2025

HCL MyXalytics is affected by the use of vulnerable/outdated versions which can expose the application to known security

HCL MyXalytics: 6.6.  is affected by Mass Assignment vulnerability. Mass Assignment occurs when user input is automatica

HCL MyXalytics v6.6 is affected by an HTML Injection. This issue occurs when untrusted input is included in the output w

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system ver

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system ver

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attack

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user ac

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user

An out-of-bounds write vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user accoun

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a re

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user ac

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user ac

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user ac

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user ac

Cursor is a code editor built for programming with AI. In versions 1.7 and below, a vulnerability in the way Cursor CLI

Cursor is a code editor built for programming with AI. In versions 1.7 and below, automatic loading of project-specific

HCL MyXalytics product is affected by Cross Site Scripting vulnerability in the web application. This can allow the exec

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a re

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a re

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a re

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a re

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, the

An SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, the

Cursor is a code editor built for programming with AI. In versions 1.7 and below, when MCP uses OAuth authentication wit

Cursor is a code editor built for programming with AI. Versions 1.6 and below are vulnerable to Remote Code Execution (R

An issue in DirectAdmin v1.680 allows unauthorized attackers to manipulate the page layout and replace the legitimate lo

nopCommerce 4.40.3 is vulnerable to XSS in the Product Name at /Admin/Product/Edit/[id]. Each time a user views the prod

MotionEye v0.43.1b4 and before is vulnerable to OS Command Injection in configuration parameters such as image_file_name

A SQL injection vulnerability was discovered in the /articles endpoint of MyClub 0.5, affecting the query parameters Con

A TCL Smart TV running a vulnerable UPnP/DLNA MediaRenderer implementation is affected by a remote, unauthenticated Deni

TCL 65C655 Smart TV, running firmware version V8-R75PT01-LF1V269.001116 (Android TV, Kernel 5.4.242+), is vulnerable to

OpenPLC Runtime v3 contains an input validation flaw in the /upload-program-action endpoint: the epoch_time field suppli

The module will parse a <pattern> node which is not a child of a structural node. The node will be deleted after creatio

When the module renders a Svg file that contains a <pattern> element, it might end up rendering it recursively leading t

A stored Cross-Site Scripting (XSS) vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exis

A stored Cross-Site Scripting (XSS) vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exis