2025

NVIDIA Megatron-LM for all platforms contains a vulnerability in a python component where an attacker may cause a code i

NVIDIA Megatron-LM for all platforms contains a vulnerability in a python component where an attacker may cause a code i

A vulnerability classified as critical has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. Affected is an unknown

A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been rated as critical. This iss

Incorrect Permission Assignment for Critical Resource in the TeamViewer Client (Full and Host) of TeamViewer Remote and

Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.

Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.

A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM

A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4, 10.1.0.0 through 10.1.

A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.2.0.3 could allow an unauthen

A vulnerability was found in Netgear WNCE3001 1.0.0.50. It has been classified as critical. This affects the function ht

Memory safety bugs present in Firefox 139 and Thunderbird 139. Some of these bugs showed evidence of memory corruption a

If a user saved a response from the Network tab in Devtools using the Save As context menu option, that file may not hav

When Multi-Account Containers was enabled, DNS requests could have bypassed a SOCKS proxy when the domain name was inval

The executable file warning did not warn users before opening files with the `terminal` extension. *This bug only affec

A vulnerability exists in in the Monitor Pro interface of the MicroSCADA X SYS600 product. An authenticated user with lo

A denial-of-service vulnerability due to improper prioritization of network traffic over protection mechanism exists in

The Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit plugin for WordPress is

An unauthenticated remote attacker can enumerate valid user names from an unprotected endpoint.

An low privileged remote attacker in possession of the second factor for another user can login as that user without kno

An unauthenticated remote attacker can obtain limited sensitive information and/or DoS the device due to missing authent

A denial-of-service issue in the dns implemenation could cause an infinite loop.

WRC-X3000GS, WRC-X3000GSA, and WRC-X3000GSN contain an improper neutralization of special elements used in an OS command

llama.cpp is an inference of several LLM models in C/C++. Prior to version b5721, there is a signed vs. unsigned integer

SysmonElixir is a system monitor HTTP service in Elixir. Prior to version 1.0.1, the /read endpoint reads any file from

Kanboard is project management software that focuses on the Kanban methodology. Prior to version 1.2.46, Kanboard allows

Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets

A SQL injection vulnerability exists in Weaver E-cology 8.0 via the getdata.jsp endpoint. The application directly passe

A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems. The app

An OS command injection vulnerability exists in the Blue Angel Software Suite running on embedded Linux devices via the

A path traversal vulnerability exists in the Moodle LMS Jmol plugin version 6.1 and prior via the query parameter in jsm

A vulnerability was found in 70mai M300 up to 20250611 and classified as critical. Affected by this issue is some unknow

Mitel OpenScape Accounting Management through V5 R1.1.0 could allow an authenticated attacker with administrative privil

A vulnerability in the WebApl component of Mitel OpenScape Xpressions through V7R1 FR5 HF43 P913 could allow an unauthen

An issue in Texas Instruments LP-CC2652RB SimpleLink CC13XX CC26XX SDK 7.41.00.17 allows attackers to cause a Denial of

PHPGurukul Pre-School Enrollment System Project V1.0 is vulnerable to Directory Traversal in update-teacher-pic.php.

PHPGurukul Pre-School Enrollment System Project V1.0 is vulnerable to Directory Traversal in update-class-pic.php.

Notepad++ is a free and open-source source code editor. In versions 8.8.1 and prior, a privilege escalation vulnerabilit

Visionatrix is an AI Media processing tool using ComfyUI. In versions 1.5.0 to before 2.5.1, the /docs/flows endpoint is

A vulnerability classified as critical has been found in Netgear EX6150 1.0.0.46_1.0.76. This affects the function sub_4

A vulnerability was found in Netgear EX6100 1.0.2.28_1.1.138. It has been rated as critical. Affected by this issue is t

An issue was discovered in Sensopart VISOR Vision Sensors before 2.10.0.2 allows local users to perform unspecified acti

An issue in NCR Terminal Handler v1.5.1 allows low-level privileged authenticated attackers to arbitrarily deactivate, l

Innoshop through 0.4.1 allows directory traversal via FileManager API endpoints. An authenticated attacker with access t

OPPO Clone Phone uses a weak password WiFi hotspot to transfer files, resulting in Information disclosure.

A vulnerability was found in code-projects Inventory Management System 1.0 and classified as critical. This issue affect

A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. This vulnera

A vulnerability, which was classified as critical, was found in code-projects Inventory Management System 1.0. This affe

A vulnerability, which was classified as critical, has been found in code-projects Inventory Management System 1.0. Affe

A vulnerability has been found in itsourcecode Agri-Trading Online Shopping System 1.0 and classified as critical. This