2025

Indian Bank IndSMART Android App 3.8.1 is vulnerable to Missing SSL Certificate Validation in NuWebViewActivity.

Sunshine is a self-hosted game stream host for Moonlight. Prior to version 2025.923.33222, the Windows service SunshineS

A heap-buffer-overflow vulnerability exists in the tcpliveplay utility of the tcpreplay-4.5.1. When a crafted pcap file

An issue in PocketVJ CP PocketVJ-CP-v3 pvj 3.9.1 allows remote attackers to execute arbitrary code via the submit_size.p

Use After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation.This issue affects

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to v

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to v

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to v

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to v

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to v

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to v

Insertion of Sensitive Information Into Sent Data vulnerability in WordPress allows Retrieve Embedded Sensitive Data. Th

OS Command injection vulnerability in Tenda AC9 1.0 was discovered to contain a command injection vulnerability via the

Free5gc 4.0.1 is vulnerable to Buffer Overflow. The AMF incorrectly validates the 5GS mobile identity, resulting in slic

A null pointer dereference occurs in the function break_word_for_overflow_wrap() in MuPDF 1.26.4 when rendering a malfor

Improper Input Validation vulnerability in TOTOLINK X6000R allows Flooding.This issue affects X6000R: through V9.4.0cu.1

Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation.Thi

Buffer Over-read, Off-by-one Error vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation,

SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the execSqlFile fu

SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the execSqlFile fu

Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation.Thi

An authentication bypass vulnerability exists in multiple WSO2 products when FIDO authentication is enabled. When a user

A reflected cross-site scripting (XSS) vulnerability exists in the account registration flow of WSO2 Identity Server due

A flaw was found in Libtiff. This vulnerability is a "write-what-where" condition, triggered when the library processes

Cross-site scripting (XSS) vulnerability in YzmCMS thru 7.3 via the referer header in the register page.

A cross-tenant authentication vulnerability exists in multiple WSO2 products due to improper cryptographic design in Ada

A content spoofing vulnerability exists in multiple WSO2 products due to improper error message handling. Under certain

An authenticated remote code execution (RCE) vulnerability exists in multiple WSO2 products due to improper input valida

A stored cross-site scripting (XSS) vulnerability in the Admin Log Viewer of S-Cart <=10.0.3 allows a remote authenticat

An authenticated stored cross-site scripting (XSS) vulnerability exists in multiple WSO2 products due to improper valida

Uncontrolled Search Path Element vulnerability in Salesforce Salesforce CLI on Windows allows Replace Trusted Executable

A maliciously crafted RFA file, when parsed through Autodesk Revit, can force a Type Confusion vulnerability. A maliciou

The huggingface/transformers library, versions prior to 4.53.0, is vulnerable to Regular Expression Denial of Service (R

A vulnerability has been found in Coinomi up to 1.7.6. This issue affects some unknown processing. Such manipulation lea

Unrestricted Upload of File with Dangerous Type vulnerability in TalentSys Consulting Information Technology Industry In

The vulnerability allows any application installed on the device to read SMS/MMS data and metadata from the system-provi

Improper privilege management vulnerability in Novakon P series allows attackers to gain root privileges if one service

Improper authentication vulnerability in Novakon P series allows unauthenticated attackers to upload and download any ap

No password for the root user is set in Novakon P series. This allows phyiscal attackers to enter the console easily. T

A path traversal vulnerability in Novakon P series allows to expose the root file system "/" and modify all files with r

A maliciously crafted HTML payload, when rendered by the Autodesk Fusion desktop application, can trigger a Stored Cross

A buffer overflow vulnerability in Novakon P series allows attackers to gain root permission without prior authenticatio

An information disclosure vulnerability exists in multiple WSO2 products due to improper implementation of the enrich me

Authorization Bypass Through User-Controlled Key vulnerability in Anadolu Hayat Emeklilik Inc. AHE Mobile allows Privile

danny-avila/librechat is affected by an authorization bypass vulnerability due to improper access control checks. The `c

The Product Options and Price Calculation Formulas for WooCommerce – Uni CPO (Premium) plugin for WordPress is vulnerabl

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Netcad Soft

A security flaw has been discovered in Campcodes Point of Sale System POS 1.0. Affected by this issue is some unknown fu

The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type vali

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Iron Mountai