2025

Delta Electronics ISPSoft version 3.20 is vulnerable to an Out-Of-Bounds Write vulnerability that could allow an attacke

Delta Electronics ISPSoft version 3.20 is vulnerable to a Stack-Based buffer overflow vulnerability that could allow an

Delta Electronics ISPSoft version 3.20 is vulnerable to an Out-Of-Bounds Write vulnerability that could allow an attacke

Delta Electronics ISPSoft version 3.20 is vulnerable to a Stack-Based buffer overflow vulnerability that could allow an

vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Versions starting from 0.5.2 and p

Finit is a fast init for Linux systems. Versions starting from 3.0-rc1 and prior to version 4.11 bundle an implementatio

A flaw was found in Keycloak. By setting a verification policy to 'ALL', the trust store certificate verification is ski

An issue in modernwms v.1.0 allows an attacker view the MD5 hash of the administrator password and other attributes with

A vulnerability, which was classified as critical, was found in PCMan FTP Server up to 2.0.7. Affected is an unknown fun

A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0. It has been declared as critical. Affected

YesWiki is a wiki system written in PHP. Prior to version 4.5.4, YesWiki is vulnerable to reflected XSS in the file uplo

A vulnerability was found in PHPGurukul Student Record System 3.20. It has been classified as critical. Affected is an u

A SQL injection vulnerability in manage_damage.php in Sourcecodester Computer Laboratory Management System v1.0 allows a

CWE-250: Execution with Unnecessary Privileges

CWE-250: Execution with Unnecessary Privileges

A vulnerability has been found in PHPGurukul COVID19 Testing Management System 1.0 and classified as critical. This vuln

A vulnerability, which was classified as critical, was found in PHPGurukul Rail Pass Management System 1.0. This affects

Bookgy does not provide for proper authorisation control in multiple areas of the application. This deficiency could all

In Zimbra Collaboration (ZCS) 9.0 through 10.1, a Cross-Site Request Forgery (CSRF) vulnerability exists in the GraphQL

CWE-923: Improper Restriction of Communication Channel to Intended Endpoints

CWE-427: Uncontrolled Search Path Element

A vulnerability was found in ScriptAndTools Online-Travling-System 1.0. It has been rated as critical. This issue affect

A vulnerability was found in ScriptAndTools Online-Travling-System 1.0. It has been declared as critical. This vulnerabi

Memory safety bug present in Firefox ESR 128.9, and Thunderbird 128.9. This bug showed evidence of memory corruption and

Memory safety bugs present in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9. Some of these bugs

An attacker with control over a content process could potentially leverage the privileged UITour actor to leak sensitive

Thunderbird's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by man

A vulnerability, which was classified as critical, has been found in PHPGurukul Notice Board System 1.0. This issue affe

A vulnerability classified as critical has been found in Projectworlds Online Examination System 1.0. This affects an un

A flaw was found in the mod_auth_openidc module for Apache httpd. This flaw allows a remote, unauthenticated attacker to

When DNSdist is configured to provide DoH via the nghttp2 provider, an attacker can cause a denial of service by craftin

In the Linux kernel, the following vulnerability has been resolved: vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.4 and iPadOS 18.4, i

An authentication issue was addressed with improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, i

A vulnerability was found in PHPGurukul Rail Pass Management System 1.0. It has been rated as critical. Affected by this

A vulnerability classified as critical was found in projectworlds Online Examination System 1.0. Affected by this vulner

A vulnerability in the update process of Docker Desktop for Windows versions prior to 4.41.0 could allow a local, low-pr

GFI MailEssentials prior to version 21.8 is vulnerable to a .NET deserialization issue. A remote and authenticated attac

Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP priority header

A vulnerability classified as critical has been found in PHPGurukul Nipah Virus Testing Management System 1.0. Affected

GFI MailEssentials prior to version 21.8 is vulnerable to a local privilege escalation issue. A local attacker can escal

A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0. It has been declared as critical. This vulnera

A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. It has been classified as critical. This

A vulnerability has been found in PHPGurukul COVID19 Testing Management System 1.0 and classified as critical. Affected

A vulnerability, which was classified as critical, was found in PHPGurukul Old Age Home Management System 1.0. Affected

A vulnerability, which was classified as critical, has been found in PHPGurukul Nipah Virus Testing Management System 1.

The TheCartPress boot-store (aka Boot Store) theme 1.6.4 for WordPress allows header.php tcp_register_error XSS. NOTE: C

A vulnerability classified as critical was found in itsourcecode Placement Management System 1.0. Affected by this vulne

A vulnerability classified as critical has been found in itsourcecode Placement Management System 1.0. Affected is an un

Dell PowerProtect Data Manager Reporting, version(s) 19.17, contain(s) an Incorrect Use of Privileged APIs vulnerability