2025

Luxion KeyShot PVS File Parsing Access of Uninitialized Pointer Remote Code Execution Vulnerability. This vulnerability

Luxion KeyShot SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote att

Luxion KeyShot Viewer KSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerabilit

XWiki is a generic wiki platform. In versions starting from 1.6-milestone-1 to before 15.10.16, 16.4.6, and 16.10.1, it

Redis is an open source, in-memory database that persists on disk. In versions starting at 2.6 and prior to 7.4.3, An un

The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to product price manipulation in all versions up t

The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions

Missing authorization vulnerability in synocopy in Synology DiskStation Manager (DSM) before 7.1.1-42962-8, 7.2.1-69057-

Francois Jacquet RosarioSIS v12.0.0 was discovered to contain a content spoofing vulnerability in the Theme configuratio

DPMAdirektPro 4.1.5 is vulnerable to DLL Hijacking. It happens by placing a malicious DLL in a directory (in the absence

Codemers KLIMS 1.6.DEV allows Python code injection. A user can provide Python code as an input value for a parameter or

Codemers KLIMS 1.6.DEV lacks a proper access control mechanism, allowing a normal KLIMS user to perform all the actions

TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2c

TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2c

TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2c

An issue in UPF in Open5GS UPF versions up to v2.7.2 results an assertion failure vulnerability in PFCP session paramete

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon BAM (Bool

TOTOLINK A810R V4.1.2cu.5182_B20201026 was discovered to contain a stack overflow via the startTime and endTime paramete

NVIDIA NeMo Framework contains a vulnerability where a user could cause an improper control of generation of code by rem

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause an improper limitation of a pathname to a r

NVIDIA NeMo Framework contains a vulnerability where a user could cause a deserialization of untrusted data by remote co

An issue in OpenResty lua-nginx-module v.0.10.26 and before allows a remote attacker to conduct HTTP request smuggling v

In Rollback Rx Professional 12.8.0.0, the driver file shieldm.sys allows local users to cause a denial of service becaus

CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute comman

TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.51

TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.51

NEXTU FLETA AX1500 WIFI6 Router v1.0.3 was discovered to contain a stack overflow via the url parameter at /boafrm/formF

A directory traversal vulnerability in forkosh Mime TeX before version 1.77 allows attackers on Windows systems to read

Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions <2.3.0p29, <2.2.0p41 and <=2.1.0p49

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kofi Mokome Messag

Cross-Site Request Forgery (CSRF) vulnerability in e4jvikwp VikRestaurants vikrestaurants allows Cross Site Request Forg

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bob Watu Quiz watu

Cross-Site Request Forgery (CSRF) vulnerability in codepeople Appointment Booking Calendar appointment-booking-calendar

Improper Input Validation vulnerability in Apache Kvrocks. The SETRANGE command didn't check if the `offset` input is a

The User Registration & Membership WordPress plugin before 4.1.3 does not properly validate data in an AJAX action when

The Front End Users WordPress plugin through 3.2.32 does not sanitise and escape a parameter before outputting it back i

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to arbitrary file uploads due to m

Hitachi Ops Center Common Services within Hitachi Ops Center Analyzer viewpoint OVF contains an authentication credentia

An incorrect permission assignment vulnerability in the PostgreSQL commands of the Zyxel USG FLEX H series uOS firmware

A vulnerability, which was classified as critical, was found in H3C GR-3000AX up to V100R006. Affected is the function E

A vulnerability classified as critical has been found in markparticle WebServer up to 1.0. This affects an unknown part

A vulnerability was found in markparticle WebServer up to 1.0. It has been rated as critical. Affected by this issue is

A vulnerability was found in markparticle WebServer up to 1.0. It has been declared as critical. Affected by this vulner

ManageWiki is a MediaWiki extension allowing users to manage wikis. Versions before commit f504ed8, are vulnerable to SQ

A vulnerability in the HPE Performance Cluster Manager (HPCM) GUI could allow an attacker to bypass authentication.

The quarantine - restore function in Qi-ANXIN Tianqing Endpoint Security Management System v10.0 allows user to restore

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

The FileWave Windows client before 16.0.0, in some non-default configurations, allows an unprivileged local user to esca

When reading binary Ion data through Amazon.IonDotnet using the RawBinaryReader class, Amazon.IonDotnet does not check t