2025

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code exe

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code exe

1Panel versions 1.10.33 - 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the Change Username functi

Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting ser

An improper permissions vulnerability was reported in Lenovo Baiying Client that could allow a local authenticated user

A potential DLL hijacking vulnerability was reported in Lenovo One Client during an internal security assessment that co

A DLL hijacking vulnerability was reported in the Lenovo App Store and Lenovo Browser applications that could allow a lo

Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code.

Due to improper BLE security configurations on the device's GATT server, an adjacent unauthenticated attacker can read a

A local privilege escalation vulnerability in Bitdefender Total Security versions prior to 27.0.47.241 allows low-privil

Denial of Service vulnerability in Apache Struts, file leak in multipart request processing causes disk exhaustion. Thi

The Video Merchant plugin for WordPress is vulnerable to Cross-Site Request Forgery in version <= 5.0.4. This is due to

Incorrect Use of Privileged APIs vulnerability in NomySoft Information Technology Training and Consulting Inc. Nomysem a

The HandL UTM Grabber / Tracker WordPress plugin before 2.8.1 does not sanitize and escape a parameter before outputting

The HandL UTM Grabber / Tracker WordPress plugin before 2.8.1 does not sanitize and escape a parameter before outputting

The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Path Traversal in all versions up to, and in

Filament is a collection of full-stack components for accelerated Laravel development. Versions 4.0.0 through 4.3.0 cont

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Versions 3.5.4 and below

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Restriction of XML External Entity

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Input Validation vulnerability that

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by a Deserialization of Untrusted Data vulnerabili

ZITADEL is an open-source identity infrastructure tool. Versions 4.0.0-rc.1 through 4.7.0 are vulnerable to DOM-Based XS

NiceGUI is a Python-based UI framework. Versions 3.3.1 and below are vulnerable to directory traversal through the App.

fetch-mcp v1.0.2 and before is vulnerable to Server-Side Request Forgery (SSRF) vulnerability, which allows attackers to

SiYuan is self-hosted, open source personal knowledge management software. Versions 0.0.0-20251202123337-6ef83b42c7ce an

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Version

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by

Docker Desktop diagnostics bundles were found to include expired Hub PATs in log output due to error object serializatio

MiniDVBLinux 5.4 contains an arbitrary file disclosure vulnerability that allows attackers to read sensitive system file

MiniDVBLinux 5.4 contains an unauthenticated configuration download vulnerability that allows remote attackers to access

Selea Targa IP OCR-ANPR Camera contains a cross-site request forgery vulnerability that allows attackers to create admin

STVS ProVision 5.9.10 contains a cross-site request forgery vulnerability that allows attackers to perform actions with

OpenBMCS 2.4 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive

OpenBMCS 2.4 contains an unauthenticated SSRF vulnerability that allows attackers to bypass firewalls and initiate servi

OpenBMCS 2.4 allows an attacker to escalate privileges from a read user to an admin user by manipulating permissions and

Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation and client-server communi

Ladybug adds message-based debugging, unit, system, and regression testing to Java applications. Versions prior to 3.0-2

A vulnerability was determined in itsourcecode Student Management System 1.0. This affects an unknown part of the file /

Cross Site Request Forgery (CSRF) vulnerability in AllskyTeam AllSky v2024.12.06_06 allows remote attackers to cause a d

A vulnerability was found in itsourcecode Student Management System 1.0. Affected by this issue is some unknown function

A vulnerability has been found in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unkno

A flaw has been found in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /new_ad

HP System Event Utility and Omen Gaming Hub might allow execution of certain files outside of their restricted paths. T

OpenSIS 9.2 and below is vulnerable to Incorrect Access Control in Student.php, which allows an authenticated low-privil

DNG SDK versions 1.7.0 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposur

DNG SDK versions 1.7.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory

DNG SDK versions 1.7.0 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.