2025

A vulnerability, which was classified as problematic, has been found in ChurchCRM 5.16.0. Affected by this issue is some

Formidable (aka node-formidable) 2.1.0 through 3.x before 3.5.3 relies on hexoid to prevent guessing of filenames for un

A vulnerability was found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750

In JetBrains TeamCity before 2025.03.1 stored XSS was possible on Data Directory tab

A security vulnerability was found in Moodle where confidential information that prevents cross-site request forgery (CS

A security vulnerability was discovered in Moodle that allows anyone to duplicate existing tours without needing to log

Andamiro Pump It Up 20th Anniversary (aka Double X or XX/2019) 1.00.0-2.08.3 allows a physically proximate attacker to c

In Sherpa Orchestrator 141851, multiple time-based blind SQL injections can be performed by an authenticated user. This

Missing "no cache" headers in HCL Leap permits sensitive data to be cached.

Missing "no cache" headers in HCL Leap permits user directory information to be cached.

Insufficient sanitization in HCL Leap allows client-side script injection in the authoring environment.

Mattermost versions 10.4.x <= 10.4.2, 10.5.x <= 10.5.0, 9.11.x <= 9.11.10 fail to properly validate permissions for the

IBM InfoSphere Information Server 11.7 DataStage Flow Designer  transmits sensitive information via URL or query parame

In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI t

In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal esc

In multispectral MIFF image processing in ImageMagick before 7.1.1-44, packet_size is mishandled (related to the renderi

In MIFF image processing in ImageMagick before 7.1.1-44, image depth is mishandled after SetQuantumFormat is used.

NVIDIA NvContainer service for Windows contains a vulnerability in its usage of OpenSSL, where an attacker could exploit

A vulnerability, which was classified as problematic, has been found in YXJ2018 SpringBoot-Vue-OnlineExam 1.0. This issu

IBM Maximo Asset Management 7.6.1.3 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated

A vulnerability, which was classified as problematic, was found in wix-incubator jam up to e87a6fd85cf8fb5ff37b62b2d68f9

Sonos api.sonos.com through 2025-04-21, when the /login/v3/oauth endpoint is used, accepts a redirect_uri containing use

In Soffid Console 3.6.31 before 3.6.32, authorization to use the pam service is mishandled.

A SQL injection in VirtueMart component 1.0.0 - 4.4.7 for Joomla allows authenticated attackers (administrator) to execu

libheif before 1.19.6 has a NULL pointer dereference in ImageItem_Grid::get_decoder in image-items/grid.cc because a gri

libheif before 1.19.6 has a NULL pointer dereference in ImageItem_iden in image-items/iden.cc.

In LibRaw before 0.21.4, tag 0x412 processing in phase_one_correct in decoders/load_mfbacks.cpp does not enforce minimum

In LibRaw before 0.21.4, phase_one_correct in decoders/load_mfbacks.cpp allows out-of-buffer access because split_col an

In LibRaw before 0.21.4, phase_one_correct in decoders/load_mfbacks.cpp has out-of-bounds reads for tag 0x412 processing

In LibRaw before 0.21.4, metadata/tiff.cpp has an out-of-bounds read in the Fujifilm 0xf00c tag parser.

TwsCachedXPathAPI in Convertigo versions before 8.3.11 did not restrict commons-jxpath functions, which could allow expr

A vulnerability, which was classified as problematic, was found in SourceCodester Web-based Pharmacy Product Management

A vulnerability, which was classified as problematic, has been found in SourceCodester Web-based Pharmacy Product Manage

A vulnerability classified as problematic was found in SourceCodester Web-based Pharmacy Product Management System 1.0.

A vulnerability classified as problematic has been found in SourceCodester Web-based Pharmacy Product Management System

A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been rated as probl

A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been declared as pr

mystrtod in mjson 1.2.7 requires more than a billion iterations during processing of certain digit strings such as 88911

cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a": true, "b": [ null,999999999999999

7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later

7-Zip 22.01 does not report an error for certain invalid xz files, involving block flags and reserved bits. Some later v

A vulnerability, which was classified as problematic, has been found in dazhouda lecms up to 3.0.3. Affected by this iss

A vulnerability was found in songquanpeng one-api up to 0.6.10. It has been classified as problematic. This affects an u

A vulnerability was found in DaiCuo 1.3.13. It has been rated as problematic. Affected by this issue is some unknown fun

An issue in Macro-video Technologies Co.,Ltd V380E6_C1 IP camera (Hw_HsAKPIQp_WF_XHR) 1020302 allows a physically proxim

An issue in Macro-video Technologies Co.,Ltd V380 Pro android application 2.1.44 and V380 Pro android application 2.1.64

A vulnerability was found in baseweb JSite 1.0. It has been rated as problematic. Affected by this issue is some unknown

A vulnerability was found in baseweb JSite 1.0. It has been declared as problematic. Affected by this vulnerability is a

A vulnerability was found in PbootCMS 3.2.5. It has been classified as problematic. Affected is an unknown function of t

HCL MyXalytics is affected by a failure to restrict URL access vulnerability. Unauthenticated users might gain unauthori