2025

An issue in the default configuration of the password reset function in LogicData eCommerce Framework v5.0.9.7000 allows

A CSRF vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.7, 2025.Q1.0 t

A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.3.132, and Liferay DXP 2025.Q2.0 through

IBM Sterling B2B Integrator 6.2.1.0 and IBM Sterling File Gateway 6.2.1.0 is vulnerable to cross-site scripting. This vu

HCL Digital Experience is susceptible to cross site scripting (XSS) in an administrative UI with restricted access.

A security flaw has been discovered in LiuYuYang01 ThriveX-Blog up to 3.1.7. Affected by this vulnerability is the funct

A vulnerability was determined in Wavlink WL-NU516U1 M16U1_V240425. This impacts the function sub_4032E4 of the file /cg

qBit Manage is a tool that helps manage tedious tasks in qBittorrent and automate them. A path traversal vulnerability e

A vulnerability was found in CodePhiliaX Chat2DB up to 0.3.7. This affects an unknown function of the file ai/chat2db/se

Mermaid is a JavaScript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer

Discourse is an open-source discussion platform. Welcome banner user name string for logged in users can be vulnerable t

In the smartLibrary component of the HRForecast Suite 0.4.3, a SQL injection vulnerability was discovered in the valueKe

In the Linux kernel, the following vulnerability has been resolved: staging: gpib: fix unset padding field copy back to

In the Linux kernel, the following vulnerability has been resolved: staging: fbtft: fix potential memory leak in fbtft_

In the Linux kernel, the following vulnerability has been resolved: powercap: dtpm_cpu: Fix NULL pointer dereference in

In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Check governor before using governor-

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Avoid accessing uninitialized arvif->

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Pass ab pointer directly to ath12k_dp

In the Linux kernel, the following vulnerability has been resolved: iwlwifi: Add missing check for alloc_ordered_workqu

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: vop2: fail cleanly if missing a prima

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject narrower access to pointer ctx fields

In the Linux kernel, the following vulnerability has been resolved: neighbour: Fix null-ptr-deref in neigh_flush_dev().

In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent infinite loop in rt6_nlmsg_size() Wh

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible infinite loop in fib6_info_uses_

In the Linux kernel, the following vulnerability has been resolved: clk: xilinx: vcu: unregister pll_post only if regis

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix crash when rebind ccp device for

In the Linux kernel, the following vulnerability has been resolved: powerpc/eeh: Make EEH driver device hotplug safe M

In the Linux kernel, the following vulnerability has been resolved: benet: fix BUG when creating VFs benet crashes as

In the Linux kernel, the following vulnerability has been resolved: nfsd: avoid ref leak in nfsd_open_local_fh() If tw

In the Linux kernel, the following vulnerability has been resolved: perf/core: Handle buffer mapping fail correctly in

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference error in genera

In the Linux kernel, the following vulnerability has been resolved: platform/x86/intel/pmt: fix a crashlog NULL pointer

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: Initialize frame-based format col

In the Linux kernel, the following vulnerability has been resolved: HID: apple: validate feature-report field count to

A flaw has been found in Linksys E5600 1.1.0.26. The affected element is the function verify_gemtek_header of the file c

EzGED3 3.5.0 stores user passwords using an insecure hashing scheme: md5(md5(password)). This hashing method is cryptogr

EzGED3 3.5.0 contains an unauthenticated arbitrary file read vulnerability due to improper access control and insufficie

Cross site scripting (XSS) vulnerability in Hustoj 2025-01-31 via the TID parameter to thread.php.

A security issue has been identified in Appian Enterprise Business Process Management version 25.3. The vulnerability is

A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025

Incorrect Access Control in the AJAX endpoint functionality in jonkastonka Cookies and Content Security Policy plugin th

MoonShine was discovered to contain a SQL injection vulnerability under the Blog -> Categories page when using the moons

A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.5, allowing remote attackers to upl

A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.4, allowing remote attackers to sto

A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.5, allowing to execute arbitrary Ja

A vulnerability exists in riscv-boom SonicBOOM 1.2 (BOOMv1.2) processor implementation, where valid virtual-to-physical

A CORS misconfiguration in Nginx Proxy Manager v2.12.3 allows unauthorized domains to access sensitive data, particularl

A vulnerability was identified in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.4.7. Affected by this

A deserialization vulnerability exists in Volcengine's verl 3.0.0, specifically in the scripts/model_merger.py script wh

A regular expression used by AngularJS'  linky https://docs.angularjs.org/api/ngSanitize/filter/linky  filter to detect