2025

BS.Player version 2.57 (build 1051) contains a vulnerability in its playlist import functionality. When processing .m3u

ContentKeeper Web Appliance (now maintained by Impero Software) versions prior to 125.10 are vulnerable to remote comman

Dogfood CRM version 2.0.10 contains a remote command execution vulnerability in the spell.php script used by its mail su

Belkin Bulldog Plus version 4.0.2 build 1219 contains a stack-based buffer overflow vulnerability in its web service aut

Green Dam Youth Escort version 3.17 is vulnerable to a stack-based buffer overflow when processing overly long URLs. The

activePDF WebGrabber version 3.8.2.0 contains a stack-based buffer overflow vulnerability in the GetStatus() method of t

A stack-based buffer overflow vulnerability in NetSupport Manager 14.x versions prior to 14.12.0000 allows a remote, una

A heap-based buffer overflow vulnerability in NetSupport Manager 14.x versions prior to 14.12.0000 allows a remote, unau

tracing is a framework for instrumenting Rust programs to collect structured, event-based diagnostic information. Prior

A path traversal vulnerability has been reported to affect VioStor. If a remote attacker gains an administrator account,

Improper Input Validation vulnerability in OpenText Self Service Password Reset allows Authentication Bypass.This issue

Erroneously using an all-zero seed for RSA-OEAP padding instead of the generated random bytes, in Oberon microsystems AG

Padding oracle attack vulnerability in Oberon microsystem AG’s Oberon PSA Crypto library in all versions since 1.0.0 and

Padding oracle attack vulnerability in Oberon microsystem AG’s ocrypto library in all versions since 3.1.0 and prior to

A Session Fixation vulnerability existed in Payload's SQLite adapter due to identifier reuse during account creation. A

Payload uses JSON Web Tokens (JWT) for authentication. After log out JWT is not invalidated, which allows an attacker wh

LSTM-Kirigaya's openmcp-client is a vscode plugin for mcp developer. Prior to version 0.1.12, when users on a Windows pl

lychee link checking action checks links in Markdown, HTML, and text files using lychee. Prior to version 2.0.2, there i

Dongsheng Logistics Software exposes an unauthenticated endpoint at /CommMng/Print/UploadMailFile that fails to enforce

An unauthenticated SQL injection vulnerability exists in the GetLyfsByParams endpoint of Bian Que Feijiu Intelligent Eme

AnyShare contains a critical unauthenticated remote code execution vulnerability in the ServiceAgent API exposed on port

A command injection vulnerability in Dahua EIMS versions prior to 2240008 allows unauthenticated remote attackers to exe

QiAnXin TianQing Management Center versions up to and including 6.7.0.4130 contain a path traversal vulnerability in the

SPON IP Network Broadcast System, a digital audio transmission platform developed by SPON Communications, contains an ar

LiveBOS, an object-oriented business architecture middleware suite developed by Apex Software Co., Ltd., contains an arb

H3C Intelligent Management Center (IMC) versions up to and including E0632H07 contains a remote command execution vulner

A path traversal vulnerability exists in the Dahua Smart Park Integrated Management Platform (also referred to as the Da

Sangfor Behavior Management System (also referred to as DC Management System in Chinese-language documentation) contains

An insufficiently secured internal function allows session generation for arbitrary users. The decodeParam function chec

The configuration file containing database logins and passwords is readable by any local user.

In the "utils/Reporter/OpenReportWindow.pl" service, there is an SQL injection vulnerability through the "UserID" parame

In the ReturnUserUnitsXML.pl service, the "getUserInfo" function is vulnerable to SQL injection through the "UserID" par

In the PrepareCDExportJSON.pl service, the "getPerfServiceIds" function is vulnerable to SQL injection.

In the PatientService.pl service, the "getPatientIdentifier" function is vulnerable to SQL injection through the "pesel"

In UHCRTFDoc, the filename parameter can be exploited to execute arbitrary code via command injection into the system()

The RunCommand function accepts any parameter, which is then passed for execution in the shell. This allows an attacker

The "system" function receives untrusted input from the user. If the "EnableJSCaching" option is enabled, it is possible

The "serverConfig" endpoint, which returns the module configuration including credentials, is accessible without authent

The paths "/cgi-bin/CliniNET.prd/utils/userlogstat.pl", "/cgi-bin/CliniNET.prd/utils/usrlogstat.pl", and "/cgi-bin/Clini

The vulnerability allows unauthenticated users to download a file containing session ID data by directly accessing the "

Unauthenticated access to the "/cgi-bin/CliniNET.prd/GetActiveSessions.pl" endpoint allows takeover of any user session

The vulnerability consists of a session ID leak when saving a file downloaded from CGM CLININET. The identifier is expos

The system exposes several endpoints, typically including "/int/" in their path, that should be restricted to internal s

Stored XSS vulnerability exists in the "Oddział" (Ward) module, in the death diagnosis description field, and allows the

In the Print.pl service, the "uhcPrintServerPrint" function allows execution of arbitrary code via the "CopyCounter" par

Svelte devalue is a utility library. Prior to version 5.3.2, a string passed to devalue.parse could represent an object

Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway when an attacker ca

The configuration of Cursor on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivileg

Invoice Ninja's configuration on macOS, specifically the presence of entitlement "com.apple.security.get-task-allow", al

MacVim's configuration on macOS, specifically the presence of entitlement "com.apple.security.get-task-allow", allows lo