2025

A vulnerability classified as problematic has been found in code-projects Simple Car Rental System 1.0. This affects an

GitProxy is an application that stands between developers and a Git remote endpoint. In versions 1.19.1 and below, attac

GitProxy is an application that stands between developers and a Git remote endpoint (e.g., github.com). In versions 1.19

GitProxy is an application that stands between developers and a Git remote endpoint (e.g., github.com). Versions 1.19.1

ImageSharp is a 2D graphics library. In versions below 2.1.11 and 3.0.0 through 3.1.10, a specially crafted GIF file con

playground.electronhub.ai v1.1.9 was discovered to contain a cross-site scripting (XSS) vulnerability.

andisearch v0.5.249 was discovered to contain a cross-site scripting (XSS) vulnerability.

A buffer overflow vulnerability exists in the upload.cgi module of the iptime NAS firmware v1.5.04. The vulnerability ar

Dell SmartFabric OS10 Software, versions prior to 10.6.0.5, contains an Improper Restriction of XML External Entity Refe

Dell SmartFabric OS10 Software, versions prior to 10.6.0.5 contains a Files or Directories Accessible to External Partie

Dell PowerProtect Data Manager, versions prior to 19.19, contain(s) an Improper Input Validation vulnerability in PowerP

An issue in Aver PTC310UV2 firmware v.0.1.0000.59 allows a remote attacker to execute arbitrary code via the SendAction

A PHAR deserialization vulnerability in the _getHeaders function of PrestaShop v8.2.0 allows attackers to execute arbitr

A PHAR deserialization vulnerability in the component /themes/import of PrestaShop v8.2.0 allows attackers to execute ar

UI synchronization issue in the Just-in-Time (JIT) access request approval interface in Devolutions Server 2025.2.4.0 an

** UNSUPPORTED WHEN ASSIGNED ** Improper Output Neutralization for Logs vulnerability in Apache Struts. This issue affe

A flaw exists within the Linux kernel's handling of new TCP connections. The issue results from the lack of memory relea

CVAT is an open source interactive video and image annotation tool for computer vision. In versions 1.1.0 through 2.41.0

GLPI, which stands for Gestionnaire Libre de Parc Informatique, is a Free Asset and IT Management Software package, that

GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and

GLPI is a Free Asset and IT Management Software package. In versions 0.80 through 10.0.18, a lack of permission checks c

Certain HP LaserJet Pro printers may be vulnerable to information disclosure when a non-authenticated user queries a dev

An issue was discovered in Zimbra Collaboration (ZCS) through 10.1. A Cross-Site Scripting (XSS) vulnerability exists in

Umbraco is an ASP.NET CMS. In versions 13.0.0 through 13.9.2, 15.0.0 through 15.4.1 and 16.0.0 through 16.1.0, the conte

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Conta

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provide

GLPI is a Free Asset and IT Management Software package. In versions 9.1.0 through 10.0.18, an unauthenticated user can

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t

The Smart Slider 3 plugin for WordPress is vulnerable to time-based SQL Injection via the ‘sliderid’ parameter in all ve

Tesla Wall Connector Firmware Downgrade Vulnerability. This vulnerability allows physically present attackers to execute

The Amazon Q Developer Visual Studio Code (VS Code) extension v1.84.0 contains inert, injected code designed to call the

The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Ad

The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Ad

the BMA login interface allows arbitrary JavaScript or HTML to be written straight into the page’s Document Object Model

A logic error was addressed with improved error handling. This issue is fixed in macOS Sequoia 15.6. iCloud Private Rela

A privacy issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6. A sandboxed pr

An injection issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6. An app may be able

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma

An out-of-bounds read was addressed with improved input validation. This issue is fixed in Safari 18.6, iOS 18.6 and iPa

This issue was addressed with improved data protection. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7.

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.6, ma

This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sequoia 15.6. A w

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.6. A local

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma

This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. An app ma

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma

A logic issue was addressed with improved checks. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. A download's o

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6. An app may be able to

The issue was addressed with additional permissions checks. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7