2025

Lantronix Device installer is vulnerable to XML external entity (XXE) attacks in configuration files read from the netwo

A reflected cross-site scripting (XSS) vulnerability exists in the authentication endpoint of multiple WSO2 products due

An improper authentication vulnerability exists in WSO2 Identity Server 7.0.0 due to an implementation flaw that allows

A reflected cross-site scripting (XSS) vulnerability exists in the sub-organization login flow of WSO2 Identity Server 7

Predictable filename vulnerabilities in ASPECT may expose sensitive information to a potential attacker if administrator

Weak password storage vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue affects

Large content vulnerabilities are present in ASPECT exposing a device to disk overutilization on a system if administrat

Stored Cross Site Scripting vulnerabilities exist in ASPECT if administrator creden-tials become compromisedThis issue a

SSL Verification Bypass vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue affect

Serialized configuration information may be disclosed during device commissioning while using ASPECT's configuration too

Sensitive device logger information in ASPECT may be exposed if administrator credentials become compromisedThis issue a

Log injection vulnerabilities in ASPECT provide attacker access to inject malicious browser scripts if administrator cre

Large content vulnerabilities are present in ASPECT exposing a device to disk overutilization on a system if administrat

Device commissioning parameters in ASPECT may be modified by an external source if administrative credentials become com

DLL's are not digitally signed when loaded in ASPECT's configuration toolset exposing the application to binary planting

Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.119 and 25.0.20

Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.119 and 25.0.20

Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.119 and 25.0.20

wire-webapp is the web application for the open-source messaging service Wire. A bug fix caused a regression causing an

File upload vulnerabilities are present in ASPECT if session administrator credentials become compromised This issue aff

Exposure of file path, file size or file existence vulnerabilities in ASPECT provide attackers access to file system inf

File upload and execute vulnerabilities in ASPECT allow PHP script injection if session administrator credentials become

An Unchecked Loop Condition in ASPECT provides an attacker the ability to maliciously consume system resources if sessio

wire-webapp is the web application for the open-source messaging service Wire. A change caused a regression resulting in

Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. Starting in ve

IBM Aspera Faspex 5.0.0 through 5.0.12 is vulnerable to HTML injection. A remote attacker could inject malicious HTML co

A request smuggling vulnerability identified within Pingora’s proxying framework, pingora-proxy, allows malicious HTTP r

When pglogical attempts to replicate data, it does not verify it is using a replication connection, which means a user w

CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

CWE-203: Observable Discrepancy

Packages downloaded by Checkmk's automatic agent updates on Linux and Solaris have incorrect permissions in Checkmk < 2.

An issue was discovered in Infoblox NETMRI before 7.6.1. Authentication Bypass via a Hardcoded credential can occur.

An issue has been discovered in GitLab CE/EE affecting all versions from 17.1 before 17.10.7, 17.11 before 17.11.3, and

An issue has been discovered in GitLab CE/EE affecting all versions from 16.8 before 17.10.7, 17.11 before 17.11.3, and

Infoblox NETMRI before 7.6.1 has a vulnerability allowing remote authenticated users to read arbitrary files with root a

An issue has been discovered in GitLab CE/EE affecting all versions from 11.1 before 17.10.7, 17.11 before 17.11.3, and

An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 befor

Issue summary: Use of -addreject option with the openssl x509 application adds a trusted use instead of a rejected use f

An issue has been discovered in GitLab CE/EE affecting all versions from 10.2 before 17.10.7, 17.11 before 17.11.3, and

An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 befor

Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX

Improper Output Neutralization for Logs vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niaga

Improper Handling of Windows ::DATA Alternate Data Stream vulnerability in Tridium Niagara Framework on Windows, Tridium

Improper Use of Validation Framework vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara

Observable Response Discrepancy vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enter

Missing Cryptographic Step vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise

Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on Windows, Tridium Nia

Zohocorp ManageEngine ServiceDesk Plus MSP and SupportCenter Plus versions below 14920 are vulnerable to authenticated L

The Hot Random Image plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.9.2 vi

The Hot Random Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’ parameter in all v