2025

Incorrect Default Permissions vulnerability in The Wikimedia Foundation Mediawiki - GrowthExperiments Extension allows R

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimed

Allocation of Resources Without Limits or Throttling vulnerability in The Wikimedia Foundation Mediawiki - CirrusSearch

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimed

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimed

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimed

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in The Wikimedia Foun

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimed

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimed

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimed

Due to improper input validation, a buffer overflow vulnerability is present in Zigbee EZSP Host Applications. If the

Git LFS is a Git extension for versioning large files. In Git LFS versions 0.5.2 through 3.7.0, when populating a Git re

Incorrect Authorization vulnerability in ash-project ash allows Authentication Bypass. This vulnerability is associated

An Use of Hard-coded Credentials vulnerability has been identified in Moxa’s network security appliances and routers. Th

An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and rou

An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and rou

An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and rou

An Incorrect Authorization vulnerability has been identified in Moxa’s network security appliances and routers. A flaw i

In Xpdf 4.05 (and earlier), a PDF object loop in a CMap, via the "UseCMap" entry, leads to infinite recursion and a stac

Drawing-Captcha APP provides interactive, engaging verification for Web-Based Applications. The vulnerability is a Host

The Angular SSR is a server-rise rendering tool for Angular applications. The vulnerability is a Server-Side Request For

Strapi uses JSON Web Tokens (JWT) for authentication. After logout or account deactivation, the JWT is not invalidated,

There is an incomplete cleanup vulnerability in Qt Network's Schannel support on Windows which can lead to a Denial of S

SQL injection in Sergestec's SISTICK v7.2. This vulnerability allows an attacker to retrieve, create, update, and delete

go-witness and witness are Go modules for generating attestations. In go-witness versions 0.8.6 and earlier and witness

In versions before 20.0.2, it was found that --disallow-code-generation-from-strings is not sufficient for isolating unt

sveltekit-superforms makes SvelteKit forms a pleasure to use. sveltekit-superforms v2.27.3 and prior are susceptible to

mailgen is a Node.js package that generates responsive HTML e-mails for sending transactional mail. Mailgen versions thr

Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research

Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research

Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.128.Final and 4.2.7.Final

In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix blk_mq_tags double free while nr_reques

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix race condition to UAF in snd_u

In the Linux kernel, the following vulnerability has been resolved: media: b2c2: Fix use-after-free causing by irq_chec

In the Linux kernel, the following vulnerability has been resolved: media: i2c: tc358743: Fix use-after-free bugs cause

In the Linux kernel, the following vulnerability has been resolved: mm: swap: check for stable address space before ope

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix NULL dereference in ath11k_qmi_m3

In the Linux kernel, the following vulnerability has been resolved: net: tun: Update napi->skb after XDP process The s

In the Linux kernel, the following vulnerability has been resolved: nexthop: Forbid FDB status change while nexthop is

In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Fix slab-out-of-bounds in _parse_i

Huijietong Cloud Video Platform contains a path traversal vulnerability that allows an unauthenticated attacker can supp

BYTEVALUE Intelligent Flow Control Router contains a command injection vulnerability via the /goform/webRead/open endpoi

SmartBI V8, V9, and V10 contain an unrestricted file upload vulnerability via the RMIServlet request handling logic. Und

Ruijie RG-UAC Application Management Gateway contains a command injection vulnerability via the 'nmc_sync.php' interface

VestaCP commit a3f0fa1 (2018-05-31) up to commit ee03eff (2018-06-13) contain embedded malicious code that resulted in a

Valve's Source SDK (source-sdk-2013)'s ragdoll model parsing logic contains a stack-based buffer overflow vulnerability.

DBLTek GoIP devices (models GoIP 1, 4, 8, 16, and 32) contain an undocumented vendor backdoor in the Telnet administrati

The WordPress plugin is-human <= v1.4.2 contains an eval injection vulnerability in /is-human/engine.php that can be tri

pwn.college DOJO is an education platform for learning cybersecurity. Prior to commit 467db0b9ea0d9a929dc89b41f6eb59f7cf