2025

IBM EntireX 11.1 could allow a local user to cause a denial of service due to an unhandled error and fault isolation.

An issue in Smartcom Bulgaria AD Smartcom Ralink CPE/WiFi router SAM-4G1G-TT-W-VC, SAM-4F1F-TT-W-A1 allows a remote atta

An issue in floodlight v1.2 allows a local attacker to cause a denial of service via the Topology Manager module and Lin

An issue in floodlight v1.2 allows a local attacker to cause a denial of service via the Topology Manager module, Topolo

IBM Jazz for Service Management 1.1.3 through 1.1.3.23 is vulnerable to cross-site scripting. This vulnerability allows

Successful exploitation of this vulnerability could allow an attacker (who needs to have Admin access privileges) to rea

Specifically crafted payloads sent to the RFID reader could cause DoS of RFID reader. After the device is restarted, it

Cross Site Request Forgery (CSRF) in Users.php in SourceCodester Packers and Movers Management System 1.0 allows attacke

Using API in the 2N OS device, authorized user can enable logging, which discloses valid authentication tokens in system

The device ID is based on IMEI in Forever KidsWatch Call Me KW50 R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h and Fo

Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number o

A vulnerability has been found in AppHouseKitchen AlDente Charge Limiter up to 1.29 on macOS and classified as critical.

Cross Site Scripting vulnerability in DouPHP v.1.8 Release 20231203 allows attackers to execute arbitrary code via a cra

A cross-site request forgery (CSRF) vulnerability in the pjActionUpdate function of PHPJabbers Cinema Booking System v2.

PHPJabbers Cinema Booking System v2.0 is vulnerable to reflected cross-site scripting (XSS). Multiple endpoints improper

Kaspersky has fixed a security issue in Kaspersky Anti-Virus SDK for Windows, Kaspersky Security for Virtualization Ligh

Tiny File Manager v2.4.7 and below was discovered to contain a Cross Site Scripting (XSS) vulnerability. This vulnerabil

A Stored Cross-Site Scripting (Stored XSS) vulnerability has been found in the Holded application. This vulnerability co

A vulnerability, which was classified as problematic, was found in Webkul QloApps 1.6.1. Affected is the function logout

In rare scenarios, the cpca process on the Security Management Server / Domain Management Server may exit unexpectedly,

Vulnerability of incomplete verification information in the VPN service module Impact: Successful exploitation of this v

Out-of-bounds write vulnerability in the emcom module Impact: Successful exploitation of this vulnerability may cause fe

Use-After-Free (UAF) vulnerability in the display module Impact: Successful exploitation of this vulnerability may cause

Out-of-bounds array read vulnerability in the FFRT module Impact: Successful exploitation of this vulnerability may caus

Vulnerability of improper log information control in the UI framework module Impact: Successful exploitation of this vul

Arbitrary write vulnerability in the Gallery module Impact: Successful exploitation of this vulnerability may affect se

Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability

Identity verification vulnerability in the ParamWatcher module Impact: Successful exploitation of this vulnerability may

Apache James server JMAP HTML to text plain implementation in versions below 3.8.2 and 3.7.6 is subject to unbounded mem

The Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin for WordPress is vulnerable to Path Traversal

Improper neutralization of argument delimiters in a command ('Argument Injection') issue exists in Defense Platform Home

NULL pointer dereference vulnerability exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker

The LikeBot WordPress plugin through 0.85 does not have CSRF check in some places, and is missing sanitisation as well

IBM App Connect enterprise 12.0.1.0 through 12.0.12.10 and 13.0.1.0 through 13.0.2.1 could allow an authenticated user t

IBM ApplinX 11.1 stores sensitive information in cleartext in memory that could be obtained by an authenticated user.

IBM ApplinX 11.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message i

IBM ApplinX 11.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable

IBM ApplinX 11.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to vi

IBM ApplinX 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unau

IBM ApplinX 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unau

IBM ApplinX 11.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitra

IBM ApplinX 11.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitra

IBM ApplinX 11.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitra

IBM Aspera Shares 1.9.0 through 1.10.0 PL6 could allow an attacker to spoof their IP address, which is written to log f

IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to stored cross-site scripting. This vulnerability allows auth

IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to server-side request forgery (SSRF). This may allow an authe

IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to server-side request forgery (SSRF). This may allow an authe

IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to HTML injection. A remote attacker could inject malicious HTM

IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to cross-site scripting. This vulnerability allows a privilege

IBM Aspera Shares 1.9.0 through 1.10.0 PL6 does not properly rate limit the frequency that an authenticated user can sen