2025

A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as critical. This affects an unknown part of

Missing Authorization vulnerability in fs-code FS Poster fs-poster.This issue affects FS Poster: from n/a through <= 6.5

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Don't skip on Stopped - Length Invalid

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Apply the link chain quirk on NEC isoc e

In the Linux kernel, the following vulnerability has been resolved: memstick: rtsx_usb_ms: Fix slab-use-after-free in r

In the Linux kernel, the following vulnerability has been resolved: bcachefs: bch2_ioctl_subvolume_destroy() fixes bch

A vulnerability was found in PCMan FTP Server 2.0.7 and classified as critical. Affected by this issue is some unknown f

A vulnerability has been found in PCMan FTP Server 2.0.7 and classified as critical. Affected by this vulnerability is a

A vulnerability, which was classified as critical, was found in PCMan FTP Server 2.0.7. Affected is an unknown function

A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unk

A: Improper Neutralization of Input During Web Page Generation vulnerability in SUSE rancher allows a malicious actor to

Interface exposure vulnerability in the mobile application (com.transsion.carlcare) may lead to information leakage ris

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GoodLayers Tourmas

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dzynit SEO Tools s

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in scottwallick Easy

Cross Site Scripting vulnerability in Nagios Log Server v.2024R1.3.1 allows a remote attacker to execute arbitrary code

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Missing Authorization vulnerability in NotFound Unlimited Timeline unlimited-timeline allows Accessing Functionality Not

Missing Authorization vulnerability in Crocoblock JetMenu jet-menu allows Accessing Functionality Not Properly Constrain

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Gurmehub Kargo Ent

Cross-Site Request Forgery (CSRF) vulnerability in looswebstudio Arkhe arkhe allows PHP Local File Inclusion.This issue

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in caalami Advanced C

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in NotFound Macro Calculator wi

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Global Ga

Jellyfin is an open source self hosted media server. Versions before 10.10.7 are vulnerable to argument injection in FFm

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.26,

Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Page a

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Core). Supported versions that

Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: XML Services). Supported versions that

Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Frame

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version th

Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Search and Register Users).

Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: User Management). Supported versions

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are aff

Vulnerability in the RAS Security component of Oracle Database Server. Supported versions that are affected are 19.3-19

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is a

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: EMC). Sup

An authenticated attacker can achieve stored XSS by exploiting improper sanitization of the plant name value while addin

A maliciously crafted DWG file, when parsed through Autodesk Revit, can cause a Stack-Based Buffer Overflow vulnerabilit

An attacker can change registered email addresses of other users and take over arbitrary accounts.

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE

A maliciously crafted PDF file, when linked or imported into Autodesk applications, can force a Heap-Based Overflow vuln

A maliciously crafted PDF file, when parsed through Autodesk applications, can force a Memory Corruption vulnerability.

A maliciously crafted DWG file, when parsed through certain Autodesk applications, can force an Out-of-Bounds Write vuln

A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can force a Heap-Based Overf

A maliciously crafted RCS file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A ma

A maliciously crafted PDF file, when linked or imported into Autodesk applications, can force a Heap-Based Overflow vuln

make-initrd-ng is a tool for copying binaries and their dependencies. Local privilege escalation affecting all NixOS use

Jellyfin is an open source self hosted media server. In versions 10.9.0 to before 10.10.7, the /System/Restart endpoint