2025

A Reflected XSS vulnerability in DJ-Reviews component 1.0-1.3.6 for Joomla was discovered.

A SQLi vulnerability in Komento component 4.0.0-4.0.7for Joomla was discovered. The issue allows unprivileged users to e

A SQLi vulnerability in DJ-Flyer component 1.0-3.2 for Joomla was discovered. The issue allows privileged users to execu

A vulnerability in Imprivata Enterprise Access Management (formerly Imprivata OneSign) allows bypassing the login screen

The Windows service configuration of ABP and AES contains an unquoted ImagePath registry value vulnerability. This allow

PCL (Plain Craft Launcher) Community Edition is a Minecraft launcher. In PCL CE versions 2.12.0-beta.5 to 2.12.0-beta.9,

An unauthenticated OS command injection vulnerability exists in VIGI NVR1104H-4P V1 and VIGI NVR2016H-16MP V2.This issue

A command injection vulnerability exists that can be exploited after authentication in VIGI NVR1104H-4P V1 and VIGI NVR2

An authentication bypass vulnerability exists in ETQ Reliance on the CG (legacy) platform. The application allowed login

An XML External Entity (XXE) injection vulnerability exists in ETQ Reliance on the CG (legacy) platform within the `/res

A reflected cross-site scripting (XSS) vulnerability exists in ETQ Reliance CG (legacy) platform within the `SQLConverte

An authorization bypass vulnerability exists in ETQ Reliance (legacy CG and NXG SaaS platforms). By appending a specific

The powermail extension for TYPO3 allows Insecure Direct Object Reference resulting in download of arbitrary files from

RomM (ROM Manager) allows users to scan, enrich, browse and play their game collections with a clean and responsive inte

marshmallow-packages/nova-tiptap is a rich text editor for Laravel Nova based on tiptap. Prior to 5.7.0, a vulnerability

Incorrect authentication vulnerability in ParkingDoor. Through this vulnerability it is possible to operate the device w

An insecure sensitive key storage issue was found in MyASUS. potentially allowing unauthorized actor to obtain a token t

An insecure sensitive key storage issue was found in MyASUS. potentially allowing unauthorized actor to obtain a token t

Use of hard-coded, the same among all vulnerable installations SQLite credentials vulnerability in SIGNUM-NET FARA allow

A locally authenticated, privileged user can craft a malicious OpenSSL configuration file, potentially leading the agent

An incorrect authorisation check in the the 'plant transfer' function of the Growatt cloud service allowed a malicous at

A certificate verification error in wolfSSL when building with the WOLFSSL_SYS_CA_CERTS and WOLFSSL_APPLE_NATIVE_CERT_VA

Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP). This vulnerability

A stored XSS vulnerability in the RSBlog! component 1.11.6-1.14.5 Joomla was discovered. The issue allows remote authent

A stored XSS vulnerability in the RSDirectory! component 1.0.0-2.2.8 Joomla was discovered. The issue allows remote auth

A DOS vulnerability in RSFiles! component 1.16.3-1.17.7 Joomla was discovered. The issue allows unauthenticated remote a

A reflected XSS vulnerability in RSMail! component 1.19.20 - 1.22.26 28 Joomla was discovered. The issue allows remote a

A stored XSS vulnerability in the Balbooa Gallery plugin 1.0.0-2.4.0 for Joomla allows privileged users to store malicio

A SQL injection vulnerability in the Balbooa Forms plugin 1.0.0-2.3.1.1 for Joomla allows privileged users to execute ar

A SQL injection vulnerability in the JS Jobs plugin versions 1.0.0-1.4.1 for Joomla allows low-privilege users to execut

Time-of-check to time-of-use race condition vulnerability potentially allowed an attacker to use the installed ESET secu

OpenZeppelin Contracts is a library for secure smart contract development. Starting in version 5.2.0 and prior to versio

Solady is software that provides Solidity snippets with APIs. Starting in version 0.0.125 and prior to version 0.1.24, w

Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific da

Bluebird devices contain a pre-loaded barcode scanner application. This application exposes an unsecured broadcast recei

Bluebird devices contain a pre-loaded file manager application. This application exposes an unsecured service provider "

Bluebird devices contain a pre-loaded kiosk application. This application exposes an unsecured service provider "com.blu

A command injection vulnerability exists in LILIN Digital Video Recorder (DVR) devices prior to firmware version 2.0b60_

An unauthenticated arbitrary file read exists in LILIN Digital Video Recorder (DVR) devices prior to firmware version 2.

A command injection vulnerability exists in LILIN Digital Video Recorder (DVR) devices prior to firmware version 2.0b60_

A buffer overflow vulnerability exists in the X360 VideoPlayer ActiveX control (VideoPlayer.ocx) version 2.6 when handli

A stack-based buffer overflow exists in Achat v0.150 in its default configuration. By sending a specially crafted messag

A path traversal vulnerability exists in RIPS Scanner version 0.54. The vulnerability allows remote attackers to read ar

An unauthenticated command injection vulnerability exists in the cookie handling process of the lighttpd web server on D

A buffer overflow vulnerability exists in Heroes of Might and Magic III Complete 4.0.0.0, HD Mod 3.808 build 9, and Demo

A stack-based buffer overflow vulnerability exists in VideoCharge Studio 2.12.3.685 when processing a specially crafted

An unauthenticated arbitrary file upload vulnerability exists in Idera Up.Time Monitoring Station versions up to and inc

An unauthenticated file download vulnerability exists in LimeSurvey versions from 2.0+ up to and including 2.06+ Build 1

A remote file disclosure vulnerability exists in EasyCafe Server 2.2.14, exploitable by unauthenticated remote attackers

A path traversal vulnerability exists in Linknat VOS Manager versions prior to 2.1.9.07, including VOS2009 and early VOS