2025

Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 were disco

Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829.23, v3.8.0.1119.42, and v4.6.0.1211.28 was discov

Incorrect access control in the SPI Flash Chip of Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.829

Incorrect access control in the EEPROM component of Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units (RSUs) v3.2.0.8

Supported versions of Mahara 24.04 before 24.04.1 and 23.04 before 23.04.6 are vulnerable to information being disclosed

A flaw has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1

A vulnerability was detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.

A security vulnerability has been detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.

Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway when an attacker ca

n8n-workflows Main Commit ee25413 allows attackers to execute a directory traversal via the download_workflow function w

Mitrastar GPT-2741GNAC-N2 devices are provided with access through ssh into a restricted default shell.The command "devi

Mahara before 24.04.9 exposes database connection information if the database becomes unreachable, e.g., due to the data

An issue was discovered in Mahara 23.04.8 and 24.04.4. Attackers may utilize escalation of privileges in certain cases w

In Mahara 23.04.8 and 24.04.4, the external RSS feed block can cause XSS if the external feed XML has a malicious value

The configuration of Cursor on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivileg

Invoice Ninja's configuration on macOS, specifically the presence of entitlement "com.apple.security.get-task-allow", al

MacVim's configuration on macOS, specifically the presence of entitlement "com.apple.security.get-task-allow", allows lo

Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service in NetScaler ADC and

Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler G

The configuration of Nozbe on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivilege

The configuration of Mosh-Pro on macOS, specifically the "RunAsNode" fuse enabled, allows a local attacker with unprivil

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Avoid stack buffer overflow from kernel

Race Condition in the Directory Validation Logic in the TeamViewer Full Client and Host prior version 15.69 on Windows a

An access control vulnerability was discovered in the Request Trace and Download Trace functionalities of CMC before 25.

Missing Authorization vulnerability in Mojoomla School Management allows Exploiting Incorrectly Configured Access Contro

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user a

The WordPress Automatic Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, a

Delta Electronics EIP Builder version 1.11 is vulnerable to a File Parsing XML External Entity Processing Information Di

Delta Electronics COMMGR has Code Injection vulnerability.

Delta Electronics COMMGR has Stack-based Buffer Overflow vulnerability.

The Tourfic plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on

A vulnerability has been found in SourceCodester Human Resource Information System 1.0. Affected by this issue is some u

A flaw has been found in SourceCodester Human Resource Information System 1.0. Affected by this vulnerability is an unkn

The JWT secret key is embedded in the egOS WebGUI backend and is readable to the default user. An unauthenticated remote

A vulnerability was detected in Mihomo Party up to 1.8.1 on macOS. Affected is the function enableSysProxy of the file s

A security vulnerability has been detected in SourceCodester Online Bank Management System 1.0. This impacts an unknown

A vulnerability was found in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of

The Dokan Pro plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and

A vulnerability has been found in itsourcecode Apartment Management System 1.0. This vulnerability affects unknown code

A flaw has been found in itsourcecode Apartment Management System 1.0. This affects an unknown part of the file /managem

A vulnerability was detected in itsourcecode Apartment Management System 1.0. Affected by this issue is some unknown fun

A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. Affected by this vulnerabili

The Vibes plugin for WordPress is vulnerable to time-based SQL Injection via the ‘resource’ parameter in all versions up

A weakness has been identified in diyhi bbs up to 6.8. The impacted element is an unknown function of the file src/main/

A vulnerability has been found in 1000projects Online Project Report Submission and Evaluation System 1.0. This issue af

A flaw has been found in Tenda CH22 1.0.0.1. This vulnerability affects the function formeditUserName of the file /gofor

A security vulnerability has been detected in 1000projects Online Project Report Submission and Evaluation System 1.0. A

A weakness has been identified in 1000projects Online Project Report Submission and Evaluation System 1.0. Affected by t

A security flaw has been discovered in 1000projects Online Project Report Submission and Evaluation System 1.0. Affected

A vulnerability was determined in 1000projects Online Project Report Submission and Evaluation System 1.0. This affects