2025

A vulnerability has been found in MartialBE one-hub up to 0.14.27. This vulnerability affects unknown code of the file d

A security flaw has been discovered in Tenda AX9 22.03.01.46. This affects the function image_check of the component htt

The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to to Information Disclosure due to

A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.3 and iPadOS 18.7

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issu

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3,

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia

A session management issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma

An information disclosure issue was addressed with improved privacy controls. This issue is fixed in iOS 26.1 and iPadOS

The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26.1. An app

A security vulnerability has been detected in Qualitor up to 8.24.73. The impacted element is an unknown function of the

Malwarebytes 1.0.14 for Linux doesn't properly compute signatures in some scenarios. This allows a bypass of detection.

SolarEdge SE3680H has unauthenticated disclosure of sensitive information during the bootloader loop. While the device r

The WP Fastest Cache Premium plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, an

AzuraCast is a self-hosted, all-in-one web radio management suite. Versions 0.23.1 mistakenly include an API endpoint th

When a user configures the NAS to retrieve UPS status or control the UPS, a non-enforced TLS certificate verification ca

A security vulnerability has been detected in yangshare warehouseManager 仓库管理系统 1.1.0. This affects the function addCust

In JetBrains TeamCity before 2025.11 path traversal was possible via file upload

In JetBrains TeamCity before 2025.11 improper access control could expose GitHub App token's metadata

In JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to local paths disclosure

An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2. Opening a malicious PDF

A security flaw has been discovered in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c. This issue affects so

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.6 before 18.4.6, 18.5 before 18.5.4, and 1

TableProgressTracking is a MediaWiki extension to track progress against specific criterion. Versions 1.2.0 and below do

It was discovered that process_crash() in data/apport in Canonical's Apport crash reporting tool may create crash files

A cross-site request forgery (CSRF) vulnerability in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in TAC Informa

A flaw was found in Keycloak Admin REST (Representational State Transfer) API. This vulnerability allows information dis

Mastodon is a free, open-source social network server based on ActivityPub. Versions 4.2.27 and prior, 4.3.0-beta.1 thro

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by

An improper access control vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all

A direct request ('forced browsing') vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticato

An improper input validation vulnerability in the NETGEAR Nighthawk R7000P (end of service) routers lets an authenticate

Android App "Brother iPrint&Scan" versions 6.13.7 and earlier improperly uses an external cache directory. If exploited,

Missing Authorization vulnerability in Bowo Admin and Site Enhancements (ASE) admin-site-enhancements allows Exploiting

Missing Authorization vulnerability in Ronald Huereca Photo Block photo-block allows Exploiting Incorrectly Configured A

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4). Affected applications con

IBM QRadar SIEM 7.5 - 7.5.0 UP14 IF01 is affected by an information disclosure vulnerability involving exposure of direc

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow a privileged user t

A stored cross-site scripting vulnerability exists in the web management interface of the R.V.R. Elettronica TLK302T tel

phpIPAM v1.7.3 contains a Cross-Site Request Forgery (CSRF) vulnerability in the database export functionality. The gene

A flaw has been found in GreenCMS 2.3.0603. Affected by this issue is some unknown functionality of the file /Admin/Cont

A weakness has been identified in Yealink SIP-T21P E2 52.84.0.15. Impacted is an unknown function of the component Local

Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may a

Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may a

Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may a

Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may a

A vulnerability was detected in SourceCodester Online Banking System 1.0. This impacts an unknown function of the file /