2025

When Network Access is configured on a BIG-IP APM virtual server, undisclosed traffic can cause the Traffic Management M

Session Fixation vulnerability in Apache Tomcat via rewrite valve. This issue affects Apache Tomcat: from 11.0.0-M1 thr

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-1,

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-1,

OMERO.web provides a web based client and plugin infrastructure. Prior to version 5.29.2, if an error occurred when rese

Cherry Studio is a desktop client that supports for multiple LLM providers. In version 1.5.1, a remote code execution (R

Cherry Studio is a desktop client that supports for multiple LLM providers. From versions 1.2.5 to 1.5.1, Cherry Studio

Soosyze CMS 2.0 allows brute-force login attacks via the /user/login endpoint due to missing rate-limiting and lockout m

CycloneDX Sunshine v0.9 is vulnerable to CSV Formula Injection via a crafted JSON file

A memory corruption vulnerability exists in Foxit Reader 2025.1.0.27937 due to the use of an uninitialized pointer. A sp

A vulnerability was determined in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.5.4. Affected by this

A vulnerability was found in H3C M2 NAS V100R006. Affected by this vulnerability is an unknown functionality of the comp

A mismatch caused by client-triggered server-sent stream resets between HTTP/2 specifications and the internal architect

Improper Resource Shutdown or Release vulnerability in Apache Tomcat made Tomcat vulnerable to the made you reset attack

This vulnerability exists in ZKTeco WL20 due to storage of Wi-Fi credentials, configuration data and system data in plai

This vulnerability exists in ZKTeco WL20 due to hard-coded private key stored in plaintext within the device firmware. A

This vulnerability exists in ZKTeco WL20 due to hard-coded MQTT credentials and endpoints stored in plaintext within the

This vulnerability exists in ZKTeco WL20 due to storage of admin and user credentials without encryption in the device f

Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcpkix on

Organization Portal System developed by WellChoose has a SQL Injection vulnerability, allowing unauthenticated remote at

Organization Portal System developed by WellChoose has a Local File Inclusion vulnerability, allowing unauthenticated re

Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing unauthenticated

Organization Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing unauthen

Organization Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing unauthen

Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing remote attacker

Using Codex CLI in workspace-write mode inside a malicious context (repo, directory, etc) could lead to arbitrary file o

A vulnerability was found in INSTAR 2K+ and 4K 3.11.1 Build 1124. This issue affects some unknown processing of the comp

A vulnerability has been found in INSTAR 2K+ and 4K 3.11.1 Build 1124. This vulnerability affects unknown code of the co

A vulnerability was identified in INSTAR 2K+ and 4K 3.11.1 Build 1124. This affects the function base64_decode of the co

The Tutor LMS Pro – eLearning and online course solution plugin for WordPress is vulnerable to time-based SQL Injection

The LatePoint WordPress plugin before 5.1.94 is vulnerable to Local File Inclusion via the layout parameter. This makes

The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to PHP Object Injection in

The OceanWP theme for WordPress is vulnerable to Cross-Site Request Forgery in versions 4.0.9 to 4.1.1. This is due to m

The Easy restaurant menu manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to,

Several WordPress plugins using elFinder versions 2.1.64 and prior are vulnerable to Directory Traversal in various vers

Out of bounds write in ANGLE in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to perform out of bounds

Use after free in Aura in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage

Inappropriate implementation in File Picker in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convi

Race in V8 in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to execute arbitrary code inside a sandbox

Heap buffer overflow in libaom in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to potentially exploit

A buffer overflow vulnerability exists in the module SetupUtility. An attacker with local privileged access can exploit

Tcg2Smm has a vulnerability which can be used to write arbitrary memory inside SMRAM and execute arbitrary code at SMM l

UsbCoreDxe has a vulnerability which can be used to write arbitrary memory inside SMRAM and execute arbitrary code at SM

Dimension versions 4.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure o

Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an out-of-bounds read vulnerability that could lead

Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a Use After Free vulnerability that could result in

Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a Use After Free vulnerability that could result in

Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a Use After Free vulnerability that could result in