2025

IBM Watson Studio 4.0 through 5.2.0 on Cloud Pak for Data is vulnerable to cross-site scripting. This vulnerability allo

Dell BSAFE Crypto-J generates an error message that includes sensitive information about its environment and associated

A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Fi

Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Softwar

A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secu

A security vulnerability has been detected in UTT 1200GW and 1250GW up to 3.0.0-170831/3.2.2-200710. This vulnerability

A security flaw has been discovered in geyang ml-logger up to acf255bade5be6ad88d90735c8367b28cbe3a743. Affected by this

A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired

Dell BSAFE Micro Edition Suite, versions prior to 5.0.2.3 contain an Out-of-bounds Write vulnerability. An unauthenticat

Monkeytype is a minimalistic and customizable typing test. In versions 25.36.0 and prior, improper handling of user inpu

Horilla is a free and open source Human Resource Management System (HRMS). Prior to version 1.4.0, there is a stored XSS

Rack is a modular Ruby web server interface. Prior to version 2.2.18, Rack::QueryParser enforces its params_limit only f

Project Gardener implements the automated management and operation of Kubernetes clusters as a service. Code injection m

An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when per

PyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py even though it lacks full consistency wit

In PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of-bounds values of the "other" a

In PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent results.

In PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error.

In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect results.

Ericsson Indoor Connect 8855 contains a vulnerability where server-side security can be bypassed in the client which if

Ericsson Indoor Connect 8855 contains a missing authorization vulnerability which if exploited can allow access to the s

Ericsson Indoor Connect 8855 contains an improper input validation vulnerability which if exploited can allow an attacke

Rapid7 Appspider Pro versions below 7.5.021, suffer from a broken access control vulnerability in the application's conf

Dell PowerScale OneFS, versions 9.5.0.0 through 9.11.0.0, contains an exposure of sensitive information to an unauthoriz

Ericsson Indoor Connect 8855 contains a command injection vulnerability which if exploited can result in an escalation o

A vulnerability was identified in geyang ml-logger up to acf255bade5be6ad88d90735c8367b28cbe3a743. Affected by this vuln

A vulnerability was determined in geyang ml-logger up to acf255bade5be6ad88d90735c8367b28cbe3a743. Affected is the funct

A vulnerability was found in Changsha Developer Technology iView Editor up to 1.1.1. This impacts an unknown function of

iMonitor EAM 9.6394 ships with default administrative credentials that are also displayed within the management client’s

iMonitor EAM 9.6394 installs a system service (eamusbsrv64.exe) that runs with NT AUTHORITY\SYSTEM privileges. This serv

Rob--W cors-anywhere instances configured as an open proxy allow unauthenticated external users to induce the server to

ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup. This

The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev and various parser tags for em

ADB MCP Server is a MCP (Model Context Protocol) server for interacting with Android devices through ADB. In versions 0.

git-commiters is a Node.js function module providing committers stats for their git repository. Prior to version 0.1.2,

Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.130.1, the project's OIDC redirec

Dify is an open-source LLM app development platform. In version 1.8.1, a broken access control vulnerability on the /con

apidoc-core is the core parser library to generate apidoc result following the apidoc-spec. A Prototype Pollution vulner

Ericsson Indoor Connect 8855 contains an SQL injection vulnerability which if exploited can result in unauthorized discl

A prototype pollution in the lib.set function of dref v0.1.2 allows attackers to cause a Denial of Service (DoS) via sup

A vulnerability has been found in MikroTik RouterOS 7. This affects the function parse_json_element of the file /rest/ip

iMonitor EAM 9.6394 transmits communication between the EAM client agent and the EAM server, as well as between the EAM

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PROLIZ Comp

A flaw has been found in Sistemas Pleno Gestão de Locação up to 2025.7.x. The impacted element is an unknown function of

A vulnerability was detected in nuz007 smsboom up to 01b2f35bbbc23f3e0f60f38ca0e3d1b286f8d674. The affected element is a

A security vulnerability has been detected in nuz007 smsboom up to 01b2f35bbbc23f3e0f60f38ca0e3d1b286f8d674. Impacted is

A weakness has been identified in yi-ge get-header-ip up to 589b23d0eb0043c310a6a13ce4bbe2505d0d0b15. This issue affects

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Saysis Computer Systems

SQL injection vulnerability in Prevengos v2.44 by Nedatec Consulting. This vulnerability allows an attacker to retrieve,

This vulnerability exists in the Syrotech SY-GPON-2010-WADONT router due to improper access control in its FTP service.