2025

vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. The outlines library is one of the

Broken or Risky Cryptographic Algorithm, Use of Password Hash With Insufficient Computational Effort, Use of Weak Hash,

A vulnerability in Beta80 Life 1st enables the retrieval of different error messages for failed authentication attempts

Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.26, Enables Live-Restore setting which enhances secu

Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.26, contain(s) an Exposure of Sensitive System Infor

Improper Input Validation vulnerability in Progress LoadMaster allows : Buffer OverflowThis issue affects: * LoadMaster

Mattermost versions 9.11.x <= 9.11.8 fail to properly perform authorization of the Viewer role which allows an attacker

The AHAthat Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the 'id' parameter in all versions

IBM Security ReaQta 3.12 allows a privileged user to upload or transfer files of dangerous types that can be automatical

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Airflow MyS

Missing Critical Step in Authentication vulnerability in Elfatek Elektronics ANKA JPD-00028 allows Authentication Bypass

Improper encoding or escaping of output vulnerability in the webapi component in Synology BeeStation OS (BSM) before 1.1

The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to Unauthenticated Po

Improper certificate validation vulnerability in the update functionality in Synology BeeStation OS (BSM) before 1.1-653

SQL Injection vulnerability in rainrocka xinhu v.2.6.5 and before allows a remote attacker to execute arbitrary code via

An issue was discovered on G-Net Dashcam BB GONX devices. Managing Settings and Obtaining Sensitive Data and Sabotaging

Contao is an Open Source CMS. Users can upload SVG files with malicious code, which is then executed in the back end and

Vulnerabilities in the command line interface of AOS-CX could allow an authenticated remote attacker to expose sensitive

A vulnerability in the AOS-CX REST interface could allow an authenticated remote attacker with low privileges to view se

A flaw was found in the 389-ds-base LDAP Server. This issue occurs when issuing a Modify DN LDAP operation through the l

Systemic Risk Value <=2.8.0 is vulnerable to improper access control in /RiskValue/GroupingEntities/Controls/GetFile.asp

yimioa before v2024.07.04 was discovered to contain an information disclosure vulnerability via the component /resources

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the selectNoticeList() method at /

SOPlanning 1.53.00 is vulnerable to a directory traversal issue in /process/upload.php. The "fichier_to_delete" paramete

On IROAD X5 devices, a Bypass of Device Pairing can occur via MAC Address Spoofing. The dashcam's pairing mechanism reli

In the IROAD APK 5.2.5, there are Hardcoded Credentials in the APK for ports 9091 and 9092. The mobile application for t

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the component /mapper/xml/AddressD

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the listNameBySql() method at /xml

IBM QRadar Advisor 1.0.0 through 2.6.5 is vulnerable to server-side request forgery (SSRF). This may allow an authentica

TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the Orders Management System, allowing unauthor

Stored Cross-Site Scripting (XSS) in Softdial Contact Center of Sytel Ltd. This vulnerability allows an attacker to uplo

Insufficient path validation in CODESYS Control allows low privileged attackers with physical access to gain full filesy

An unauthenticated remote attacker can gain limited information of the PLC network but the user management of the PLCs p

A vulnerability, which was classified as critical, was found in PHPGurukul Boat Booking System 1.0. Affected is an unkno

A vulnerability classified as problematic was found in 猫宁i Morning up to bc782730c74ff080494f145cc363a0b4f43f7d3e. Affec

A vulnerability classified as critical has been found in code-projects Real Estate Property Management System 1.0. Affec

The Bare Metal Operator (BMO) implements a Kubernetes API for managing bare metal hosts in Metal3. Baremetal Operator en

containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.

A vulnerability, which was classified as critical, was found in code-projects Online Class and Exam Scheduling System 1.

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting (XSS) in /pages/class.p

A vulnerability, which was classified as critical, has been found in code-projects Online Class and Exam Scheduling Syst

SolarWinds Service Desk is affected by a broken access control vulnerability. The issue allows authenticated users to es

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.3, ma

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to access se

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to access se

A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. This affects an

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been rated as critical. Affected by

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting (XSS) in profile.php vi

Code-projects Online Class and Exam Scheduling System 1.0 is vulnerable to SQL Injection in exam_save.php via the parame

Uptime Kuma >== 1.23.0 has a ReDoS vulnerability, specifically when an administrator creates a notification through the