2025

Apollo Studio Embeddable Explorer & Embeddable Sandbox are website embeddable software solutions from Apollo GraphQL. Pr

A security vulnerability has been detected in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unkno

A weakness has been identified in Portabilis i-Educar up to 2.10. Affected is an unknown function of the file /module/Ap

A security flaw has been discovered in Tencent WeKnora 0.1.0. This impacts the function testEmbeddingModel of the file /

A vulnerability was identified in WAYOS LQ_04, LQ_05, LQ_06, LQ_07 and LQ_09 22.03.17. This affects an unknown function

In a hardened Docker environment, with Enhanced Container Isolation ( ECI https://docs.docker.com/enterprise/security/ha

PiranhaCMS 12.0 allows stored XSS in the Text content block of Standard and Standard Archive Pages via /manager/pages, e

A vulnerability has been found in itsourcecode Open Source Job Portal 1.0. Affected by this issue is some unknown functi

A vulnerability was detected in code-projects Hostel Management System 1.0. Affected by this issue is some unknown funct

A security vulnerability has been detected in Campcodes Computer Sales and Inventory System 1.0. Affected by this vulner

A weakness has been identified in itsourcecode Online Clinic Management System 1.0. Affected is an unknown function of t

A security flaw has been discovered in code-projects E-Commerce Website 1.0. This impacts an unknown function of the fil

A vulnerability was identified in code-projects E-Commerce Website 1.0. This affects an unknown function of the file /pa

A vulnerability was determined in Jinher OA 2.0. The impacted element is an unknown function of the file /c6/Jhsoft.Web.

In DOXENSE WATCHDOC before 6.1.1.5332, Deserialization of Untrusted Data can lead to remote code execution through the .

Notepad++ v8.8.3 has a DLL hijacking vulnerability, which can replace the original DLL file to execute malicious code. N

Wavlink M86X3A_V240730 contains a buffer overflow vulnerability in the /cgi-bin/ExportAllSettings.cgi file. The vulnerab

An issue in Aranda PassRecovery v1.0 allows attackers to enumerate valid user accounts in Active Directory via sending a

A vulnerability was found in Dibo Data Decision Making System up to 2.7.0. The affected element is the function download

A vulnerability has been found in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. Impacted

A flaw has been found in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. This issue affects

SonarQube Server and Cloud is a static analysis solution for continuous code quality and security inspection. A command

An issue was discovered in DIR-823 firmware 20250416. There is an RCE vulnerability in the set_cassword settings interfa

Sourcecodester Employee Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via 'Add Designation.'

A flaw has been found in DataTables up to 1.10.13. The affected element is an unknown function of the file /examples/res

A vulnerability was detected in Tutorials-Website Employee Management System up to 611887d8f8375271ce8abc704507d46340837

A weakness has been identified in givanz Vvveb up to 1.0.7.2. This vulnerability affects unknown code. Executing manipul

Flag Forge is a Capture The Flag (CTF) platform. From versions 2.0.0 to before 2.3.2, the public endpoint /api/user/[use

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Archit

Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c.

In DOXENSE WATCHDOC before 6.1.0.5094, private user puk codes can be disclosed for Active Directory registered users (th

Mercusys MW305R 3.30 and below is has a Transport Layer Security (TLS) certificate private key disclosure.

A security flaw has been discovered in givanz Vvveb up to 1.0.7.2. This affects an unknown part of the component Image H

A vulnerability was identified in givanz Vvveb up to 1.0.7.2. Affected by this issue is some unknown functionality of th

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Webbeyaz We

Todoist v8484 contains a stored cross-site scripting (XSS) vulnerability in the avatar upload functionality. The applica

In DriveLock 24.1.4 before 24.1.5, 24.2.5 before 24.2.6, and 25.1.2 before 25.1.4, attackers can gain elevated privilege

IBM Cognos Controller 11.0.0 through 11.0.1, and IBM Controller 11.1.0 through 11.1.1 could allow an attacker to obtain

IBM Aspera HTTP Gateway 2.0.0 through 2.3.1 stores sensitive information in clear text in easily obtainable files which

A vulnerability was determined in givanz Vvveb up to 1.0.7.2. Affected by this vulnerability is an unknown functionality

A vulnerability has been found in Total.js CMS up to 19.9.0. This impacts an unknown function of the component Files Men

A flaw has been found in Four-Faith Water Conservancy Informatization Platform 1.0. This affects an unknown function of

A vulnerability was detected in OGRECave Ogre up to 14.4.1. The impacted element is the function Ogre::LogManager::strea

A security vulnerability has been detected in kalcaddle kodbox up to 1.61.09. The affected element is the function fileO

A weakness has been identified in OGRECave Ogre up to 14.4.1. Impacted is the function STBIImageCodec::encode of the fil

In Seagate Toolkit on Windows a vulnerability exists in the Toolkit Installer prior to versions 2.35.0.6 where it attemp

A flaw was found in the live query subscription mechanism of the database engine. This vulnerability allows record or gu

Insertion of Sensitive Information Into Sent Data vulnerability in Vimesoft Information Technologies and Software Inc. V

A security flaw has been discovered in OGRECave Ogre up to 14.4.1. This issue affects the function STBIImageCodec::encod

A vulnerability was identified in BehaviorTree up to 4.7.0. This vulnerability affects the function XMLParser::PImpl::lo