Fix OOB read on empty string

In the Linux kernel, the following vulnerability has been resolved: HID: core: ensure the allocated report buffer can c

In the Linux kernel, the following vulnerability has been resolved: HID: core: do not bypass hid_hw_raw_request hid_hw