2025

An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. A remote code execution vulnerabil

An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. One of the middlewares included in

In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: don't rely on user vaddr alignment

A vulnerability in portenable cgi allows remote authenticated users to get the status of installed packages.

Out-of-bounds write vulnerability in cgi components in Synology DiskStation Manager (DSM) before 7.2.1-69057-2 and 7.2.2

In the Linux kernel, the following vulnerability has been resolved: xfrm: delete x->tunnel as we delete x The ipcomp f

In the Linux kernel, the following vulnerability has been resolved: af_unix: Initialise scc_index in unix_add_edge().

The Omnichannel for WooCommerce: Google, Amazon, eBay & Walmart Integration – Powered by Codisto plugin for WordPress is

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics)

XML external entity (XXE) injection in eyoucms v1.7.1 allows remote attackers to cause a denial of service via crafted b

Rhino is an open-source implementation of JavaScript written entirely in Java. Prior to 1.8.1, 1.7.15.1, and 1.7.14.1, w

Coder allows organizations to provision remote development environments via Terraform. Prior to 2.26.5, 2.27.7, and 2.28

RomM (ROM Manager) allows users to scan, enrich, browse and play their game collections with a clean and responsive inte

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1 allows

A heap buffer overflow in compiler.c and compiler.h in Pepper language 0.1.1commit 961a5d9988c5986d563310275adad3fd181b2

NVIDIA Triton Server for Linux contains a vulnerability where an attacker may cause an improper validation of specified

NVIDIA TAO contains a vulnerability where an attacker may cause a resource to be loaded via an uncontrolled search path.

NVIDIA Triton Inference Server contains a vulnerability where an attacker may cause an improper check for unusual or exc

Untrusted search path in auth_query connection handler in PgBouncer before 1.25.1 allows an unauthenticated attacker to

A flaw was found in Undertow that can cause remote denial of service attacks. When the server uses the FormEncodedDataDe

WebPros Plesk before 18.0.73.5 and 18.0.74 before 18.0.74.2 on Linux allows remote authenticated users to execute arbitr

Aquarius Desktop 3.0.069 for macOS contains an insecure file handling vulnerability in its support data archive generati

An issue was discovered in Camera in Samsung Mobile Processor Exynos 1280 and 2200. Unnecessary registration of a hardwa

GZDoom is a feature centric port for all Doom engine games. GZDoom is an open source Doom engine. In versions 4.14.2 and

In Splunk Universal Forwarder for Windows versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, a new installation of or an u

In Splunk Enterprise for Windows versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, a new installation of or an upgrade to

A potential security vulnerability has been identified in HP Image Assistant for versions prior to 5.3.3. The vulnerabil

Masa CMS is an open source Enterprise Content Management platform. Prior to 7.2.8, 7.3.13, and 7.4.6, if the URL to the

Masa CMS is an open source Enterprise Content Management platform. Prior to 7.2.8, 7.3.13, and 7.4.6, there is vulnerabl

An Improper Input Validation vulnerability exists in the user websocket handler of MAAS. An authenticated, unprivileged

Abacre Restaurant Point of Sale (POS) up to 15.0.0.1656 are vulnerable to Cleartext Storage of Sensitive Information in

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injec

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injec

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injec

The GC-AGENTS-SERVICE running as part of Akamai´s Guardicore Platform Agent for Windows versions prior to v49.20.1, v50.

A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal an

A flaw was found in the ABRT daemon’s handling of user-supplied mount information.ABRT copies up to 12 characters from a

The Modula Image Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validatio

The Modula Image Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path val

Vim is an open source, command line text editor. Prior to version 9.1.1947, an uncontrolled search path vulnerability on

NMIS/BioDose software V22.02 and previous versions contain executable binaries with plain text hard-coded passwords. The

NMIS/BioDose V22.02 and previous versions' installation directory paths by default have insecure file permissions, which

NMIS/BioDose V22.02 and previous version installations where the embedded Microsoft SQLServer Express is used are expose

NMIS/BioDose V22.02 and previous versions rely on a Microsoft SQL Server database. The SQL user account 'nmdbuser' and o

NMIS/BioDose V22.02 and previous versions rely on a common SQL Server user account to access data in the database. User

Lvzhou CMS before commit c4ea0eb9cab5f6739b2c87e77d9ef304017ed615 (2025-09-22) is vulnerable to SQL injection via the 't

The Aimeos GrapesJS CMS extension provides page editor for creating content pages based on extensible components. Prior

The MCP Python SDK, called `mcp` on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to versi

MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. Prior to 1.24.0, The M

Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be p