2025

Centurion ERP is an ERP with a focus on ITSM and automation. In versions starting from 1.12.0 to before 1.21.0, an authe

Eventlet is a concurrent networking library for Python. Prior to version 0.40.3, the Eventlet WSGI parser is vulnerable

Next.js is a React framework for building full-stack web applications. Prior to versions 14.2.32 and 15.4.7, when next()

Next.js is a React framework for building full-stack web applications. In versions before 14.2.31 and from 15.0.0 to bef

Next.js is a React framework for building full-stack web applications. In versions before 14.2.31 and from 15.0.0 to bef

A security flaw has been discovered in Modo Legend of the Phoenix up to 1.0.5. The affected element is an unknown functi

A vulnerability was identified in NCSOFT Universe App up to 1.3.0. Impacted is an unknown function of the file AndroidMa

A vulnerability was determined in Voice Changer App up to 1.1.0. This issue affects some unknown processing of the file

A flaw has been found in Transbyte Scooper News App up to 1.2 on Android. Affected by this issue is some unknown functio

Basecamp's Google Sign-In adds Google sign-in to Rails applications. Prior to version 1.3.1, it is possible to redirect

nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols. In versions between 1

A vulnerability was detected in Kakao 헤이카카오 Hey Kakao App up to 2.17.4 on Android. Affected by this vulnerability is an

A security vulnerability has been detected in Rejseplanen App up to 8.2.2. Affected is an unknown function of the file A

A weakness has been identified in UAB Paytend App up to 2.1.9 on Android. This impacts an unknown function of the file A

An issue in Evope Core v.1.1.3.20 allows a local attacker to obtain sensitive information via the use of hard coded cryp

TRENDnet TV-IP410 vA1.0R was discovered to contain an OS command injection vulnerability via the /server/cgi-bin/testser

A security flaw has been discovered in mixmark-io turndown up to 7.2.1. This affects an unknown function of the file src

A vulnerability has been found in Jinher OA 1.0. This issue affects some unknown processing of the file GetTreeDate.aspx

A vulnerability was detected in code-projects Simple Grading System 1.0. This affects an unknown part of the file /delet

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0, 2025.Q1.0 through 2025.Q1.14, 2024.Q4.0 through 2024

Cross Site Scripting vulnerability in copyparty before 1.9.2 allows a local attacker to execute arbitrary code via a cra

A security vulnerability has been detected in code-projects Simple Grading System 1.0. Affected by this issue is some un

A weakness has been identified in code-projects Simple Grading System 1.0. Affected by this vulnerability is an unknown

The authenticated remote command execution (RCE) vulnerability exists in the Parental Control page on TP-Link Archer C7

Harness Open Source is an end-to-end developer platform with Source Control Management, CI/CD Pipelines, Hosted Develope

A path traversal vulnerability has been reported to affect VioStor. If a remote attacker gains an administrator account,

An improper authentication vulnerability has been reported to affect VioStor. If a remote attacker, they can then exploi

SQL injection vulnerability in oa_system oasys v.1.1 allows a remote attacker to execute arbitrary code via the allDirec

A command injection vulnerability has been reported to affect HybridDesk Station. If an attacker gains local network acc

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, the

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, the

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, the

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, the

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker

An improper certificate validation vulnerability has been reported to affect Qsync Central. If a remote attacker gains a

An improper certificate validation vulnerability has been reported to affect Qsync Central. If a remote attacker gains a

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user ac

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If can the

An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If a remote att

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If can the

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker

A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attack

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user ac

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user ac

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a re

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a re