2025

The configuration of Nozbe on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivilege

The configuration of Mosh-Pro on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivil

request-filtering-agent is an http(s).Agent implementation that blocks requests to Private/Reserved IP addresses. Versio

The Scratch Channel is a news website. In versions 1 and 1.1, a POST request to the endpoint used to publish articles, c

h2 is a pure-Python implementation of a HTTP/2 protocol stack. Prior to version 4.3.0, an HTTP/2 request splitting vulne

Airlink's Daemon interfaces with Docker and the Panel to provide secure access for controlling instances via the Panel.

A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText Enterprise Security Manager. The vulne

PhpOffice/PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to versions 1.30.0, 2.1.

Information disclosure and exposure of authentication FTP credentials over the debug port 1604 in the MINOVA TTA service

An Unquoted Search Path vulnerability has been identified in the utility for Moxa’s industrial computers (Windows). Due

A path traversal vulnerability in the NPM package installation process of Google Cloud Dataform allows a remote attacker

An Information Exposure vulnerability has been identified in OpenText Enterprise Security Manager. The vulnerability cou

A stored XSS vulnerability in Quantum Manager component 1.0.0-3.2.0 for Joomla was discovered. File names are not proper

A stored XSS vulnerability in Quantum Manager component 1.0.0-3.2.0 for Joomla was discovered. The SVG upload feature do

dpanel is an open source server management panel written in Go. In versions 1.2.0 through 1.7.2, dpanel allows authentic

UFO: Alien Invasion versions up to and including 2.2.1 contain a buffer overflow vulnerability in its built-in IRC clien

Out-of-bounds Write vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java bc-fips on All (API modules

Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java FIPS bc-fips

Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Ser

Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command ('Command Injection') in Danfo

Steinberg MyMP3Player version 3.0 (build 3.0.0.67) is vulnerable to a stack-based buffer overflow when parsing .m3u play

Xftp FTP Client version up to and including 3.0 (build 0238) contain a stack-based buffer overflow vulnerability trigger

Maple versions up to and including 13's Maplet framework allows embedded commands to be executed automatically when a .m

Arcane Software’s Vermillion FTP Daemon (vftpd) versions up to and including 1.31 contains a memory corruption vulnerabi

VariCAD EN up to and including version 2010-2.05 is vulnerable to a stack-based buffer overflow when parsing .dwb drawin

FTPPad <= 1.2.0 contains a stack-based buffer overflow vulnerability in its FTP directory listing parser. When the clien

A stack-based buffer overflow exists in FTP Synchronizer Professional <= v4.0.73.274. When the client connects to an FTP

Gekko Manager FTP Client <= 0.77 contains a stack-based buffer overflow in its FTP directory listing parser. When proces

Seagull FTP Client <= v3.3 Build 409 contains a stack-based buffer overflow vulnerability in its FTP directory listing p

gAlan 0.2.1, a modular audio processing environment for Windows, is vulnerable to a stack-based buffer overflow when par

Xenorate versions up to and including 2.50, a Windows-based multimedia player, is vulnerable to a stack-based buffer ove

Millenium MP3 Studio versions up to and including 2.0 is vulnerable to a stack-based buffer overflow when parsing .pls p

CommuniCrypt Mail versions up to and including 1.16 contains a stack-based buffer overflow vulnerability in its ANSMTP.d

Amlib’s NetOpacs webquery.dll contains a stack-based buffer overflow vulnerability triggered by improper handling of HTT

Digital Music Pad v8.2.3.3.4 contains a stack-based buffer overflow vulnerability in its playlist file parser. When open

Barracuda products, confirmed in Spam & Virus Firewall, SSL VPN, and Web Application Firewall versions prior to October

AOL versions up to and including 9.5 includes an ActiveX control (Phobos.dll) that exposes a method called Import() via

pyLoad is the free and open-source Download Manager written in pure Python. The jk parameter is received in pyLoad CNL B

Phproject is a high performance full-featured project management system. From 1.8.0 to before 1.8.3, a Stored Cross-Site

claude-code-router is a powerful tool to route Claude Code requests to different models and customize any request. Due t

vite-plugin-static-copy is rollup-plugin-copy for Vite with dev server support. Files not included in src are accessible

The StrongDM macOS client incorrectly processed JSON-formatted messages. Attackers could potentially modify macOS system

The StrongDM Windows service incorrectly handled communication related to system certificate management. Attackers could

The StrongDM Windows service incorrectly handled input validation. Authenticated attackers could potentially exploit thi

The StrongDM Client insufficiently protected a pre-authentication token. Attackers could exploit this to intercept and r

Foxit PDF Reader before 4.2.0.0928 does not properly bound-check the /Title entry in the PDF Info dictionary. A speciall

OnboardLite is the result of the Influx Initiative, our vision for an improved student organization lifecycle at the Uni

Sockso Music Host Server versions <= 1.5 are vulnerable to a path traversal flaw that allows unauthenticated remote atta

Foxit PDF Reader <  4.3.1.0218 exposes a JavaScript API function, createDataObject(), that allows untrusted PDF content

Solar FTP Server fails to properly handle format strings passed to the USER command. When a specially crafted string con