2025

A vulnerability has been found in Tenda O3V2 1.0.0.12(3880) and classified as critical. Affected by this vulnerability i

A vulnerability, which was classified as critical, was found in Tenda O3V2 1.0.0.12(3880). Affected is the function from

The Honeywell Experion PKS contains an Integer Underflow vulnerability in the component Control Data Access (CDA). A

The Honeywell Experion PKS and OneWireless WDM contains a Deployment of Wrong Handler vulnerability in the comp

The Honeywell Experion PKS and OneWireless WDM contains a Memory Buffer vulnerability in the component Control Data Acce

Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player. The HTTP Gateway processes h

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.23.0, incoming requests usi

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.20.1, cpp-httplib does not

Uncontrolled Resource Consumption vulnerability in Apache Tomcat if an HTTP/2 client did not acknowledge the initial set

The Honeywell Experion PKS contains an Uninitialized Variable in the common Epic Platform Analyzer (EPA) communications.

A vulnerability was found in code-projects LifeStyle Store 1.0. It has been declared as critical. Affected by this vulne

Headlamp is an extensible Kubernetes web UI. A command injection vulnerability was discovered in the codeSign.js script

Trend Micro Cleaner One Pro is vulnerable to a Privilege Escalation vulnerability that could allow a local attacker to u

A missing authentication vulnerability in Trend Micro Worry-Free Business Security Services (WFBSS) agent could have all

Trend Micro Password Manager (Consumer) version 5.8.0.1327 and below is vulnerable to a Link Following Privilege Escalat

Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that cou

For some unlikely configurations of multipart upload, an Integer Overflow vulnerability in Apache Tomcat could lead to a

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Tomc

Insecure Permissions vulnerability in the Local Storage in Alteryx Server 2023.1.1.460 allows remote attackers to obtain

An issue in Alteryx Server v.2023.1.1.460 allows HTML injection via a crafted script to the pages component.

A vulnerability was found in code-projects LifeStyle Store 1.0. It has been classified as critical. Affected is an unkno

A vulnerability was found in code-projects Mobile Shop 1.0 and classified as critical. This issue affects some unknown p

Late Release of Memory after Effective Lifetime vulnerability in Apache HTTP Server. This issue affects Apache HTTP Ser

In some mod_ssl configurations on Apache HTTP Server versions through to 2.4.63, an HTTP desynchronisation attack allows

In certain proxy configurations, a denial of service attack against Apache HTTP Server versions 2.4.26 through to 2.4.63

Insufficient escaping of user-supplied data in mod_ssl in Apache HTTP Server 2.4.63 and earlier allows an untrusted SSL/

Server-Side Request Forgery (SSRF) in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a maliciou

SSRF in Apache HTTP Server with mod_proxy loaded allows an attacker to send outbound proxy requests to a URL controlled

HTTP response splitting in the core of Apache HTTP Server allows an attacker who can manipulate the Content-Type respons

Improper certificate validation in Zoom Workplace for Linux before version 6.4.13 may allow an unauthorized user to cond

A flaw was found in Keycloak. When an authenticated attacker attempts to merge accounts with another existing account du

Git GUI allows you to use the Git source control management tools via a GUI. When a user clones an untrusted repository

Git GUI allows you to use the Git source control management tools via a GUI. A malicious repository can ship versions of

Ecovacs Deebot T10 1.7.2 transmits Wi-Fi credentials in cleartext during the pairing process.

Gitk is a Tcl/Tk based Git history browser. Starting with 2.41.0, a Git repository can be crafted in such a way that wit

A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory m

A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which

A maliciously crafted RTE file, when parsed through Autodesk Revit, can force a Heap-Based Overflow vulnerability. A mal

A maliciously crafted RFA, RTE, or RVT file, when parsed through Autodesk Revit, can force a Memory Corruption vulnerabi

An issue has been discovered in GitLab CE/EE affecting all versions from 17.11 before 17.11.6, 18.0 before 18.0.4, and 1

Use of Hard-coded Credentials vulnerability in Mitsubishi Electric Corporation photovoltaic system monitor “EcoGuideTAB”

In the Linux kernel, the following vulnerability has been resolved: wifi: p54: prevent buffer-overflow in p54_rx_eeprom

In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix UAF when lookup kallsym after ftrace di

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: drop fragments with multicast o

In the Linux kernel, the following vulnerability has been resolved: software node: Correct a OOB check in software_node

In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: avoid double free when failing to DMA-m

In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Fix OOB memory read access in KUn

In the Linux kernel, the following vulnerability has been resolved: powerpc/bpf: fix JIT code size calculation of bpf t

In the Linux kernel, the following vulnerability has been resolved: fs/nfs/read: fix double-unlock bug in nfs_return_em

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to bail out in get_new_segment() -------