2025

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in digitalzoomstudio

Missing Authorization vulnerability in tsecher ts-tree ts-tree allows Exploiting Incorrectly Configured Access Control S

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MicahBlu RSVP ME r

Missing Authorization vulnerability in radicaldesigns radSLIDE radslide allows Exploiting Incorrectly Configured Access

IBM Business Automation Workflow and IBM Business Automation Workflow Enterprise Service Bus 24.0.0, 24.0.1 and earlier

Vulnerability of unauthorized exposure of confidential information affecting Advanced IP Scanner and Advanced Port Scann

Transient DOS can occur while processing UCI command.

Transient DOS during hypervisor virtual I/O operation in a virtual machine.

Information disclosure while deriving keys for a session for any Widevine use case.

While processing the authentication message in UE, improper authentication may lead to information disclosure.

Improper privilege management in a REST interface allowed registered users to access unauthorized resources if the resou

A vulnerability in GitLab-EE affecting all versions from 16.2 prior to 17.7.6, 17.8 prior to 17.8.4, and 17.9 prior to 1

An issue has been discovered in GitLab CE/EE affecting all versions from 16.6 before 17.7.6, 17.8 before 17.8.4, and 17.

Buffer overflow vulnerability exists in FutureNet AS series (Industrial Routers) and FA series (Protocol Conversion Mach

A vulnerability was found in PHPGurukul Online Shopping Portal 2.1. It has been declared as critical. Affected by this v

A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unkn

Stage.js through 0.8.10 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not di

Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but

A vulnerability classified as critical was found in zj1983 zz up to 2024-8. Affected by this vulnerability is an unknown

A vulnerability classified as critical has been found in zj1983 zz up to 2024-8. Affected is an unknown function of the

In da, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosur

In V5 DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis

In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclo

In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri

In Bluetooth Stack SW, there is a possible information disclosure due to a missing permission check. This could lead to

In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, i

In Modem, there is a possible memory corruption due to incorrect error handling. This could lead to remote denial of ser

A vulnerability was found in zj1983 zz up to 2024-8. It has been rated as critical. This issue affects some unknown proc

A vulnerability was found in zj1983 zz up to 2024-8. It has been declared as problematic. This vulnerability affects the

A vulnerability has been found in ESAFENET DSM 3.1.2 and classified as critical. Affected by this vulnerability is the f

A vulnerability, which was classified as critical, was found in ESAFENET CDG 5.6.3.154.205_20250114. Affected is an unkn

A stored cross-site scripting (XSS) vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System (SIS

A stored cross-site scripting (XSS) vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System (SIS

Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 was discovered to contain an Azure

An Insecure Direct Object References (IDOR) in the component /getStudemtAllDetailsById?studentId=XX of Serosoft Solution

A stored cross-site scripting (XSS) vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System (SIS

A vulnerability, which was classified as critical, has been found in Mini-Tmall up to 20250211. This issue affects the f

A vulnerability classified as problematic was found in FITSTATS Technologies AthleteMonitoring up to 20250302. This vuln

In Bitaxe ESP-Miner before 2.5.0 with AxeOS, one can use an /api/system CSRF attack to update the payout address (aka st

A vulnerability was found in Incorta 2023.4.3. It has been classified as problematic. Affected is an unknown function of

A vulnerability has been found in osuuu LightPicture 1.2.2 and classified as critical. This vulnerability affects the fu

A vulnerability, which was classified as critical, was found in zj1983 zz up to 2024-8. This affects an unknown part of

A vulnerability, which was classified as critical, has been found in zj1983 zz up to 2024-8. Affected by this issue is t

A vulnerability classified as critical was found in zj1983 zz up to 2024-8. Affected by this vulnerability is the functi

A vulnerability classified as critical has been found in zj1983 zz up to 2024-8. Affected is the function GetDBUser of t

A vulnerability was found in TOTOLINK X18 9.1.0cu.2024_B20220329. It has been declared as critical. This vulnerability a

A vulnerability was found in zj1983 zz up to 2024-8 and classified as critical. Affected by this issue is the function g

Insufficient clearing of GPU global memory could allow a malicious process running on the same GPU to read left over mem

A vulnerability has been found in zj1983 zz up to 2024-8 and classified as critical. Affected by this vulnerability is t