2025

SSRF vulnerability in FreeMarker templates in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4 ,2024.Q4.0 through 2024.Q4.7, 2024.Q

Tiny-Scientist is a lightweight framework for automating the entire lifecycle of scientific research—from ideation to im

The Assemblyline 4 Service Client interfaces with the API to fetch tasks and publish the result for a service in Assembl

The AuthKit library for Remix provides convenient helpers for authentication and session management using WorkOS & AuthK

The AuthKit library for React Router 7+ provides helpers for authentication and session management using WorkOS & AuthKi

Frappe Learning is a learning system that helps users structure their content. In versions 2.33.0 and below, the image u

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certifi

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certifi

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certifi

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certifi

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certifi

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certifi

oak is a middleware framework for Deno's native HTTP server, Deno Deploy, Node.js 16.5 and later, Cloudflare Workers and

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certifi

Fedify is a TypeScript library for building federated server apps powered by ActivityPub. In versions below 1.3.20, 1.4.

Craft is a platform for creating digital experiences. Versions 4.13.8 through 4.16.2 and 5.5.8 through 5.8.3 contain a v

A vulnerability classified as critical was found in CesiumLab Web up to 4.0. This vulnerability affects unknown code of

Kernel software installed and running inside an untrusted/rich execution environment (REE) could leak information from t

Possible memory leak or kernel exceptions caused by reading kernel heap data after free or NULL pointer dereference kern

A vulnerability classified as problematic has been found in Scada-LTS up to 2.7.8.1. This affects an unknown part of the

A vulnerability was found in macrozheng mall 1.0.3. It has been rated as problematic. Affected by this issue is some unk

A vulnerability was found in macrozheng mall up to 1.0.3. It has been declared as problematic. Affected by this vulnerab

A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0. It has been classified as problematic. Affected is an unkno

A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0 and classified as problematic. This issue affects some unkno

7-Zip before 25.01 does not always properly handle symbolic links during extraction.

A vulnerability has been found in zlt2000 microservices-platform up to 6.0.0 and classified as problematic. This vulnera

A vulnerability, which was classified as problematic, was found in zlt2000 microservices-platform up to 6.0.0. This affe

A vulnerability, which was classified as critical, has been found in GNU cflow up to 1.8. Affected by this issue is the

A vulnerability classified as problematic was found in GNU cflow up to 1.8. Affected by this vulnerability is the functi

The Eventin plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and i

Simple Web Server 2.2 rc2 contains a stack-based buffer overflow vulnerability in its handling of the Connection HTTP he

EGallery version 1.2 contains an unauthenticated arbitrary file upload vulnerability in the uploadify.php script. The ap

Photodex ProShow Producer version 5.0.3256 contains a stack-based buffer overflow vulnerability in the handling of plugi

CuteFlow version 2.11.2 and earlier contains an arbitrary file upload vulnerability in the restart_circulation_values_wr

WebPageTest version 2.6 and earlier contains an arbitrary file upload vulnerability in the resultimage.php script. The a

Zenoss Core 3.x contains a command injection vulnerability in the showDaemonXMLConfig endpoint. The daemon parameter is

Cyclope Employee Surveillance Solution versions 6.x are vulnerable to a SQL injection flaw in its login mechanism. The u

The E-Mail Security Virtual Appliance (ESVA) (tested on version ESVA_2057) contains an unauthenticated command injection

XODA version 0.4.5 contains an unauthenticated file upload vulnerability that allows remote attackers to execute arbitra

MobileCartly version 1.0 contains an arbitrary file creation vulnerability in the savepage.php script. The application f

A stack-based buffer overflow vulnerability exists in ActFax Server version 4.32, specifically in the "Import Users from

Sflog! CMS 1.0 contains an authenticated arbitrary file upload vulnerability in the blog management interface. The appli

WAN Emulator v2.3 contains two unauthenticated command execution vulnerabilities. The result.php script calls shell_exec

Project Pier 0.8.8 and earlier contains an unauthenticated arbitrary file upload vulnerability in tools/upload_file.php.

An unauthenticated remote command execution vulnerability exists in AjaXplorer (now known as Pydio Cells) versions prior

Burk Technology ARC Solo's password change mechanism can be utilized without proper authentication procedures, allowing

A vulnerability in the Suite Applications Services component of Mitel MiCollab 10.0 through SP1 FP1 (10.0.1.101) could a

A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP2 (9.8.2.12) could allo

Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id parameter