2025

A vulnerability was determined in neurobin shc up to 4.0.3. This vulnerability affects the function make of the file src

A security flaw has been discovered in SolidInvoice up to 2.4.0. The impacted element is an unknown function of the file

A vulnerability was identified in SolidInvoice up to 2.4.0. The affected element is an unknown function of the file /tax

A vulnerability was determined in SolidInvoice up to 2.4.0. Impacted is an unknown function of the file /quotes of the c

Memory safety bugs present in Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption a

Spoofing issue in the Address Bar component of Firefox Focus for Android. This vulnerability was fixed in Firefox 142.

Memory safety bugs present in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunder

Memory safety bugs present in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141. Some of these b

Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 142 and Firefox ESR 140.2.

Denial-of-service due to out-of-memory in the Graphics: WebRender component. This vulnerability was fixed in Firefox 142

Uninitialized memory in the JavaScript Engine component. This vulnerability was fixed in Firefox 142, Firefox ESR 128.14

Same-origin policy bypass in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 142, Firefox ESR

An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is al

A vulnerability was found in SolidInvoice up to 2.4.0. This issue affects some unknown processing of the file /invoice o

A vulnerability has been found in SolidInvoice up to 2.4.0. This vulnerability affects unknown code of the file /invoice

A crafted URL using a blob: URI could have hidden the true origin of the page, resulting in a potential spoofing attack.

Firefox for Android allowed a sandboxed iframe without the `allow-downloads` attribute to start downloads. This vulnerab

In the address bar, Firefox for Android truncated the display of URLs from the end instead of prioritizing the origin. T

Dragging JavaScript links to the URL bar in Focus for iOS could be utilized to run malicious scripts, potentially result

Focus for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the conten

Malicious pages could use Firefox for iOS to pass FIDO: links to the OS and trigger the hybrid passkey transport. An att

Firefox for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the cont

Malicious scripts could bypass the popup blocker to spam new tabs, potentially resulting in denial of service attacks. T

Malicious scripts utilizing repetitive JavaScript alerts could prevent client user interaction in some scenarios and all

The QR scanner could allow arbitrary websites to be opened if a user was tricked into scanning a malicious link that lev

The URL scheme used by Firefox to facilitate searching of text queries could incorrectly allow attackers to open arbitra

Sandboxed iframes on webpages could potentially allow downloads to the device, bypassing the expected sandbox restrictio

A flaw has been found in LibTIFF 4.7.0. This affects the function _TIFFmallocExt/_TIFFCheckRealloc/TIFFHashSetNew/InitCC

A vulnerability was determined in appneta tcpreplay up to 4.5.2-beta2. The impacted element is the function untrunc_pack

A vulnerability was found in itsourcecode Sports Management System 1.0. The affected element is an unknown function of t

A vulnerability has been found in itsourcecode Online Tour and Travel Management System 1.0. Impacted is an unknown func

nginx-defender is a high-performance, enterprise-grade Web Application Firewall (WAF) and threat detection system engine

flaskBlog is a blog app built with Flask. In 2.8.0 and earlier, when deleting a comment, there's no validation of the ow

An authenticated arbitrary file upload vulnerability in the Content Explorer feature of LogicData eCommerce Framework v5

An issue was discovered in Cicool builder 3.4.4 allowing attackers to reset the administrator's password via the /admini

Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id parameter

A stored DOM-based Cross-Site Scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through 2024.Q4.7, 2024.Q

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7, 6.2.0.0 through 6.2.0.4, and 6.2.1.0

A flaw has been found in itsourcecode Online Tour and Travel Management System 1.0. This issue affects some unknown proc

A vulnerability was detected in itsourcecode Online Tour and Travel Management System 1.0. This vulnerability affects un

flaskBlog is a blog app built with Flask. In 2.8.0 and earlier, an arbitrary user can change his role to "admin", giving

flaskBlog is a blog app built with Flask. In 2.8.0 and earlier, when creating a post, there's no validation of the conte

flaskBlog is a blog app built with Flask. In 2.8.0 and earlier, the code checks if the userRole is "admin" only when vis

DeepChat is a smart assistant that connects powerful AI to your personal world. DeepChat before 0.3.1 has a one-click r

GenX_FX is an advance IA trading platform that will focus on forex trading. A vulnerability was identified in the GenX F

Astro is a web framework for content-driven websites. In versions of astro before 5.13.2 and 4.16.18, the image optimiza

An issue in the default configuration of the password reset function in LogicData eCommerce Framework v5.0.9.7000 allows

The server-side backend for Adform Site Tracking before 2025-08-28 allows attackers to inject HTML or execute arbitrary

A CSRF vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.7, 2025.Q1.0 t