2025

A vulnerability was found in Das Parking Management System 停车场管理系统 6.2.0. It has been declared as critical. This vulnera

A vulnerability was found in Das Parking Management System 停车场管理系统 6.2.0. It has been classified as critical. This affec

A vulnerability was found in D-Link DIR-619L 2.06B01 and classified as critical. Affected by this issue is the function

A vulnerability has been found in D-Link DIR-619L 2.06B01 and classified as critical. Affected by this vulnerability is

SQL injection vulnerability in Customer Support System v1.0. This vulnerability allows an authenticated attacker to retr

A vulnerability, which was classified as critical, was found in Tenda FH1203 2.0.1.6. Affected is the function fromadvse

A vulnerability, which was classified as critical, has been found in Tenda FH1205 2.0.0.7. This issue affects the functi

A stored Cross-site Scripting (XSS) vulnerability affecting Opportunity Management in Project Portfolio Manager from Rel

A vulnerability classified as critical was found in Tenda FH1205 2.0.0.7(775). This vulnerability affects the function f

A vulnerability classified as critical has been found in Tenda FH1201 1.2.0.14(408). This affects an unknown part of the

A vulnerability, which was classified as critical, was found in Wifi-soft UniBox Controller up to 20250506. This affects

A vulnerability, which was classified as critical, has been found in Wifi-soft UniBox Controller up to 20250506. Affecte

A vulnerability classified as critical was found in Wifi-soft UniBox Controller up to 20250506. Affected by this vulnera

A vulnerability, which was classified as critical, was found in codesiddhant Jasmin Ransomware 1.0.1. Affected is an unk

An input neutralization vulnerability in the Server Name form and API Key form components of Crafty Controller allows a

A vulnerability was found in H3C GR-3000AX V100R007L50. It has been classified as critical. Affected is the function Upd

A vulnerability was found in H3C GR-5400AX V100R009L50 and classified as critical. This issue affects the function Updat

IBM Security Verify Directory Container 10.0.0.0 through 10.0.3.1 could allow a local user to execute commands as root d

The Zagg - Electronics & Accessories WooCommerce WordPress Theme theme for WordPress is vulnerable to Local File Inclusi

The AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress plugin for WordP

The File Manager Pro – Filester plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type va

IBM Backup, Recovery and Media Services for i 7.4 and 7.5 could allow a user with the capability to compile or restore a

An arbitrary free vulnerability exists in the cv_close functionality of Dell ControlVault3 prior to 5.15.10.14 and Dell

A deserialization of untrusted input vulnerability exists in the cvhDecapsulateCmd functionality of Dell ControlVault3 p

An out-of-bounds write vulnerability exists in the cv_upgrade_sensor_firmware functionality of Dell ControlVault3 prior

A stack-based buffer overflow vulnerability exists in the securebio_identify functionality of Dell ControlVault3 prior

An out-of-bounds read vulnerability exists in the cv_send_blockdata functionality of Dell ControlVault3 prior to 5.15.1

XWiki is an open-source wiki software platform. When a user without script right creates a document with an XWiki.Notifi

XWiki is an open-source wiki software platform. Any XWiki user with edit right on at least one App Within Minutes applic

XWiki is a generic wiki platform. In versions before 15.10.16, 16.0.0-rc-1 through 16.4.6, and 16.5.0-rc-1 through 16.10

XWiki is a generic wiki platform. In XWiki Platform versions 10.9 through 16.4.6, 16.5.0-rc-1 through 16.10.2, and 17.0.

XWiki is a generic wiki platform. When editing content that contains "dangerous" macros like malicious script macros tha

XWiki is a generic wiki platform. Any user with edit right on a page (could be the user's profile) can execute code (Gro

XWiki is a generic wiki platform. From 8.2 and 7.4.5 until 17.1.0-rc-1, 16.10.4, and 16.4.7, pages can gain script or pr

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal etracker al

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Simple Klar

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal COOKiES Con

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal COOKiES Con

In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could arbitrari

In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite

An issue in the openc3-api/tables endpoint of OpenC3 COSMOS before 6.1.0 allows attackers to execute a directory travers

A credential leak in OpenC3 COSMOS before v6.0.2 allows attackers to access service credentials as environment variables

Some Hikvision Wireless Access Point are vulnerable to authenticated remote command execution due to insufficient input

Arbitrary event injection on Salt Master. The master's "_minion_event" method can be used by and authorized minion to se

Minion event bus authorization bypass. An attacker with access to a minion key can craft a message which may be able to

The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to unauthorized l

Acer ControlCenter contains Remote Code Execution vulnerability. The program exposes a Windows Named Pipe that uses a cu

Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an authorize

Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network.

An improper neutralization of wildcards vulnerability in the log collection feature of Palo Alto Networks GlobalProtect™