2025

A vulnerability has been found in linlinjava litemall up to 1.8.0. This vulnerability affects the function create of the

Youki is a container runtime written in Rust. Prior to version 0.5.5, if /proc and /sys in the rootfs are symbolic links

AIDE is an advanced intrusion detection environment. From versions 0.13 to 0.19.1, there is a null pointer dereference v

AIDE is an advanced intrusion detection environment. Prior to version 0.19.2, there is an improper output neutralization

flaskBlog is a blog app built with Flask. In versions 2.8.1 and prior, improper sanitization of postContent when submitt

A use-after-free vulnerability exists in the coap_delete_pdu_lkd function within coap_pdu.c of the libcoap library. This

IBM WebSphere Application Server Liberty 18.0.0.2 through 25.0.0.8 is vulnerable to a denial of service, caused by sendi

IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security for TLS connections.

An issue was discovered in Malwarebytes 4.6.14.326 and before and 5.1.5.116 and before (and Nebula 2020-10-21 and later)

A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited on the 5094-IY8 de

A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited on the 5094-IF8 de

A vulnerability was identified in code-projects Hostel Management System 1.0. This affects an unknown part of the file h

A vulnerability was found in code-projects Hostel Management System 1.0. Affected by this vulnerability is an unknown fu

Improper Input Validation vulnerability in N-able N-central allows OS Command Injection.This issue affects N-central: be

Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-

A security issue exists within the FactoryTalk Linx Network Browser. By modifying the process.env.NODE_ENV to ‘developme

A security issues exists within Studio 5000 Logix Designer due to unsafe handling of environment variables. If the speci

KuWFi CPF908-CP5 WEB5.0_LCD_20210125 devices have multiple unauthenticated access control vulnerabilities within goform/

A vulnerability has been identified in Mendix SAML (Mendix 10.12 compatible) (All versions < V4.0.3), Mendix SAML (Mendi

Dell OpenManage Enterprise, versions 3.10, 4.0, 4.1, and 4.2, contains an Insertion of Sensitive Information into Log Fi

SupportAssist for Home PCs Installer exe version(s) 4.8.2.29006 and prior, contain(s) an Incorrect Privilege Assignment

SupportAssist for Home PCs versions 4.6.3 and prior and SupportAssist for Business PCs versions 4.5.3 and prior, contain

SupportAssist for Business PCs, version(s) 4.5.3 and prior, contain(s) an Incorrect Privilege Assignment vulnerability.

In ESPEC North America Web Controller 3 before 3.3.8, /api/v4/auth/ users session privileges are not revoked on logout.

In ESPEC North America Web Controller 3 before 3.3.8, an attacker with physical access can gain elevated privileges beca

In ESPEC North America Web Controller 3 before 3.3.4, /api/v4/auth/ with any invalid authentication request results in e

Dell CloudLink, versions 8.0 through 8.1.1, contains an Improper Restriction of XML External Entity Reference vulnerabil

A security issue in the runtime event system allows unauthenticated connections to receive a reusable API token. This to

A security issue exists in FactoryTalk ViewPoint version 14.0 or below due to improper handling of MSI repair operations

A security issue exists within the 5032 16pt Digital Configurable module’s web server. Intercepted session credentials c

A security issue exists within the 5032 16pt Digital Configurable module’s web server. The web server’s session number i

A security issue exists due to the web-based debugger agent enabled on Rockwell Automation ControlLogix® Ethernet Module

Apache Superset contains an improper access control vulnerability in its /explore endpoint. A missing authorization chec

A bypass of the DISALLOWED_SQL_FUNCTIONS security feature in Apache Superset allows for the execution of blocked SQL fun

When a guest user accesses a chart in Apache Superset, the API response from the /chart/data endpoint includes a query f

A stored Cross-Site Scripting (XSS) vulnerability exists in Apache Superset's chart visualization. An authenticated user

An issue was discovered on KuWFi GC111 devices (Hardware Version: CPE-LM321_V3.2, Software Version: GC111-GL-LM321_V3.0_

Dell PowerEdge Platform version(s) 14G AMD BIOS v1.25.0 and prior, contain(s) an Access of Memory Location After End of

The KuWFi 4G LTE AC900 router 1.0.13 is vulnerable to Cross-Site Request Forgery (CSRF) on its web management interface.

The KuWFi 4G AC900 LTE router 1.0.13 is vulnerable to command injection on the HTTP API endpoints /goform/formMultiApnSe

A vulnerability was determined in jeecgboot JimuReport up to 2.1.1. Affected by this issue is some unknown functionality

A weakness has been identified in LibTIFF 4.7.0. This affects the function main of the file tiffcrop.c of the component

Improper neutralization of newlines in pg_dump in PostgreSQL allows a user of the origin server to inject arbitrary code

Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary

PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately

The Fedora Secure Boot CA certificate shipped with shim in Fedora was expired which could lead to old or invalid signed

A vulnerability has been found in Campcodes Online Flight Booking Management System 1.0. Affected by this issue is some

A vulnerability was identified in Tenda TX3 16.03.13.11_multi_TDE01. Affected by this vulnerability is an unknown functi

A vulnerability was determined in Campcodes Online Flight Booking Management System 1.0. Affected is an unknown function

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 MDTF wp