2025

Legacy Vivotek Device firmware uses default credetials for the root and user login accounts.

An attacker with a Looker Developer role could manipulate a LookML project to exploit a race condition during Git direct

Out-of-bounds Read in Shelly Pro 3EM (before v1.4.4) allows Overread Buffers.

Allocation of Resources Without Limits or Throttling vulnerability in Shelly Pro 4PM (before v1.6) allows Excessive Allo

When the service of ABP and AES is installed in a directory writable by non-administrative users, an attacker can replac

DLL Loading vulnerability in NEC Corporation RakurakuMusen Start EX All Verisons allows a attacker to manipulate the PC

Value provided in one of POST parameters sent during the process of logging in to Times Software E-Payroll is not saniti

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. When the ESP32 is in advertising mode, if it re

In a Bluetooth device, using RS9116-WiseConnect SDK experiences a Denial of Service, if it receives malformed L2CAP pack

A SQL Injection vulnerability on an endpoint in BEIMS Contractor Web, a legacy product that is no longer maintained or p

Vodafone H500s devices running firmware v3.5.10 (hardware model Sercomm VFH500) expose the WiFi access point password vi

TG8 Firewall exposes a directory such as /data/ over HTTP without authentication. This directory stores credential files

TG8 Firewall contains a pre-authentication remote code execution vulnerability in the runphpcmd.php endpoint. The syscmd

Denver SHO-110 IP cameras expose a secondary HTTP service on TCP port 8001 that provides access to a '/snapshot' endpoin

PLANEX CS-QP50F-ING2 smart cameras expose a configuration backup interface over HTTP that does not require authenticatio

Positive Technologies MaxPatrol 8 and XSpider contain a remote denial-of-service vulnerability in the client communicati

IPCop versions up to and including 2.1.9 contain an authenticated remote code execution vulnerability within the web-bas

ReQuest Serious Play F3 Media Server versions 7.0.3.4968 (Pro), 7.0.2.4954, 6.5.2.4954, 6.4.2.4681, 6.3.2.4203, and 2.0.

Netis ADSL Router DL4322D firmware RTK 2.1.1 contains a buffer overflow vulnerability in the embedded FTP service that a

Ubee EVW3226 cable modem/routers firmware versions up to and including 1.0.20 store configuration backup files in the we

A sensitive information disclosure vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated no

An insufficient policy enforcement vulnerability in Palo Alto Networks Prisma® Browser on Windows allows a locally authe

An insufficient validation of an untrusted input vulnerability in Palo Alto Networks Prisma® Browser allows a locally au

In Search Guard FLX versions 3.1.2 and earlier, while Document-Level Security (DLS) is correctly enforced elsewhere, whe

Jitsi Meet is an open source video conferencing application. A vulnerability present in versions prior to 2.0.10532 allo

A denial-of-service (DoS) vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to reb

Socket Firewall is an HTTP/HTTPS proxy server that intercepts package manager requests and enforces security policies by

ZenTao Biz < 6.5, ZenTao Max < 3.0, ZenTao Open Source Edition < 16.5, and ZenTao Open Source Edition < 16.5.beta1 conta

Insecure Direct Object Reference (IDOR) vulnerability in DeporSite of T-INNOVA. This vulnerability allows an attacker to

Cross-site Scripting (XSS) vulnerability reflected in xCally's Omnichannel v3.30.1. This vulnerability allowsan attacker

Anubis is a Web AI Firewall Utility that challenges users' connections in order to protect upstream resources from scrap

Bitplatform Boilerplate is a Visual studio and .NET project template. Versions prior to 9.11.3 are affected by a cross-s

In the Linux kernel, the following vulnerability has been resolved: media: iris: fix module removal if firmware downloa

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-subdev: Fix alloc failure check in v4l2

In the Linux kernel, the following vulnerability has been resolved: Squashfs: reject negative file sizes in squashfs_re

In the Linux kernel, the following vulnerability has been resolved: media: mc: Clear minor number before put device Th

In the Linux kernel, the following vulnerability has been resolved: fs: quota: create dedicated workqueue for quota_rel

In the Linux kernel, the following vulnerability has been resolved: mount: handle NULL values in mnt_ns_release() When

In the Linux kernel, the following vulnerability has been resolved: cpufreq: intel_pstate: Fix object lifecycle issue i

In the Linux kernel, the following vulnerability has been resolved: xtensa: simdisk: add input size check in proc_write

In the Linux kernel, the following vulnerability has been resolved: Revert "ipmi: fix msg stack when IPMI is disconnect

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix kfd process ref leaking when userpt

In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Fix lost EEPROM read timeout err

In the Linux kernel, the following vulnerability has been resolved: pwm: berlin: Fix wrong register in suspend/resume

In the Linux kernel, the following vulnerability has been resolved: ice: ice_adapter: release xa entry on adapter alloc

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix debug checking for np-guests using

In the Linux kernel, the following vulnerability has been resolved: x86/kvm: Force legacy PCI hole to UC when overridin

In the Linux kernel, the following vulnerability has been resolved: mailbox: zynqmp-ipi: Fix out-of-bounds access in ma

In the Linux kernel, the following vulnerability has been resolved: ext4: verify orphan file size is not too big In pr

In the Linux kernel, the following vulnerability has been resolved: pid: Add a judgment for ns null in pid_nr_ns __tas