2025

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft e-Mutabakat allows Authentication By

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft TaskPano allows Authentication Bypas

In wl_update_hidden_ap_ie() of wl_cfgscan.c, there is a possible out of bounds write due to improper input validation. T

In SAEMM_DiscloseMsId of SAEMM_RadioMessageCodec.c, there is a possible out of bounds read due to a missing bounds check

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akinsoft Ta

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akinsoft e-

A security flaw has been discovered in projectworlds Travel Management System 1.0. The impacted element is an unknown fu

A vulnerability was identified in projectworlds Travel Management System 1.0. The affected element is an unknown functio

The AI Engine plugin for WordPress is vulnerable to unauthorized access and loss of data due to a missing capability che

Netty is an asynchronous event-driven network application framework for development of maintainable high performance pro

An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6. FilteredRelation is subjec

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 4.2

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 6.

A vulnerability was determined in projectworlds Travel Management System 1.0. Impacted is an unknown function of the fil

A vulnerability was found in projectworlds Travel Management System 1.0. This issue affects some unknown processing of t

Fuji Electric FRENIC-Loader 4 is vulnerable to a deserialization of untrusted data when importing a file through a speci

LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview metadata (image, title, descript

Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In vers

Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) a

A vulnerability has been found in projectworlds Travel Management System 1.0. This vulnerability affects unknown code of

A flaw has been found in Campcodes Sales and Inventory System 1.0. This affects an unknown part of the file /index.php.

IBM Transformation Advisor 2.0.1 through 4.3.1 incorrectly assigns privileges to security critical files which could all

Figma Desktop for Windows version 125.6.5 contains a command injection vulnerability in the local plugin loader. An atta

A vulnerability in the Ruijie RG-ES series switch firmware ESW_1.0(1)B1P39 enables remote attackers to fully bypass auth

Adacore Ada Web Server (AWS) before 25.2 is vulnerable to a denial-of-service (DoS) condition due to improper handling o

In phpgurukul Doctor Appointment Management System 1.0, an authenticated doctor user can inject arbitrary JavaScript cod

A vulnerability in the directory permissions of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and C

A vulnerability in the directory permissions of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and C

A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service

A vulnerability in the user profile component of Cisco Webex Meetings could have allowed an authenticated, remote attack

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) Software and

A vulnerability in Cisco Webex Meetings could have allowed an unauthenticated, remote attacker to redirect a targeted We

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) could allow a

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Pri

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Pri

Incomplete validation of dunder attributes allows an attacker to escape from the Local Python execution environment sand

A security vulnerability has been detected in Campcodes Sales and Inventory System 1.0. Affected by this vulnerability i

A weakness has been identified in code-projects POS Pharmacy System 1.0. Affected is an unknown function of the file /ma

Inappropriate implementation in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker t

Inappropriate implementation in Extensions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to bypass c

Inappropriate implementation in Toolbar in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker who

Memos 0.22 is vulnerable to Stored Cross site scripting (XSS) vulnerabilities by the upload attachment and user avatar f

When Memos 0.22 is configured to store objects locally, an attacker can create a file via the CreateResource endpoint co

One Identity by Quest Safeguard for Privileged Passwords Appliance 7.5.1.20903 is vulnerable to One Time Password (OTP)/

A security flaw has been discovered in Campcodes Recruitment Management System 1.0. This impacts the function include of

A vulnerability was identified in 1000projects Beauty Parlour Management System 1.0. This affects an unknown function of

An OS command injection vulnerability exists in PLDT WiFi Router's Prolink PGN6401V Firmware 8.1.2 web management interf

SQL Injection vulnerability in FoxCMS v1.2.6 and before allows a remote attacker to execute arbitrary code via the. file

Slink v1.4.9 allows stored cross-site scripting (XSS) via crafted SVG uploads. When a user views the shared image in a n

Tenda AC8 v16.03.34.06 is vulnerable to Buffer Overflow in the formWifiBasicSet function via the parameter security or s