2025

A vulnerability has been found in atjiu pybbs up to 6.0.0 and classified as critical. This vulnerability affects unknown

A vulnerability, which was classified as problematic, was found in atjiu pybbs up to 6.0.0. This affects the function ad

Electron Capture facilitates video playback for screen-sharing and capture. In versions 2.19.1 and below, the elecap app

Russh is a Rust SSH client & server library. In versions 0.54.0 and below, the channel window adjust message of the SSH

EspoCRM is a web application with a frontend designed as a single-page application and a REST API backend written in PHP

A vulnerability, which was classified as problematic, has been found in elunez eladmin up to 2.7. Affected by this issue

A vulnerability classified as critical was found in cloudfavorites favorites-web up to 1.3.0. Affected by this vulnerabi

A vulnerability was found in Exrick xboot up to 3.3.4. It has been rated as critical. This issue affects some unknown pr

tiaudit in Tera Insights tiCrypt before 2025-07-17 allows unauthenticated REST API requests that reveal sensitive inform

The vulnerable code can bypass the Captcha check in Liferay Portal 7.4.3.80 through 7.4.3.132, and Liferay DXP 2024.Q1.1

The fragment preview functionality in Liferay Portal 7.4.3.61 through 7.4.3.132, and Liferay DXP 2024.Q4.1 through 2024.

A vulnerability was found in Exrick xboot up to 3.3.4. It has been declared as critical. This vulnerability affects the

A vulnerability was found in Exrick xboot up to 3.3.4. It has been classified as problematic. This affects an unknown pa

A vulnerability was found in Boquan DotWallet App 2.15.2 on Android and classified as problematic. Affected by this issu

A vulnerability has been found in RiderLike Fruit Crush-Brain App 1.0 on Android and classified as problematic. Affected

The YouDao plugin for StarDict, as used in stardict 3.0.7+git20220909+dfsg-6 in Debian trixie and elsewhere, sends an X1

An Insecure Direct Object Reference (IDOR) vulnerability was discovered in SOGo Webmail thru 5.6.0, allowing an authenti

A vulnerability, which was classified as critical, was found in givanz Vvvebjs up to 2.0.4. Affected is an unknown funct

A vulnerability classified as critical was found in givanz Vvveb up to 1.0.5. This vulnerability affects unknown code of

An issue in Artifex mupdf 1.25.6, 1.25.5 allows a remote attacker to cause a denial of service via an infinite recursion

An issue was discovered in Samsung Mobile Processor Exynos 2100, 1280, 2200, 1330, 1380, 1480, and 2400. A lack of a JPE

A vulnerability was found in givanz Vvveb 1.0.5. It has been rated as critical. Affected by this issue is the function S

An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via

RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files.

RUCKUS Network Director (RND) before 4.5 stores passwords in a recoverable format.

A vulnerability was detected in givanz Vvveb 1.0.6.1. Impacted is an unknown function. The manipulation results in sessi

A security vulnerability has been detected in Kingdee Cloud-Starry-Sky Enterprise Edition up to 8.2. This issue affects

A flaw was found in the Ansible aap-gateway. Cross-site request forgery (CSRF) origin checking is not done on requests f

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.

Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Input During Web Page Generation ('Cross-

Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm

Grafana is an open-source platform for monitoring and observability. The Infinity datasource plugin, maintained by Grafa

CODESYS Runtime Toolkit-based products may expose sensitive files to local low-privileged operating system users due to

Out-of-bounds write vulnerability exists in FUJIFILM Business Innovation MFPs. A specially crafted IPP (Internet Printin

/edit-user in webserver in OpenPLC Runtime 3 through 9cd8f1b allows authenticated users to upload arbitrary files (such

In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation

In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation

In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri

A vulnerability, which was classified as problematic, was found in Caixin News App 8.0.1 on Android. Affected is an unkn

A vulnerability, which was classified as problematic, has been found in TVB Big Big Shop App 2.9.0 on Android. This issu

Missing Origin Validation in WebSockets vulnerability in Apache Zeppelin. The attacker could access the Zeppelin server

Improper Input Validation vulnerability in Apache Zeppelin. The fix for JDBC URL validation in CVE-2024-31864 did not ac

Incomplete Blacklist to Cross-Site Scripting vulnerability in Apache Zeppelin. This issue affects Apache Zeppelin: befo

A vulnerability has been found in 495300897 wx-shop up to de1b66331368695779cfc6e4d11a64caddf8716e and classified as pro

A vulnerability, which was classified as critical, was found in code-projects Kitchen Treasure 1.0. This affects an unkn

A vulnerability was found in code-projects Human Resource Integrated System 1.0. It has been rated as critical. This iss

The Mocca Calendar application before 2.15 for XWiki allows XSS via a title upon calendar import.

The Mocca Calendar application before 2.15 for XWiki allows XSS via a title to the view event page.