2025

A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of openSUSE Tumbleweed traefik2 allows the traef

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft OctoCloud allows Authentication Bypa

Authorization Bypass Through User-Controlled Key vulnerability in Akinsoft OctoCloud allows Resource Leak Exposure. Thi

A vulnerability has been identified within Rancher Manager in which it did not enforce request body size limits on cert

Unauthorized disclosure of sensitive data: Any user with `GET` or `LIST` permissions on `BundleDeployment` resources cou

Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsi

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akinsoft Oc

The ns_backup extension through 13.0.2 for TYPO3 allows command injection.

Lack of authorisation in Deporsite by T-INNOVA. This vulnerability allows an unauthenticated attacker to change other us

Lack of authorisation in Deporsite by T-INNOVA. This vulnerability allows an unauthenticated attacker to obtain informat

"Gunosy" App contains a vulnerability where sensitive information may be included in the application's outbound communic

A low-privileged attacker in bluetooth range may be able to access the password of a higher-privilege user (Maintenance)

A weakness has been identified in alaneuler batteryKid up to 2.1 on macOS. The affected element is an unknown function o

A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. Impacted is an unknown function

A vulnerability was identified in Tenda CH22 1.0.0.1. This issue affects the function formSetSambaConf of the file /gofo

A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formexeCommand of the file

A vulnerability was found in Campcodes Farm Management System 1.0. This affects an unknown part of the file /reviewInput

OpenAM (OpenAM Consortium Edition) contains a vulnerability that may cause it to malfunction as a SAML IdP due to a tamp

A vulnerability was determined in Tenda F1202 1.2.0.9/1.2.0.14/1.2.0.20. Impacted is an unknown function of the file /et

A vulnerability was found in SimStudioAI sim up to 51b1e97fa22c48d144aef75f8ca31a74ad2cfed2. This issue affects some unk

SonarQube Server and Cloud is a static analysis solution for continuous code quality and security inspection. In version

MobSF is a mobile application security testing tool used. In version 4.4.0, an authenticated user who uploaded a special

MobSF is a mobile application security testing tool used. In version 4.4.0, the GET /download/ route uses string path ve

ESPHome is a system to control microcontrollers remotely through Home Automation systems. In version 2025.8.0 in the ESP

A vulnerability was detected in RemoteClinic 2.0. This vulnerability affects unknown code of the file /staff/profile.php

A security vulnerability has been detected in SimStudioAI sim up to ed9b9ad83f1a7c61f4392787fb51837d34eeb0af. This affec

A weakness has been identified in SimStudioAI sim up to ed9b9ad83f1a7c61f4392787fb51837d34eeb0af. Affected by this issue

A security flaw has been discovered in Langfuse up to 3.88.0. Affected by this vulnerability is the function promptChang

A vulnerability was determined in mrvautin expressCart up to b31302f4e99c3293bd742c6d076a721e168118b0. This impacts an u

A vulnerability was found in thinkgem JeeSite up to 5.12.1. This affects the function decodeUrl2 of the file common/src/

SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that,

A vulnerability has been found in xujeff tianti 天梯 up to 2.3. The impacted element is the function ajaxUploadFile of the

A flaw has been found in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unknown function

A vulnerability was detected in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the fil

A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. This issue affects some unkn

TOCTOU  in linenoiseHistorySave in linenoise allows local attackers to overwrite arbitrary files and change permissions

Out-of-bounds write in cdfs_open_cue_track in libretro libretro-common latest on all platforms allows remote attackers t

A weakness has been identified in Tenda AC20 16.03.08.05. This vulnerability affects unknown code of the file /goform/fr

A security flaw has been discovered in SourceCodester Hotel Reservation System 1.0. This affects an unknown part of the

A vulnerability was identified in SourceCodester Online Hotel Reservation System 1.0. Affected by this issue is some unk

A vulnerability was determined in SourceCodester/Campcodes School Log Management System 1.0. Affected by this vulnerabil

In Liferay Portal 7.4.3.27 through 7.4.3.42, and Liferay DXP 2024.Q1.1 through 2024.Q1.20, 2023.Q4.0 through 2023.Q4.10,

XML Injection vulnerability in xmltodict allows Input Data Manipulation. This issue affects xmltodict: from 0.14.2 befor

A vulnerability was found in Campcodes Online Learning Management System 1.0. Affected is an unknown function of the fil

StreamVault is a multi-platform video parsing and downloading tool. Prior to version 250822, after logging into the Stre

Knowage is an open source analytics and business intelligence suite. Prior to version 8.1.37, Knowage is vulnerable to s

A vulnerability was determined in TOTOLINK A702R 4.0.0-B20211108.1423. This issue affects the function sub_418030 of the

IBM Concert Software 1.0.0 through 1.1.0 uses weaker than expected cryptographic algorithms that could allow an attacker

IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to perform unauthorized actions using man in the

IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to obtain sensitive information, caused by the fa