2025

Tenda AC6 V2.0 15.03.06.50 was discovered to contain a buffer overflow in the speed_dir parameter in the SetSpeedWan fun

A NULL pointer dereference in the sub_41773C function of TOTOLINK N600R v4.3.0cu.7866_B20220506 allows attackers to caus

Software which sets SO_REUSEPORT_LB on a socket and then connects it to a host will not directly observe any problems.

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a

Jira Align is vulnerable to an authorization issue. A low-privilege user is able to alter the private checklists of othe

Jira Align is vulnerable to an authorization issue. A low-privilege user without sufficient privileges to perform an act

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a

An improper input validation in the Security Dashboard ignored-tasks API of Devolutions Server 2025.2.15.0 and earlier a

Improper authorization in the temporary access workflow of Devolutions Server 2025.2.12.0 and earlier allows an authenti

Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaust

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimed

Nautobot Single Source of Truth (SSoT) is an app for Nautobot. Prior to version 3.10.0, an unauthenticated attacker coul

Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the DhcpListClient functi

A NULL pointer dereference in the main function of TOTOLINK N600R v4.3.0cu.7866_B20220506 allows attackers to cause a De

TOTOLINK N600R v4.3.0cu.7866_B20220506 was discovered to contain a stack overflow in the ssid parameter in the setWiFiBa

TOTOLINK N600R v4.3.0cu.7866_B20220506 was discovered to contain a stack overflow in the wepkey2 parameter in the setWiF

In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible f

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject for

NVIDIA Bluefield and ConnectX contain a vulnerability in the management interface that could allow a malicious actor wit

my little forum is a PHP and MySQL based internet forum that displays the messages in classical threaded view. Prior to

MeterSphere is an open source continuous testing platform. Prior to version 2.10.25-lts, a logic flaw allows retrieval o

OpenWrt Project is a Linux operating system targeting embedded devices. Prior to version 24.10.4, ubusd contains a heap

OpenWrt Project is a Linux operating system targeting embedded devices. Prior to version 24.10.4, local users could read

Missing Authorization vulnerability in Sovlix MeetingHub meetinghub.This issue affects MeetingHub: from n/a through <= 1

Missing Authorization vulnerability in Rustaurius Front End Users front-end-only-users.This issue affects Front End User

Missing Authorization vulnerability in Repuso Social proof testimonials and reviews by Repuso social-testimonials-and-re

Missing Authorization vulnerability in WPXPO WowRevenue revenue.This issue affects WowRevenue: from n/a through <= 1.2.1

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 MDTF wp

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in E2Pdf e2pdf e2pdf.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Travel WP Trave

Insertion of Sensitive Information Into Sent Data vulnerability in ThemeRuby Easy Post Submission easy-post-submission a

Cross-Site Request Forgery (CSRF) vulnerability in impleCode Product Catalog Simple post-type-x.This issue affects Produ

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themepoints Tab Ul

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in favethemes Houzez

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Missing Authorization vulnerability in Horea Radu One Page Express Companion one-page-express-companion.This issue affec

Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform SmartCrawl smartcrawl-seo.This issu

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event p

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Missing Authorization vulnerability in StellarWP Event Tickets event-tickets.This issue affects Event Tickets: from n/a

Insertion of Sensitive Information Into Sent Data vulnerability in Blockspare Blockspare blockspare allows Retrieve Embe

Deserialization of Untrusted Data vulnerability in eyecix JobSearch wp-jobsearch.This issue affects JobSearch: from n/a

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jonathan Jernigan