2025

The RealNetworks RealArcade platform includes an ActiveX control (InstallerDlg.dll, version 2.6.0.445) that exposes a me

AOL Desktop 9.6 contains a buffer overflow vulnerability in its Tool\rich.rct component when parsing .rtx files. By embe

Subtitle Processor 7.7.1 contains a buffer overflow vulnerability in its .m3u file parser. When a crafted playlist file

MJM Core Player (likely now referred to as MJM Player) 2011 is vulnerable to a stack-based buffer overflow when parsing

MJM QuickPlayer (also known as MJM Player) version 2010 contains a stack-based buffer overflow vulnerability triggered b

SPlayer version 3.7 and earlier is vulnerable to a stack-based buffer overflow when processing HTTP responses containing

Magix Musik Maker 16 is vulnerable to a stack-based buffer overflow due to improper handling of .mmm arrangement files.

Kaillera Server version 0.86 is vulnerable to a denial-of-service condition triggered by sending a malformed UDP packet

FreeNAS 0.7.2 prior to revision 5543 includes an unauthenticated command‐execution backdoor in its web interface. The ex

LeapFTP < 3.1.x contains a stack-based buffer overflow vulnerability in its FTP client parser. When the client receives

FileWrangler <= 5.30 suffers from a stack-based buffer overflow vulnerability when parsing directory listings from an FT

Xion Audio Player versions 1.0.126 and prior are vulnerable to a Unicode-based stack buffer overflow triggered by openin

Odin Secure FTP <= 4.1 is vulnerable to a stack-based buffer overflow when parsing directory listings received in respon

ContentKeeper Web Appliance (now maintained by Impero Software) versions prior to 125.10 expose the mimencode binary via

A vulnerability was identified in Docker Desktop that allows local running Linux containers to access the Docker Engine

CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of service when an authenticat

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause unauthorized a

CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause remote code execution and compromise of

Microsoft Knack 0.12.0 allows Regular expression Denial of Service (ReDoS) in the knack.introspection module. option_des

Microsoft Knack 0.12.0 allows Regular expression Denial of Service (ReDoS) in the knack.introspection module. extract_fu

Prism Central versions prior to 2024.3.1 are vulnerable to a stored cross-site scripting attack via the Events component

Mermaid is a JavaScript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer

A security issue exists due to improper handling of malformed CIP Forward Close packets during fuzzing. The controller e

Komari is a lightweight, self-hosted server monitoring tool designed to provide a simple and efficient solution for moni

Copier library and CLI app for rendering project templates. From 7.1.0 to before 9.9.1, Copier suggests that it's safe t

Copier library and CLI app for rendering project templates. Prior to 9.9.1, a safe template can currently read and write

Liferay Portal 7.3.0 through 7.4.3.132, and Liferay DXP 2025.Q1 through 2025.Q1.6, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.

Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java - BC-FJA 2.1.

z2d is a pure Zig 2D graphics library. z2d v0.7.0 released with a new multi-sample anti-aliasing (MSAA) method, which us

A potential security vulnerability has been identified in the HPAudioAnalytics service included in the HP Hotkey Support

Improper Control of Generation of Code ('Code Injection') vulnerability in Wulkano KAP on MacOS allows TCC Bypass.This i

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Bunkerity Bunker Web on Linux allows Phishing.This

Astro is a web framework for content-driven websites. Following CVE-2025-54793 there's still an Open Redirect vulnerabil

A SQL injection vulnerability in the JS Jobs plugin versions 1.3.2-1.4.4 for Joomla allows low-privilege users to execut

A SQLi vulnerability in DJ-Classifieds component 3.9.2-3.10.1 for Joomla was discovered. The issue allows privileged use

An authenticated RCE vulnerability in Phoca Commander component 1.0.0-4.0.0 and 5.0.0-5.0.1 for Joomla was discovered. T

The service executable path in Seagate Toolkit on Versions prior to 2.34.0.33 on Windows allows an attacker with Admin p

HomeAssistant-Tapo-Control offers Control for Tapo cameras as a Home Assistant component. Prior to commit 2a3b80f, there

A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited on the 5094-IY8 de

A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited on the 5094-IF8 de

A security issues exists within Studio 5000 Logix Designer due to unsafe handling of environment variables. If the speci

A security issue in the runtime event system allows unauthenticated connections to receive a reusable API token. This to

A security issue exists in FactoryTalk ViewPoint version 14.0 or below due to improper handling of MSI repair operations

A security issue exists within the 5032 16pt Digital Configurable module’s web server. Intercepted session credentials c

A security issue exists within the 5032 16pt Digital Configurable module’s web server. The web server’s session number i

A security issue exists due to the web-based debugger agent enabled on Rockwell Automation ControlLogix® Ethernet Module

Lepszy BIP is vulnerable to Reflected Cross-Site Scripting (XSS). Improper input validation in index.php form in one of

Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user to

Netskope was notified about a potential gap in its agent (NS Client) on Windows systems. If this gap is successfully ex

Netskope is notified about a potential gap in its agent (NS Client) in which a malicious actor could trigger a memory le