2025

Due to a missing authorization check in SAP Enterprise Search for ABAP, an attacker with high privileges may read and ex

The SAP Internet Communication Framework does not conduct any authentication checks for features that need user identifi

SAPUI5 (and OpenUI5) packages use outdated 3rd party libraries with known security vulnerabilities. When markdown-it enc

Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal, an unauthenticated attacker could

An attacker can use an undocumented UART port on the PCB as a side-channel to get root access e.g. with the credentia

An attacker can use an undocumented UART port on the PCB as a side-channel with the user hardcoded credentials obtained

A low privileged remote attacker can run the webshell with an empty command containing whitespace. The server will then

A low privileged remote attacker can use the ssh feature to execute commands directly after login. The process stays ope

A high privileged remote attacker with admin privileges for the webUI can brute-force the "root" and "user" passwords of

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected devices exposes server info

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected application exhibits incons

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected device contains a USB port

A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions < V5.10.1), RUGGEDCOM RS416Pv2 V5.X (All ver

A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application lacks i

A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application does no

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4). Affected applications do

A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1). The affected application is vulnerabl

A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1). The affected application is vulnerabl

A post-authentication flaw in the network two-phase commit protocol used for cross-shard transactions in MongoDB Server

Same-origin policy bypass in the Request Handling component. This vulnerability was fixed in Firefox 146, Firefox ESR 11

A vulnerability was determined in Tenda AC9 15.03.05.14_multi. Affected by this vulnerability is an unknown functionalit

Versions of the package @tiptap/extension-link before 2.10.4 are vulnerable to Cross-site Scripting (XSS) due to unsanit

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePres

The CSV to SortTable WordPress plugin through 4.2 does not validate some shortcode attributes before using them to gener

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.13 does not sanitize and escape some of its settings, which c

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Talent Soft

Traefik is an HTTP reverse proxy and load balancer. Versions 3.5.0 through 3.6.2 have inverted TLS verification logic in

Traefik is an HTTP reverse proxy and load balancer. For versions prior to 2.11.32 and 2.11.31 through 3.6.2, requests us

NiceGUI is a Python-based UI framework. Versions 3.3.1 and below are subject to a XSS vulnerability through the ui.inter

NiceGUI is a Python-based UI framework. Versions 3.3.1 and below are vulnerable to Reflected XSS through its ui.add_css,

Astro is a web framework. Versions 5.15.7 and below have a double URL encoding bypass which allows any unauthenticated a

Tuleap is a free and open source suite for management of software development and collaboration. Versions of Tuleap Comm

Tuleap is a free and open source suite for management of software development and collaboration. Versions of Tuleap Comm

Tuleap is a free and open source suite for management of software development and collaboration. Tuleap Community Editon

Tuleap is an Open Source Suite for management of software development and collaboration. Tuleap Community Edition versio

Tuleap is an Open Source Suite for management of software development and collaboration. Versions below 17.0.99.17624313

IBM watsonx.data 2.2 through 2.2.1 could allow an authenticated user to cause a denial of service through ingestion pods

IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.18 could disclose sensitive user credentials in log files.

c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5 terminate a query after maximum attempts whe

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 stores unencrypted sensitive in

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow an authenticated us

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 is vulnerable to creation of te

A vulnerability was determined in Ilevia EVE X1 Server up to 4.6.5.0.eden. Impacted is an unknown function of the file /

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to server-side request forgery (SSRF). This ma

IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.12 are af

Barix Instreamer v04.06 and v04.05 contains a stored cross-site scripting (XSS) vulnerability in the Web UI Configuratio

A stored cross-site scripting (XSS) vulnerability exists in the web interface of Lyrion Music Server <= 9.0.3. An authen

Barix Instreamer v04.06 and earlier is vulnerable to Cross Site Scripting (XSS) in the Web UI I/O & Serial configuration

Tenda AX3 v16.03.12.11 contains a stack overflow in formSetIptv via the iptvType parameter, which can cause memory corru