2025

Incorrect access control in the preHandle function of my-site v1.0.2 allows attackers to access sensitive components wit

A vulnerability was identified in elunez eladmin up to 2.7. Affected by this vulnerability is the function EncryptUtils

A vulnerability was determined in Swatadru Exam-Seating-Arrangement up to 97335ccebf95468d92525f4255a2241d2b0b002f. Affe

A vulnerability was found in CodeAstro Ecommerce Website 1.0. This impacts an unknown function of the file /customer/my_

A vulnerability has been found in Portabilis i-Educar up to 2.10. This affects an unknown function of the file /intranet

Directus is a real-time API and App dashboard for managing SQL database content. From 10.8.0 to before 11.9.3, a vulnera

Adobe Experience Manager versions 6.5.22 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerabilit

Incorrect access control in the preHandle function of my-site v1.0.2.RELEASE allows attackers to access sensitive compon

A flaw has been found in Scada-LTS up to 2.7.8.1. The impacted element is an unknown function of the file compound_event

A vulnerability was detected in Scada-LTS up to 2.7.8.1. The affected element is an unknown function of the file mainten

AOMEI Backupper Workstation Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local att

AOMEI Cyber Backup Missing Authentication for Critical Function Remote Code Execution Vulnerability. This vulnerability

AOMEI Cyber Backup Missing Authentication for Critical Function Remote Code Execution Vulnerability. This vulnerability

A vulnerability was found in the Cryostat HTTP API. Cryostat's HTTP API binds to all network interfaces, allowing possib

There is an improper privilege management vulnerability identified in ManageEngine's Asset Explorer, ServiceDesk Plus, S

The StrongDM macOS client incorrectly processed JSON-formatted messages. Attackers could potentially modify macOS system

The StrongDM Windows service incorrectly handled communication related to system certificate management. Attackers could

The StrongDM Windows service incorrectly handled input validation. Authenticated attackers could potentially exploit thi

The StrongDM Client insufficiently protected a pre-authentication token. Attackers could exploit this to intercept and r

A SQL injection vulnerability exists in the id2 parameter of the cancel_booking.php page in Online Artwork and Fine Arts

There is an authentication bypass vulnerability in WinterChenS my-site thru commit 6c79286 (2025-06-11). An attacker can

JeeWMS 771e4f5d0c01ffdeae1671be4cf102b73a3fe644 (2025-05-19) contains incorrect authentication bypass vulnerability, whi

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t

Adobe Experience Manager versions 6.5.22 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerabilit

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t

Incorrect access control in the doFilter function of itranswarp up to 2.19 allows attackers to access sensitive componen

A vulnerability in the debug logging function of Cisco Duo Authentication Proxy could allow an authenticated, high-privi

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Pri

A vulnerability in the GUI of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with ad

jeewx-boot 1.3 has an authentication bypass vulnerability in the preHandle function

Foxit PDF Reader before 4.2.0.0928 does not properly bound-check the /Title entry in the PDF Info dictionary. A speciall

A security vulnerability has been detected in Scada-LTS up to 2.7.8.1. Impacted is an unknown function of the file view_

OnboardLite is the result of the Influx Initiative, our vision for an improved student organization lifecycle at the Uni

Frappe is a full-stack web application framework. Prior to 15.74.2 and 14.96.15, an attacker could implement SQL injecti

Frappe is a full-stack web application framework. A carefully crafted request could extract data that the user would nor

Incorrect access control in Jantent v1.1 allows attackers to bypass authentication and access sensitive APIs without a t

Sockso Music Host Server versions <= 1.5 are vulnerable to a path traversal flaw that allows unauthenticated remote atta

Foxit PDF Reader <  4.3.1.0218 exposes a JavaScript API function, createDataObject(), that allows untrusted PDF content

Solar FTP Server fails to properly handle format strings passed to the USER command. When a specially crafted string con

The RealNetworks RealArcade platform includes an ActiveX control (InstallerDlg.dll, version 2.6.0.445) that exposes a me

AOL Desktop 9.6 contains a buffer overflow vulnerability in its Tool\rich.rct component when parsing .rtx files. By embe

Spreecommerce versions prior to 0.50.x contain a remote command execution vulnerability in the API's search functionalit

Subtitle Processor 7.7.1 contains a buffer overflow vulnerability in its .m3u file parser. When a crafted playlist file

MJM Core Player (likely now referred to as MJM Player) 2011 is vulnerable to a stack-based buffer overflow when parsing

MJM QuickPlayer (also known as MJM Player) version 2010 contains a stack-based buffer overflow vulnerability triggered b

SPlayer version 3.7 and earlier is vulnerable to a stack-based buffer overflow when processing HTTP responses containing