2025

pyLoad is a free and open-source download manager written in Python. In versions prior to 0.5.0b3.dev91, pyLoad web inte

BigBlueButton is an open-source virtual classroom. A denial-of-service (DoS) vulnerability in versions prior to 3.0.13 a

BigBlueButton is an open-source virtual classroom. A Denial of Service (DoS) vulnerability in versions prior to 3.0.13 a

The authentication mechanism in Perfex CRM before 3.3.1 allows attackers to bypass login credentials due to insufficient

Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized at

Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized at

Redis Enterprise Elevation of Privilege Vulnerability

Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized at

Azure PlayFab Elevation of Privilege Vulnerability

Azure Entra ID Elevation of Privilege Vulnerability

Azure Entra ID Elevation of Privilege Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Azure Monitor allows an unauthor

A logic issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26. An app may bypass Gatekeepe

Newforma Info Exchange (NIX) before version 2023.1 by default allows anonymous authentication which allows an unauthenti

Newforma Info Exchange (NIX) '/NPCSRemoteWeb/LegacyIntegrationServices.asmx' allows a remote, unauthenticated attacker t

Newforma Info Exchange (NIX) provides a 'Send a File Transfer' feature that allows a remote, authenticated attacker to u

Newforma Info Exchange (NIX) '/DownloadWeb/hyperlinkredirect.aspx' provides an unauthenticated URL redirect via the 'nhl

Newforma Info Exchange (NIX) '/UserWeb/Common/MarkupServices.ashx' allows a remote, unauthenticated attacker to cause NI

Newforma Info Exchange (NIX) '/RemoteWeb/IntegrationServices.ashx' allows a remote, unauthenticated attacker to cause NI

Newforma Info Exchange (NIX) '/UserWeb/Common/MarkupServices.ashx' 'StreamStampImage' accepts an encrypted file path and

Newforma Info Exchange (NIX) '/UserWeb/Common/UploadBlueimp.ashx' allows an authenticated attacker to upload an arbitrar

Newforma Info Exchange (NIX) stores credentials used to configure NPCS in 'HKLM\Software\WOW6432Node\Newforma\<version>

Newforma Info Exchange (NIX) accepts requests to '/UserWeb/Common/MarkupServices.ashx' specifying the 'DownloadExportedP

Newforma Info Exchange (NIX) uses a hard-coded key to encrypt certain query parameters. Some encrypted parameter values

Newforma Project Center Server (NPCS) accepts serialized .NET data via the '/ProjectCenter.rem' endpoint on 9003/tcp, al

Newforma Info Exchange (NIX) accepts serialized .NET data via the '/remoteweb/remote.rem' endpoint, allowing a remote, u

D-Link Nuclias Connect firmware versions < 1.3.1.4 contain a directory traversal vulnerability within /api/web/dnc/globa

A vulnerability was found in code-projects E-Commerce Website 1.0. Impacted is an unknown function of the file /pages/us

A vulnerability has been found in projectworlds Gate Pass Management System 1.0. This issue affects some unknown process

A flaw has been found in code-projects Simple Leave Manager 1.0. This vulnerability affects unknown code of the file /us

A vulnerability was detected in Campcodes Online Learning Management System 1.0. This affects an unknown part of the fil

AVTECH devices that include the CloudSetup.cgi management endpoint are vulnerable to authenticated OS command injection.

SourceCodester Pet Grooming Management Software 1.0 is vulnerable to SQL Injection in admin/view_customer.php via the ID

A security vulnerability has been detected in Portabilis i-Educar up to 2.9.10. Affected by this issue is some unknown f

A weakness has been identified in code-projects Courier Management System 1.0. Affected by this vulnerability is an unkn

New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. An authenticate

BigBlueButton is an open-source virtual classroom. In versions prior to 3.0.13, the "Shared Notes" feature contains a St

An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® softwar

An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to

A vulnerability was identified in code-projects Online Complaint Site 1.0. This impacts an unknown function of the file

In xckk v9.6, there is a SQL injection vulnerability in which the cond parameter in notice/list is not securely filtered

An infinite loop issue in Amazon.IonDotnet library versions <v1.3.2 may allow a threat actor to cause a denial of servic

A vulnerability was determined in code-projects Student Result Manager 1.0. This affects an unknown function of the file

A vulnerability was found in Tenda W12 3.0.0.6(3948). The impacted element is the function wifiScheduledSet of the file

code-projects Simple Scheduling System 1.0 is vulnerable to Cross Site Scripting (XSS) via the Subject Description field

In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in address/list is not securely filt

A password aging vulnerability in the RADIUS client of Juniper Networks Junos OS and Junos OS Evolved allows an authenti

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Network

Multiple instances of an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vu

An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Ne