2025

Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in

When a URL was provided in a link querystring parameter, Firefox for Android would follow that URL instead of the correc

An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified

A vulnerability exists in the IEC 61850 in MicroSCADA X SYS600 product. The certificate validation of the TLS protocol a

A vulnerability exists in the Web interface of the MicroSCADA X SYS600 product. The filtering query in the Web interface

A vulnerability exists in the IEC 61850 of the MicroSCADA X SYS600 product. An IEC 61850-8 crafted message content from

A vulnerability exists in MicroSCADA X SYS600 product. If exploited this could allow a local unauthenticated attacker to

An authenticated user with file access privilege via FTP access can cause the Relion 670/650 and SAM600-IO series device

The Conference Scheduler plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘className’ parameter

WRC-1167GHBK2-S contains a stored cross-site scripting vulnerability in WebGUI. If exploited, an arbitrary script may be

Unrestricted upload of file with dangerous type issue exists in WRC-2533GST2, WRC-1167GST2, WRC-2533GST2, WRC-2533GS2V-B

Gogs is an open source self-hosted Git service. In application version 0.14.0+dev and prior, there is a stored cross-sit

A vulnerability was found in java-aodeng Hope-Boot 1.0.0. It has been classified as problematic. Affected is the functio

Successful exploitation of the stored cross-site scripting vulnerability could allow an attacker to inject malicious scr

Successful exploitation of the vulnerability could allow an attacker that has physical access to interface with JTAG to

Successful exploitation of the vulnerability could allow an attacker to cause repeated reboots, potentially leading to r

Successful exploitation of the vulnerability could allow an attacker to consume all available session slots and block ot

Successful exploitation of the vulnerability could allow an unauthenticated attacker to conduct brute force guessing and

A vulnerability has been found in xxyopen/201206030 novel-plus up to 5.1.3 and classified as critical. This vulnerabilit

A vulnerability, which was classified as problematic, was found in xxyopen/201206030 novel-plus up to 5.1.3. This affect

A reflected cross-site scripting (XSS) vulnerability exists in the Moodle LMS Jmol plugin version 6.1 and prior via the

A vulnerability, which was classified as critical, has been found in xxyopen/201206030 novel-plus up to 5.1.3. Affected

A vulnerability classified as problematic was found in NOYAFA/Xiami LF9 Pro up to 20250611. Affected by this vulnerabili

A vulnerability was found in SIFUSM/MZZYG BD S1 up to 20250611. It has been declared as problematic. This vulnerability

A vulnerability was found in 70mai M300 up to 20250611. It has been classified as problematic. This affects an unknown p

A vulnerability has been found in 70mai M300 up to 20250611 and classified as problematic. Affected by this vulnerabilit

A vulnerability classified as problematic was found in 70mai 1S up to 20250611. This vulnerability affects unknown code

Quarkus is a Cloud Native, (Linux) Container First framework for writing Java applications. In versions prior to 3.24.1,

In WhiteBeam 0.2.0 through 0.2.1 before 0.2.2, a user with local access to a server can bypass the allow-list functional

A vulnerability was found in PySpur-Dev pyspur up to 0.1.18. It has been classified as critical. Affected is the functio

A vulnerability was found in Dromara MaxKey up to 4.1.7 and classified as critical. This issue affects the function Add

A vulnerability has been found in HDF5 up to 1.14.6 and classified as critical. This vulnerability affects the function

gateway_proxy_handler in MLflow before 3.1.0 lacks gateway_path validation.

In JetBrains TeamCity before 2025.03.3 reflected XSS in the NPM Registry integration was possible

In JetBrains TeamCity before 2025.03.3 usernames were exposed to the users without proper permissions

In JetBrains TeamCity before 2025.03.3 reflected XSS on diskUsageBuildsStats page was possible

In JetBrains TeamCity before 2025.03.3 reflected XSS on the favoriteIcon page was possible

In JetBrains TeamCity before 2025.03.3 a DOM-based XSS at the Performance Monitor page was possible

An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0 and 10.0 and 10.1. A Cross-Site Scripting (XSS) vul

An issue in NCR Terminal Handler 1.5.1 allows a low-level privileged authenticated attacker to query the SOAP API endpoi

Innoshop through 0.4.1 allows Insecure Direct Object Reference (IDOR) at multiple places within the frontend shop. Anyon

An incorrect authorization vulnerability exists in multiple WSO2 products that allows unauthorized access to versioned f

A weakness has been identified in CodeMirror up to 5.65.20. Affected is an unknown function of the file mode/markdown/ma

A vulnerability has been found in MarkText up to 0.17.1 and classified as problematic. Affected by this vulnerability is

A vulnerability was found in TOTOLINK A3002R 1.1.1-B20200824.0128. It has been classified as critical. This affects the

A vulnerability was found in code-projects Online Shopping Store 1.0 and classified as critical. Affected by this issue

A vulnerability was found in CodeAstro Expense Management System 1.0. It has been rated as problematic. Affected by this

A vulnerability was found in SourceCodester Gym Management System 1.0. It has been classified as problematic. Affected i

A vulnerability, which was classified as problematic, was found in code-projects School Fees Payment System 1.0. This af

A vulnerability was found in ageerle ruoyi-ai 2.0.0 and classified as critical. Affected by this issue is the function s