2025

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attac

Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attac

Improper isolation or compartmentalization in Azure PromptFlow allows an unauthorized attacker to execute code over a ne

Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to p

Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to disclose information with a physical att

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network

Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security fea

Improper privilege management in Azure Agent Installer allows an authorized attacker to elevate privileges locally.

Insufficient verification of data authenticity in some Zoom Workplace Apps may allow an unprivileged user to conduct a d

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.3 is vulnerable to cross-

Umbraco is a free and open source .NET content management system. In versions of Umbraco's web backoffice program prior

Umbraco is a free and open source .NET content management system. An improper API access control issue has been identifi

Cross Site Scripting vulnerability in DigitalDruid HotelDruid v.3.0.7 allows an attacker to execute arbitrary code and o

A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiWeb versions 7.0.0 thr

An improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiSandbox 4.4.0 t

A client-side enforcement of server-side security vulnerability [CWE-602] in Fortinet FortiSandbox version 5.0.0, 4.4.0

Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote C

Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote C

A stack-buffer overflow vulnerability [CWE-121] in Fortinet FortiMail CLI version 7.6.0 through 7.6.1 and before 7.4.3 a

Two improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in Forti

Multiple improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiMan

An improper handling of syntactically invalid structure in Fortinet FortiWeb at least verions 7.4.0 through 7.4.6 and 7.

A vulnerability has been found in MRCMS 3.1.2 and classified as critical. This vulnerability affects the function delete

A vulnerability, which was classified as problematic, was found in Stoque Zeev.it 4.24. This affects an unknown part of

A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant S

A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant S

A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.8), SiPass integrated ACC-

An issue was discovered in Datalust Seq before 2024.3.13545. Expansion of identifiers in message templates can be used t

The Spreadsheet view is vulnerable to a XSS attack, where a remote unauthorised attacker can read a limited amount of va

An issue was discovered in Datalust Seq before 2024.3.13545. An insecure default parsing depth limit allows stack consum

A vulnerability was found in libzvbi up to 0.2.43. It has been rated as problematic. Affected by this issue is the funct

A vulnerability was found in libzvbi up to 0.2.43. It has been declared as problematic. Affected by this vulnerability i

A vulnerability was found in libzvbi up to 0.2.43. It has been classified as problematic. Affected is the function vbi_s

Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: fro

Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: fro

Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: fro

Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: fro

Improper Input Validation vulnerability in ZTE GoldenDB allows Input Data Manipulation.This issue affects GoldenDB: from

The Qubely – Advanced Gutenberg Blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versi

The Coronavirus (COVID-19) Notice Message WordPress plugin through 1.1.2 does not sanitise and escape some of its settin

The SEO Tools WordPress plugin through 4.0.7 does not sanitise and escape a parameter before outputting it back in the p

The XV Random Quotes WordPress plugin through 1.40 does not have CSRF check in place when updating its settings, which c

The ProductDyno plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘res’ parameter in all vers

Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: fro

The Appsero Helper plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including

The Manage Bank Statements in SAP S/4HANA does not perform required access control checks for an authenticated user to c

The Manage Bank Statements in SAP S/4HANA allows authenticated attacker to bypass certain functionality restrictions of

User management functionality in SAP NetWeaver Application Server Java is vulnerable to Stored Cross-Site Scripting (XSS