2025

A vulnerability exists in the Kubernetes C# client where the certificate validation logic accepts properly constructed c

Liferay Portal 7.3.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92

A vulnerability was identified in Campcodes Grocery Sales and Inventory System 1.0. Affected by this issue is some unkno

A vulnerability in the EnableTwoFactorAuthRequest SOAP endpoint of Zimbra Collaboration (ZCS) allows an attacker with va

A vulnerability was determined in Campcodes Grocery Sales and Inventory System 1.0. Affected by this vulnerability is an

A vulnerability was found in Campcodes Grocery Sales and Inventory System 1.0. Affected is an unknown function of the fi

SQL Injection vulnerability in TDuckCloud v.5.1 allows a remote attacker to execute arbitrary code via the Add a file up

The /api/comment endpoint in zhangyd-c OneBlog 2.3.9 contains a denial-of-service vulnerability.

by-night sms V1.0 has an Arbitrary File Upload vulnerability. The /api/sms/upload/headImg endpoint allows uploading arbi

Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a misconfiguration in the sudoers file that allows passwordless

Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a vulnerability in its authentication mechanism. Unsanitized in

Ilevia EVE X1 Server version ≤ 4.7.18.0.eden contains a pre-authentication file disclosure vulnerability via the 'db_log

Ilevia EVE X1 Server version ≤ 4.7.18.0.eden contains an unauthenticated OS command injection vulnerability in the /ajax

Ilevia EVE X1 Server version ≤ 4.7.18.0.eden contains a vulnerability in its server-side logging mechanism that allows u

A vulnerability has been found in Campcodes Grocery Sales and Inventory System 1.0. This impacts an unknown function of

An issue discovered in the Tuya Smart Life App 5.6.1 allows attackers to unprivileged control Matter devices via the Mat

Cleartext storage of sensitive information in Microsoft PC Manager allows an unauthorized attacker to bypass a security

Insufficient ui warning of dangerous operations in Microsoft Edge for Android allows an unauthorized attacker to perform

A flaw has been found in Campcodes Grocery Sales and Inventory System 1.0. This affects an unknown function of the file

CYRISMA Sensor before 444 for Windows has an Insecure Folder and File Permissions vulnerability. A low-privileged user c

A DLL hijacking vulnerability in CYRISMA Agent before 444 allows local users to escalate privileges and execute arbitrar

An incorrect API discovered in Signify Wiz Connected 1.9.1 allows attackers to remotely launch a DoS on Wiz devices only

Substance3D - Stager versions 3.1.3 and earlier are affected by an out-of-bounds read vulnerability when parsing a craft

Substance3D - Stager versions 3.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to m

Luanox is a module host for Lua packages. Prior to 0.1.1, a file traversal vulnerability can cause potential denial of s

Linkr is a lightweight file delivery system that downloads files from a webserver. Linkr versions through 2.0.0 do not v

Element Web is a Matrix web client built using the Matrix React SDK. Element Web and Element Desktop before version 1.11

Matrix JavaScript SDK is a Matrix Client-Server SDK for JavaScript and TypeScript. matrix-js-sdk before 38.2.0 has insuf

Greenshot is an open source Windows screenshot utility. Greenshot 1.3.300 and earlier deserializes attacker-controlled d

LDAP Account Manager (LAM) is a webfrontend for managing entries stored in an LDAP directory. LAM before 9.3 allows stor

Unchecked input for loop condition vulnerability in XML-RPC in Liferay Portal 7.4.0 through 7.4.3.111, and older unsuppo

A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling of externally supplied

In the Linux kernel, the following vulnerability has been resolved: USB: chipidea: fix memory leak with using debugfs_l

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: dccp: copy entire header to s

In the Linux kernel, the following vulnerability has been resolved: genirq/ipi: Fix NULL pointer deref in irq_data_get_

In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Check start of empty przs during init

In the Linux kernel, the following vulnerability has been resolved: caif: fix memory leak in cfctrl_linkup_request() W

In the Linux kernel, the following vulnerability has been resolved: workqueue: fix data race with the pwq->stats[] incr

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Enhance sanity check while generating att

In the Linux kernel, the following vulnerability has been resolved: iommufd/selftest: Catch overflow of uptr and length

In the Linux kernel, the following vulnerability has been resolved: powerpc: Don't try to copy PPR for task with NULL p

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: dp: Change logging to dev for mtk_dp_

In the Linux kernel, the following vulnerability has been resolved: drm/msm/mdp5: Don't leak some plane state Apparent

In the Linux kernel, the following vulnerability has been resolved: ext2/dax: Fix ext2_setsize when len is page aligned

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Wait for io return on terminate rpor

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: drop short frames While tech

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix issues in mpi3mr_get_all_tgt_info

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Handle kvm_arm_init failure correctly i

In the Linux kernel, the following vulnerability has been resolved: recordmcount: Fix memory leaks in the uwrite functi

In the Linux kernel, the following vulnerability has been resolved: ext4: fix WARNING in mb_find_extent Syzbot found t