2025

Rack is a modular Ruby web server interface. In versions prior to 2.2.19, 3.1.17, and 3.2.2, ``Rack::Multipart::Parser`

Rack is a modular Ruby web server interface. In versions prior to 2.2.19, 3.1.17, and 3.2.2, `Rack::Multipart::Parser` b

A weakness has been identified in SourceCodester Hotel and Lodge Management System 1.0. The impacted element is an unkno

A potential security vulnerability has been identified in HP Sure Start’s protection of the Intel Flash Descriptor in ce

vLLM is an inference and serving engine for large language models (LLMs). Before version 0.11.0rc2, the API key support

CubeAPM nightly-2025-08-01-1 allow unauthenticated attackers to inject arbitrary log entries into production systems via

Multiple OS command injection vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A

Multiple OS command injection vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A

Multiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b190912. A spec

Multiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b190912. A spec

Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b19

Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b19

Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b19

Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b19

A denial of service vulnerability exists in the ModbusTCP server functionality of OpenPLC _v3 a931181e8b81e36fadf7b74d5c

Clash Verge Rev thru 2.2.3 (fixed in 2.3.0) forces the installation of system services(clash-verge-service) by default a

A format string vulnerability exists in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially craf

Insufficiently Protected Credentials in the Crowdstrike connector can lead to Crowdstrike credentials being leaked. A ma

Improper Neutralization of Input During Web Page Generation in Kibana can lead to Stored XSS via case file upload.

A security flaw has been discovered in SourceCodester Hotel and Lodge Management System 1.0. The affected element is an

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ABB EIBPORT

A path traversal vulnerability was discovered in the Time Machine functionality due to missing validation of two input p

A SQL Injection vulnerability was discovered in the CLI functionality due to improper validation of an input parameter.

A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter

A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter

A SQL Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input p

Insecure Direct Object Reference (IDOR) in Negotiator v3.15.2 from Biobanking and Biomolecular Resources - European Rese

Stored Cross-Site Scripting (XSS) in Biobanking and Biomolecular Resources Negotiator v3.15.2 - European Research Infras

An access control vulnerability was discovered in the CLI functionality due to a specific access restriction not being p

A client-side path traversal vulnerability was discovered in the web management interface front-end due to missing valid

A vulnerability was identified in code-projects Simple Food Ordering System 1.0. Impacted is an unknown function of the

A weakness has been identified in PHPGurukul Cyber Cafe Management System 1.0. Affected by this vulnerability is an unkn

A security flaw has been discovered in Tenda AC15 15.03.05.18. Affected is an unknown function of the file /goform/saveA

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Callvision Healthc

A vulnerability was identified in Tenda AC15 15.03.05.18. This impacts an unknown function of the file /goform/setNotUpg

A vulnerability was determined in Tenda AC15 15.03.05.18. This affects an unknown function of the file /goform/fast_sett

A vulnerability was found in Tenda AC15 15.03.05.18. The impacted element is an unknown function of the file /goform/Set

A vulnerability has been found in Tenda AC20 up to 16.03.08.12. The affected element is the function sscanf of the file

A vulnerability was detected in jakowenko double-take up to 1.13.1. The impacted element is the function app.use of the

A security vulnerability has been detected in code-projects Simple Banking System 1.0. The affected element is an unknow

The WP Reset plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including,

The Featured Image from URL (FIFU) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a post's Featur

A weakness has been identified in code-projects Simple Banking System 1.0. Impacted is an unknown function of the file /

A security flaw has been discovered in code-projects Simple Banking System 1.0. This issue affects some unknown processi

A vulnerability was found in Tenda AC23 up to 16.03.07.52. Affected by this issue is the function sscanf of the file /go

A vulnerability has been found in UTT 1250GW up to v2v3.2.2-200710. Affected by this vulnerability is the function strcp

A flaw has been found in code-projects Online Hotel Reservation System 1.0. Affected is an unknown function of the file

A vulnerability was detected in code-projects Online Hotel Reservation System 1.0. This impacts an unknown function of t

The Admin and Customer Messages After Order for WooCommerce: OrderConvo WordPress plugin before 14 does not validate the

Versions of the package pdfmake from 0.3.0-beta.1 and before 0.3.0-beta.17 are vulnerable to Allocation of Resources Wit