2025

N-central is vulnerable to a path traversal that allows unintended access to the Apache Tomcat WEB-INF directory. Custom

A buffer overflow in the GuitarPro1::read function of MuseScore Studio v4.3.2 allows attackers to to execute arbitrary c

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting (XSS) in /pages/room.ph

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting (XSS) in /pages/program

Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) an Improper Privilege Mana

Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) an Improper Neutralization

Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) an Improper Neutralization

Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) a Server-Side Request Forg

Rule 3000216 (before version 2) in Akamai App & API Protector (with Akamai ASE) before 2024-12-10 does not properly cons

A vulnerability, which was classified as critical, was found in code-projects Real Estate Property Management System 1.0

A stored cross-site scripting (XSS) vulnerability in the Send for Approval function of FileCloud v23.241.2 allows attack

Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows teachers to take attendance of fellow teach

The Syliud PayPal Plugin is the Sylius Core Team’s plugin for the PayPal Commerce Platform. A vulnerability in versions

The DPA countermeasures on Silicon Labs' Series 2 devices are not reseeded periodically as they should be. This may allo

An improper access control (CWE-284) vulnerability in FortiWLC version 8.6.0, version 8.5.3 and below, version 8.4.8 and

An improper neutralization of input during web page generation in FortiWLC version 8.6.0, version 8.5.3 and below, versi

A use of hard-coded password vulnerability in FortiWLC version 8.5.2 and below, version 8.4.8 and below, version 8.3.3 t

FortiOS 6.2 running AV engine version 6.00142 and below, FortiOS 6.4 running AV engine version 6.00144 and below and For

An exposure of sensitive information to an unauthorized actor vulnerability in FortiOS version 6.2.4 and below, version

An Improper Neutralization of Input vulnerability affecting FortiGate version 6.2.0 through 6.2.1, 6.0.0 through 6.0.6 i

An improper neutralization of input during web page generation in the SSL VPN portal of FortiProxy version 2.0.0, versio

A vulnerability, which was classified as critical, has been found in PHPGurukul Human Metapneumovirus Testing Management

A vulnerability classified as critical was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. This

A vulnerability was found in WebAssembly wabt 1.0.36 and classified as critical. This issue affects the function wabt::i

A vulnerability has been found in Oiwtech OIW-2431APGN-HP 2.5.3-B20131128 and classified as critical. This vulnerability

A vulnerability, which was classified as problematic, has been found in crmeb_java up to 1.3.4. Affected by this issue i

A vulnerability classified as critical has been found in lenve VBlog up to 1.0.0. Affected is the function uploadImg of

A vulnerability was found in Mercurial SCM 4.5.3/71.19.145.211. It has been declared as problematic. This vulnerability

A vulnerability was found in Shenzhen Mingyuan Cloud Technology Mingyuan Real Estate ERP System 1.0. It has been rated a

A vulnerability was found in DCMTK 3.6.9. It has been declared as critical. This vulnerability affects unknown code of t

gurk (aka gurk-rs) through 0.6.3 mishandles ANSI escape sequences.

A vulnerability has been found in VAM Virtual Airlines Manager 2.6.2 and classified as problematic. Affected by this vul

A vulnerability was found in IROAD Dash Cam FX2 up to 20250308. It has been rated as critical. Affected by this issue is

A vulnerability was found in IROAD Dash Cam FX2 up to 20250308. It has been classified as problematic. Affected is an un

A vulnerability was found in IROAD Dash Cam FX2 up to 20250308 and classified as problematic. This issue affects some un

A vulnerability has been found in IROAD Dash Cam X5 and Dash Cam X6 up to 20250308 and classified as problematic. This v

A vulnerability, which was classified as critical, has been found in IROAD Dash Cam X5 and Dash Cam X6 up to 20250308. A

A vulnerability classified as critical has been found in IROAD X5 Mobile App up to 5.2.5 on Android. Affected is an unkn

A vulnerability was found in otale Tale Blog 2.0.5. It has been classified as problematic. This affects an unknown part

A vulnerability, which was classified as critical, was found in tbeu matio 1.5.28. Affected is the function strdup_vprin

A vulnerability, which was classified as critical, has been found in tbeu matio 1.5.28. This issue affects the function

The GDPR Cookie Compliance WordPress plugin before 4.15.7 does not sanitise and escape some of its settings, which coul

The GDPR Cookie Compliance WordPress plugin before 4.15.7 does not sanitise and escape some of its settings, which coul

The GDPR Cookie Compliance WordPress plugin before 4.15.7 does not sanitise and escape some of its settings, which coul

The Poll Maker WordPress plugin before 5.5.4 does not sanitise and escape some of its settings, which could allow high

The Download Manager WordPress plugin before 3.3.07 doesn't prevent directory listing on web servers that don't use htac

An issue was discovered in the oidc (aka OpenID Connect Authentication) extension before 4.0.0 for TYPO3. The account li

Square Wire before 5.2.0 does not enforce a recursion limit on nested groups in ByteArrayProtoReader32.kt and ProtoReade

Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.28 allows an index out-of-range panic in asn1/aper GetBitString

A vulnerability classified as problematic has been found in 274056675 springboot-openai-chatgpt e84f6f5. This affects th