2025

Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1406, when processing nested tu

Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1400, When processing nested tu

pyLoad is the free and open-source Download Manager written in pure Python. Prior to version 0.5.0b3.dev91, the paramete

Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0,

Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0,

Zed is a multiplayer code editor. Prior to version 0.197.3, in the Zed Agent Panel allowed for an AI agent to achieve Re

OpenKilda is an open-source OpenFlow controller. Prior to version 1.164.0, an XML external entity (XXE) injection vulner

Server-Side Request Forgery (SSRF) in Omnissa Secure Email Gateway (SEG) in SEG prior to 2.32 running on Windows and SEG

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDL

Catalyst::Authentication::Credential::HTTP versions 1.018 and earlier for Perl generate nonces using the Perl Data::UUID

MASA CMS is an Enterprise Content Management platform based on open source technology. Versions prior to 7.4.5, 7.3.12,

Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the channel which allows attackers

The ASPECT system allows users to bypass authentication. This issue affects all versions of ASPECT

A denial-of-service (DoS) attack is possible if access to the local network is provided to unauthorized users. This is d

Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the

Mattermost Confluence Plugin version <1.5.0 fails to enforce authentication of the user to the Mattermost instance which

Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the

Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the Confluence space which allows a

Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the channel which allows attackers

Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the channel which allows attackers

Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the

Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the

libcsp 2.0 is vulnerable to Buffer Overflow in the csp_usart_open() function at drivers/usart/zephyr.c.

libcsp 2.0 is vulnerable to Buffer Overflow in the csp_eth_init() function due to improper handling of the ifname parame

Mattermost Confluence Plugin version <1.5.0 fails to enforce authentication of the user to the Mattermost instance which

Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the Confluence space which allows a

Mattermost Confluence Plugin version <1.5.0 fails to check the authorization of the user to the Mattermost instance whic

Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the channel which allows attackers

Omnissa Workspace ONE UEM contains a Server-Side Request Forgery (SSRF) Vulnerability. A malicious actor with user privi

Cherry Studio is a desktop client that supports for multiple LLM providers. From versions 1.4.8 to 1.5.0, there is a one

Due to an issue in configuration, code that was intended for debugging purposes was included in the market release of th

Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor may be able to ga

YugabyteDB Anywhere web server does not properly enforce authentication for the /metamaster/universe API endpoint. An un

ModelCache for LLM through v0.2.0 was discovered to contain an deserialization vulnerability via the component /manager/

In the Linux kernel, the following vulnerability has been resolved: clone_private_mnt(): make sure that caller has CAP_

The YugabyteDB tablet server contains a flaw in its YCQL query handling that can trigger a null pointer dereference when

A vulnerability was identified in code-projects eBlog Site 1.0. Affected by this vulnerability is an unknown functionali

Openfiler v2.x contains a command injection vulnerability in the system.html page. The device parameter is used to insta

ZEN Load Balancer versions 2.0 and 3.0-rc1 contain a command injection vulnerability in content2-2.cgi. The filelog para

Auxilium RateMyPet contains an unauthenticated arbitrary file upload vulnerability in upload_banners.php. The banner upl

PhpTax version 0.8 contains a remote code execution vulnerability in drawimage.php. The pfilez GET parameter is unsafely

Shared Access Signature token is not masked in the backup configuration response and is also exposed in the yb_backup lo

A vulnerability was identified in WuKongOpenSource WukongCRM 11.0. This affects an unknown part of the file /adminFile/u

A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function readSeparateStripsetoBuffe

YugabyteDB diagnostic information was transmitted over HTTP, which could expose sensitive data during transmission

YugabyteDB has been collecting diagnostics information from YugabyteDB servers, which may include sensitive gflag config

A vulnerability was found in yangzongzhuan RuoYi up to 4.8.1. Affected by this vulnerability is the function Edit of the

A vulnerability has been found in NASM Netwide Assember 2.17rc0. Affected is the function parse_line of the file parser.

A vulnerability was identified in NASM Netwide Assember 2.17rc0. This issue affects the function assemble_file of the fi

MacOS version of GIMP bundles a Python interpreter that inherits the Transparency, Consent, and Control (TCC) permission