2025

MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerabil

MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerabil

GStreamer Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local atta

The Versa Concerto SD-WAN orchestration platform is vulnerable to an privileges escalation and container escape vulnerab

A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been rated as critical. Affected by this issue

A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been declared as critical. Affected by this vu

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions

The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse proxy

A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0. Affected by this issue is

A vulnerability classified as critical was found in FreeFloat FTP Server 1.0. Affected by this vulnerability is an unkno

A vulnerability in Vtiger CRM Open Source Edition v8.3.0 allows an attacker with admin privileges to execute arbitrary P

An issue in OrangeHRM v.5.7 allows an attacker to escalate privileges via UserService.php and the checkForOldHash functi

A vulnerability classified as critical has been found in FreeFloat FTP Server 1.0. Affected is an unknown function of th

A vulnerability was found in FreeFloat FTP Server 1.0. It has been rated as critical. This issue affects some unknown pr

A vulnerability was found in FreeFloat FTP Server 1.0. It has been declared as critical. This vulnerability affects unkn

A vulnerability in SeedDMS 6.0.32 allows an attacker with admin privileges to execute arbitrary PHP code by exploiting t

XWiki is a generic wiki platform. In XWiki 16.10.0, required rights were introduced as a way to limit which rights a doc

jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-buffer-overflow is present in functio

containerd is an open-source container runtime. A bug was found in the containerd's CRI implementation where containerd,

A vulnerability classified as critical has been found in Campcodes Online Shopping Portal 1.0. Affected is an unknown fu

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Events Log Track allows Excessive Allocatio

A vulnerability in the RADIUS message processing feature of Cisco Identity Services Engine (ISE) could allow an unauthen

A vulnerability in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to elevate privileges

The Meteobridge web interface let meteobridge administrator manage their weather station data collection and administer

The reint_downloadmanager extension through 5.0.0 for TYPO3 allows Insecure Direct Object Reference.

The sr_feuser_register extension through 12.4.8 for TYPO3 allows Insecure Direct Object Reference.

The ns_backup extension through 13.0.0 for TYPO3 has a Predictable Resource Location.

An issue in Valvesoftware Steam Client Steam Client 1738026274 allows attackers to escalate privileges via a crafted exe

An issue in Blizzard Battle.net v2.40.0.15267 allows attackers to escalate privileges via placing a crafted shell script

itech iLabClient 3.7.1 relies on the hard-coded YngAYdgAE/kKZYu2F2wm6w== key (found in iLabClient.jar) for local users t

An OpenSSH daemon listens on TCP port 22. There is a hard-coded entry in the "/etc/shadow" file in the firmware image fo

When an incoming DNS protocol message includes a Transaction Signature (TSIG), BIND always checks it. If the TSIG conta

The Glossary by WPPedia – Best Glossary plugin for WordPress plugin for WordPress is vulnerable to PHP Object Injection

The `/etc/passwd` and `/etc/shadow` files reveal hard-coded password hashes for the operating system "root" user. The cr

Argument injection in special agent configuration in Checkmk <2.4.0p1, <2.3.0p32, <2.2.0p42 and 2.1.0 allows authenticat

Stack overflow leading to DoS can be triggered by a malicious authenticated client in Clickhouse before 19.14.3.3.

Yandex Browser Lite for Android prior to version 21.1.0 allows remote attackers to cause a denial of service.

A vulnerability was found in projectworlds Online Time Table Generator 1.0. It has been rated as critical. Affected by t

A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been classified as critical. Affected is an un

A vulnerability was found in projectworlds Online Time Table Generator 1.0 and classified as critical. This issue affect

A vulnerability has been found in projectworlds Online Time Table Generator 1.0 and classified as critical. This vulnera

A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. Th

In JetBrains YouTrack before 2025.1.76253 deletion of issues was possible due to missing permission checks in API

In the Linux kernel, the following vulnerability has been resolved: parisc: Fix double SIGFPE crash Camm noticed that

In the Linux kernel, the following vulnerability has been resolved: fix a couple of races in MNT_TREE_BENEATH handling

In the Linux kernel, the following vulnerability has been resolved: crypto: ecdsa - Harden against integer overflows in

This High severity PrivEsc (Privilege Escalation) vulnerability was introduced in versions: 9.12.0, 10.3.0, 10.4.0, and

In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Use is_kdump_kernel() to check for

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: Fix sc7280 lpass potential buffer overf

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: exynos: Disable iocc if dma-coherent pro