2025

A server-side request forgery (SSRF) vulnerability exists in the Liferay DXP 2025.Q2.0 through 2025.Q2.3 due to insecure

Steinberg MyMP3Player version 3.0 (build 3.0.0.67) is vulnerable to a stack-based buffer overflow when parsing .m3u play

Xftp FTP Client version up to and including 3.0 (build 0238) contain a stack-based buffer overflow vulnerability trigger

Maple versions up to and including 13's Maplet framework allows embedded commands to be executed automatically when a .m

Arcane Software’s Vermillion FTP Daemon (vftpd) versions up to and including 1.31 contains a memory corruption vulnerabi

VariCAD EN up to and including version 2010-2.05 is vulnerable to a stack-based buffer overflow when parsing .dwb drawin

EasyFTP Server 1.7.0.11 and earlier contains a stack-based buffer overflow vulnerability in its HTTP interface. When pro

FTPPad <= 1.2.0 contains a stack-based buffer overflow vulnerability in its FTP directory listing parser. When the clien

A stack-based buffer overflow exists in FTP Synchronizer Professional <= v4.0.73.274. When the client connects to an FTP

Gekko Manager FTP Client <= 0.77 contains a stack-based buffer overflow in its FTP directory listing parser. When proces

Seagull FTP Client <= v3.3 Build 409 contains a stack-based buffer overflow vulnerability in its FTP directory listing p

gAlan 0.2.1, a modular audio processing environment for Windows, is vulnerable to a stack-based buffer overflow when par

Xenorate versions up to and including 2.50, a Windows-based multimedia player, is vulnerable to a stack-based buffer ove

Millenium MP3 Studio versions up to and including 2.0 is vulnerable to a stack-based buffer overflow when parsing .pls p

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an

Untrusted pointer dereference in Windows MBT Transport driver allows an authorized attacker to elevate privileges locall

Improper verification of cryptographic signature in Windows Certificates allows an unauthorized attacker to perform spoo

There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Sites versions 10.9.1 – 11

There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Sites versions 10.9.1 – 11.4 t

There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Sites versions 10.9.1 – 11.4 t

A stored cross-site scripting (XSS) vulnerability exists ArcGIS HUB and ArcGIS Enterprise Sites which allows an authenti

There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Sites versions 10.9.1 – 11.4 t

The vulnerability, if exploited, could allow an authenticated miscreant (with privileges to create or access publicatio

Improper authorization in Microsoft PC Manager allows an unauthorized attacker to elevate privileges over a network.

Improper access control in Azure Databricks allows an unauthorized attacker to elevate privileges over a network.

HTML injection vulnerability in the registration interface in Evolution Consulting Kft. HRmaster module v235 allows an a

The vulnerability, if exploited, could allow an authenticated miscreant (with privileges to access publication targets)

A remote unauthenticated attacker who has bypassed authentication could execute arbitrary OS commands to disclose, tamp

Unauthorized users can access INFINITT PACS System Manager without proper authorization, which could lead to unauthoriz

An attacker could exploit this vulnerability by uploading arbitrary files via the a specific endpoint, leading to unaut

An attacker could exploit this vulnerability by uploading arbitrary files via a specific service, which could lead to s

EasyFTP Server versions up to 1.7.0.11 contain a stack-based buffer overflow vulnerability in the FTP command parser. Wh

CommuniCrypt Mail versions up to and including 1.16 contains a stack-based buffer overflow vulnerability in its ANSMTP.d

Amlib’s NetOpacs webquery.dll contains a stack-based buffer overflow vulnerability triggered by improper handling of HTT

Digital Music Pad v8.2.3.3.4 contains a stack-based buffer overflow vulnerability in its playlist file parser. When open

Barracuda products, confirmed in Spam & Virus Firewall, SSL VPN, and Web Application Firewall versions prior to October

AOL versions up to and including 9.5 includes an ActiveX control (Phobos.dll) that exposes a method called Import() via

pyLoad is the free and open-source Download Manager written in pure Python. The jk parameter is received in pyLoad CNL B

Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains a Buffer Access with Incorrect Length Value vulnera

Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains an Incorrect Permission Assignment for Critical Res

On N-central, it is possible for any authenticated user to read, write and modify syslog configuration across customers

Phproject is a high performance full-featured project management system. From 1.8.0 to before 1.8.3, a Stored Cross-Site

Insecure permissions in Agent-Zero v0.8.* allow attackers to arbitrarily reset the system via unspecified vectors.

An issue in the component /api/download_work_dir_file.py of Agent-Zero v0.8.* allows attackers to execute a directory tr

Aikaan IoT management platform v3.25.0325-5-g2e9c59796 provides a configuration to disable user sign-up in distributed d

Aikaan IoT management platform v3.25.0325-5-g2e9c59796 sends a newly generated password to users in plaintext via email

Username enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2024.Q4.0 through 2024.Q4.

An authentication bypass vulnerability in PandoraNext-TokensTool v0.6.8 and before. An attacker can exploit this vulnera

A vulnerability was identified in itsourcecode Apartment Management System 1.0. Affected by this issue is some unknown f

A vulnerability was determined in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3. Affected by this vuln