2025

4C Strategies Exonaut before v22.4 was discovered to contain insecure permissions.

A vulnerability, which was classified as critical, was found in SkyworkAI DeepResearchAgent up to 08eb7f8eb9505d0094d75b

A vulnerability, which was classified as critical, has been found in agno-agi agno up to 1.7.5. This issue affects the f

A vulnerability was found in Keycloak-services. Special characters used during e-mail registration may perform SMTP Inje

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to modi

A vulnerability in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remot

A vulnerability in the meeting-join functionality of Cisco Webex Meetings could have allowed an unauthenticated, network

A reflected cross-site scripting (XSS) vulnerability in Sage DPW 2024_12_004 and earlier allows attackers to execute arb

An attacker with authenticated and privileged access could modify the contents of a non-sensitive file by traversing the

The server identity check mechanism for firmware upgrade performed via command shell is insecurely implemented potential

In Gatling Enterprise versions below 1.25.0, a low-privileged user that does not hold the role "admin" could perform a R

In Gatling Enterprise versions below 1.25.0, a user logging-out can still use his session token to continue using the ap

MCCMS v2.7.0 has an SSRF vulnerability located in the index() method of the sys\apps\controllers\api\Gf.php file, where

A vulnerability in QCMS version 6.0.5 allows authenticated users to read arbitrary files from the server due to insuffic

IBM Guardium Data Protection could allow a remote attacker to obtain sensitive information due to cleartext transmission

Lack of TLS validation when downloading a CSV file including mapping from IPs to countries used ONLY for displaying coun

The Mobile Access Portal's File Share application is vulnerable to a directory traversal attack, allowing an authenticat

NVIDIA Triton Inference Server for Windows and Linux and the Tensor RT backend contain a vulnerability where an attacker

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker c

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker c

A Regular Expression Denial of Service (ReDoS) vulnerability exists in the Hugging Face Transformers library, specifical

CWE-284: Improper Access Control

CWE-620: Unverified Password Change

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Information Exposure in all

Vault and Vault Enterprise’s (“Vault”) ldap auth method may not have correctly enforced MFA if username_as_alias was set

Information disclosure while processing a packet at EAVB BE side with invalid header length.

Information disclosure while capturing logs as eSE debug messages are logged.

Information disclosure while processing the hash segment in an MBN file.

Information disclosure while reading data from an image using specified offset and size parameters.

Information disclosure while opening a fastrpc session when domain is not sanitized.

The Gutenverse plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Animated Text and Fun

Windows Shortcut Following (.LNK) vulnerability in multiple processes of Mitsubishi Electric GENESIS64 versions 10.97.3

Out-of-bounds write in drawing pinpad in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers

Out-of-bounds write in creating bitmap images in Blockchain Keystore prior to version 1.3.17.2 allows local privileged a

Improper authorization in Samsung Health prior to version 6.30.1.003 allows local attackers to access data in Samsung He

Out-of-bounds read in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to read out-of-bou

Out-of-bounds write in detaching crypto box in Blockchain Keystore prior to version 1.3.17.2 allows local privileged att

Improper access control in PkgPredictorService prior to SMR Aug-2025 Release 1 in Chinese Android 13, 14, 15 and 16 allo

Path Traversal in Document scanner prior to SMR Aug-2025 Release 1 allows local attackers to delete file with Document s

Improper export of android application component in Emergency SoS prior to SMR Aug-2025 Release 1 allows local attackers

Improper access control in SemSensorManager for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to a

Improper access control in fall detection for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to mod

Improper access control in SemSensorService for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to a

Improper privilege management in SamsungAccount prior to SMR Aug-2025 Release 1 allows local privileged attackers to dea

Improper access control in accessing system device node prior to SMR Aug-2025 Release 1 allows local attackers to access

The Element Pack Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th

The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown W

The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via an Elementor display setting in all ver

Race condition vulnerability in the kernel hufs module. Impact: Successful exploitation of this vulnerability may affect