2025

NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook, where an attacker could

A DLL hijacking vulnerability was reported in the Motorola Software Fix (Rescue and Smart Assistant) installer that coul

An incorrect permissions vulnerability was reported in Elliptic Labs Virtual Lock Sensor that could allow a local, authe

A code injection vulnerability has been discovered in the Robot Operating System (ROS) 'rostopic' command-line tool, aff

A code injection vulnerability has been discovered in the Robot Operating System (ROS) 'rostopic' command-line tool, aff

A code injection vulnerability has been identified in the Robot Operating System (ROS) 'roslaunch' command-line tool, af

A code execution vulnerability has been discovered in the Robot Operating System (ROS) 'rosparam' tool, affecting ROS di

A vulnerability, which was classified as critical, was found in code-projects Online Appointment Booking System 1.0. Aff

A local privilege escalation vulnerability in the Intercept X for Windows installer prior version 1.22 can lead to a loc

7-Zip is a file archiver with a high compression ratio. 7-Zip supports extracting from Compound Documents. Prior to vers

7-Zip is a file archiver with a high compression ratio. Zeroes written outside heap buffer in RAR5 handler may lead to m

A vulnerability related to registry permissions in the Intercept X for Windows updater prior to Core Agent version 2024.

A vulnerability, which was classified as critical, has been found in code-projects Online Appointment Booking System 1.0

A vulnerability classified as critical has been found in Tenda FH451 1.0.0.9. This affects the function fromWizardHandle

NVIDIA DOCA-Host and Mellanox OFED contain a vulnerability in the VGT+ feature, where an attacker on a VM might cause es

SQL Injection vulnerability in cnhcit.com Haichang OA v.1.0.0 allows a remote attacker to obtain sensitive information v

Multer is a node.js middleware for handling `multipart/form-data`. A vulnerability that is present starting in version 1

Mingyu Security Gateway before v3.0-5.3p was discovered to contain a remote command execution (RCE) vulnerability via th

OA EKP v16 was discovered to contain an arbitrary download vulnerability via the component /ui/sys_ui_extend/sysUiExtend

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection

When setting up interrupt remapping for legacy PCI(-X) devices, including PCI(-X) bridges, a lookup of the upstream brid

The Hospital Information System developed by UNIMAX has a SQL Injection vulnerability, allowing unauthenticated remote a

If a `named` caching resolver is configured with `serve-stale-enable` `yes`, and with `stale-answer-client-timeout` set

An authentication bypass vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.18.

An authentication bypass and disclosure of information vulnerability exists in HPE AutoPass License Server (APLS) prior

An hsqldb-related remote code execution vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.18.

IBM WebSphere Application Server 9.0 and WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.7 are vulnerable t

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. An Authenticati

A security vulnerability has been identified in HPE Telco Service Orchestrator software. The vulnerability could allow a

An issue was discovered in Kaseya Rapid Fire Tools Network Detective through 2.0.16.0. A vulnerability exists in the Enc

Kaseya Rapid Fire Tools Network Detective 2.0.16.0 has Unencrypted Credentials (for privileged access) stored in the col

Emlog is an open source website building system. A cross-site scripting (XSS) vulnerability in emlog up to and including

A `named` caching resolver that is configured to send ECS (EDNS Client Subnet) options may be vulnerable to a cache-pois

Plack-Middleware-Session before version 0.35 for Perl generates session ids insecurely. The default session id generato

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in pakkemx Pakke Enví

Missing Authorization vulnerability in uxper Nuss nuss allows Accessing Functionality Not Properly Constrained by ACLs.T

Missing Authorization vulnerability in uxper Sala allows Accessing Functionality Not Properly Constrained by ACLs. This

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EZiHosting Tennis

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kingdom Creation M

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in karimmughal Dot ht

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cmsMinds Pay with

Missing Authorization vulnerability in pimwick PW WooCommerce On Sale! pw-woocommerce-on-sale allows Exploiting Incorrec

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileG

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Funnel Builde

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stefan M. SMu Manu

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in arisoft Contact Fo