2025

A maliciously crafted CATPART file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulne

AA maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulne

AA maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulne

AA maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulne

A maliciously crafted CATPART file, when parsed through certain Autodesk products, can force a Memory corruption vulnera

AA maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulne

A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force a Memory corruption vulnerabi

A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force a Memory corruption vulnerabi

AA maliciously crafted CATPART file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vul

A maliciously crafted CATPRODUCT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read v

AA maliciously crafted X_T file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnera

A maliciously crafted CATPRODUCT file, when parsed through certain Autodesk products, can force a Heap-Based Overflow vu

Pentaho Data Integration and Analytics Community Dashboard Editor plugin versions before 10.2.0.4, including 9.3.0.x and

Blackcat CMS 1.4 contains a remote code execution vulnerability that allows authenticated administrators to upload malic

Perch CMS 3.2 contains a remote code execution vulnerability that allows authenticated administrators to upload arbitrar

Zomplog 3.9 contains a remote code execution vulnerability that allows authenticated attackers to inject and execute arb

Xlight FTP Server 3.9.3.6 contains a stack buffer overflow vulnerability in the 'Execute Program' configuration that all

Webutler v3.2 contains a remote code execution vulnerability that allows authenticated administrators to upload PHP file

Webedition CMS v2.9.8.8 contains a remote code execution vulnerability that allows authenticated attackers to inject sys

ReyeeOS 1.204.1614 contains an unencrypted CWMP communication vulnerability that allows attackers to intercept and manip

GOM Player 2.3.90.5360 contains a remote code execution vulnerability in its Internet Explorer component that allows att

Coppermine Gallery 1.6.25 contains a remote code execution vulnerability that allows authenticated attackers to upload m

An overly-permissive IAM trust policy in the Harmonix on AWS framework may allow IAM principals in the same AWS account

An issue was discovered in Dynatrace OneAgent before 1.325.47. When attempting to access a remote network share from a m

An issue was discovered in Frappe ERPNext through 15.89.0. Function get_outstanding_reference_documents() at erpnext/acc

An issue was discovered in Frappe ERPNext through 15.89.0. Function get_outstanding_reference_documents() at erpnext.acc

A Server-Side Template Injection (SSTI) vulnerability exists in the Frappe ERPNext through 15.89.0 Print Format renderin

An SSTI (Server-Side Template Injection) vulnerability exists in the get_address_display method of Frappe ERPNext throug

EDB Hybrid Manager contains a flaw that allows an unauthenticated attacker to directly access certain gRPC endpoints. Th

An SSTI (Server-Side Template Injection) vulnerability exists in the get_dunning_letter_text method of Frappe ERPNext th

An unauthenticated Broken Function Level Authorization (BFLA) vulnerability in Newgen OmniDocs v11.0 allows attackers to

A flaw was found in runtimes-inventory-rhel8-operator. An internal proxy component is incorrectly configured. Because of

A Zip Slip vulnerability in the import a Project component of iceScrum v7.54 Pro On-prem allows attackers to execute arb

FNT Command 13.4.0 is vulnerable to Directory Traversal.

FNT Command 13.4.0 is vulnerable to Code Execution via the C Base Module.

The Booking Calendar plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'dates_to_check' param

An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. Attachment upl

An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. Authenticated

An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. Unauthenticate

An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. Uploaded attac

A flaw has been found in FantasticLBP Hotels Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0. This vulnerability a

A vulnerability was detected in FantasticLBP Hotels Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0. This affects

LINE client for iOS prior to 15.4 allows man-in-the-middle attacks due to improper SSL/TLS certificate validation in an

Student Learning Assessment and Support System developed by JHENG GAO has a Exposure of Sensitive Information vulnerabil

In the Eclipse OMR compiler component, since release 0.7.0, an optimization enabled for Eclipse OpenJ9 consumers of OMR

The URL Shortify WordPress plugin before 1.11.4 does not sanitise and escape a parameter before outputting it back in t

The URL Shortify WordPress plugin before 1.11.3 does not sanitize and escape a parameter before outputting it back in t

A vulnerability was found in Shiguangwu sgwbox N3 2.0.25. The impacted element is an unknown function of the file /eshel

NXLog Agent before 6.11 can load a file specified by the OPENSSL_CONF environment variable.

A vulnerability has been found in gmg137 snap7-rs up to 1.142.1. Affected is the function snap7_rs::client::S7Client::as