2025

TOTOLink A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow in the ssid parameter of the urldecode

Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the wpapsk_crypto parameter of the wlSetExternPa

Dell Display and Peripheral Manager, versions prior to 2.1.2.12, contains an Execution with Unnecessary Privileges vulne

Cross-Site Request Forgery (CSRF) in SourceCodester Product Expiry Management System. The User Management module (delete

A Cross-Site Request Forgery (CSRF) vulnerability in the SourceCodester Client Database Management System 1.0 allows an

The send_message.php endpoint in SourceCodester Simple Public Chat Room 1.0 is vulnerable to Cross-Site Request Forgery

A Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Simple To-Do List System 1.0 in the "Add Tasks" text

Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to init

In JetBrains YouTrack before 2025.3.104432 missing TLS certificate validation enabled data disclosure

In JetBrains YouTrack before 2025.3.104432 information disclosure was possible via the feedback form

In JetBrains Hub before 2025.3.104432 information disclosure was possible via the Users API

In JetBrains Hub before 2025.3.104432 a race condition allowed bypass of the Agent-user limit

In JetBrains Hub before 2025.3.104992 a race condition allowed bypass of the user limit via invitations

In JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race condition

In JetBrains ReSharper before 2025.2.4 missing signature verification in DPA Collector allows local privilege escalation

A security flaw has been discovered in SourceCodester Interview Management System up to 1.0. Affected by this issue is s

A vulnerability was identified in projectworlds Online Admission System 1.0. Affected by this vulnerability is an unknow

Cross Site Scripting (XSS) vulnerability stored in SOPlanning v1.53.02, which consist of a stored XSS due to a lack of p

An improper privilege management vulnerability was found in Looker Studio. It impacted all JDBC-based connectors. A Loo

Stored Cross Site Scripting (XSS) vulnerability in Smart School 7.0 due to lack of proper validation of user input when

A SQL injection vulnerability was discovered in Looker Studio that allowed for data exfiltration from BigQuery data sour

A SQL injection vulnerability was found in Looker Studio. A Looker Studio user with report view access could inject mal

A Command Injection vulnerability, resulting from improper file path sanitization (Directory Traversal) in Looker allows

A vulnerability was identified in the password generation algorithm when accessing the debug-interface. An unauthenticat

A vulnerability was identified in SourceCodester Baby Care System 1.0. This affects an unknown part of the file /updatew

NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in co

NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in co

A vulnerability was determined in SourceCodester Baby Care System 1.0. Affected by this issue is some unknown functional

A vulnerability was found in SourceCodester Food Ordering System 1.0. Affected by this vulnerability is an unknown funct

Versions of the package cloudinary before 2.7.0 are vulnerable to Arbitrary Argument Injection due to improper parsing o

A vulnerability has been found in SourceCodester Food Ordering System 1.0. Affected is an unknown function of the file /

A flaw has been found in SourceCodester Survey Application System 1.0. This impacts the function save_user/update_user o

A vulnerability was detected in code-projects Online Job Search Engine 1.0. This affects an unknown function of the file

New Site Server developed by CyberTutor has a Use of Client-Side Authentication vulnerability, allowing unauthenticated

EIP Plus developed by Hundred Plus has an Arbitrary File Uplaod vulnerability, allowing privileged remote attackers to u

A security vulnerability has been detected in DedeBIZ up to 6.3.2. The impacted element is an unknown function of the fi

A weakness has been identified in SourceCodester Farm Management System 1.0. The affected element is an unknown function

EIP Plus developed by Hundred Plus has a Weak Password Recovery Mechanism vulnerability, allowing unauthenticated remote

U-Office Force developed by e-Excellence has a SQL Injection vulnerability, allowing authenticated remote attacker to in

U-Office Force developed by e-Excellence has a SQL Injection vulnerability, allowing authenticated remote attacker to in

A security flaw has been discovered in rymcu forest up to de53ce79db9faa2efc4e79ce1077a302c42a1224. Impacted is the func

A vulnerability was identified in rymcu forest up to de53ce79db9faa2efc4e79ce1077a302c42a1224. This issue affects the fu

A vulnerability was determined in liweiyi ChestnutCMS up to 1.5.8. This vulnerability affects the function resourceDownl

A vulnerability was found in OpenClinica Community Edition up to 3.12.2/3.13. This affects an unknown part of the file /

A vulnerability has been found in OpenClinica Community Edition up to 3.12.2/3.13. Affected by this issue is some unknow

A flaw has been found in qianfox FoxCMS up to 1.2.16. Affected by this vulnerability is the function add/edit of the fil

A vulnerability was detected in EverShop up to 2.0.1. Affected is an unknown function of the file /src/modules/oms/graph

A security flaw has been discovered in yungifez Skuul School Management System up to 2.6.5. The impacted element is an u

A vulnerability was identified in TOZED ZLT T10 T10PLUS_3.04.15. The affected element is an unknown function of the file

In the Linux kernel, the following vulnerability has been resolved: crypto: rng - Ensure set_ent is always present Ens