2025

A floating point exception (divide-by-zero) vulnerability was discovered in Bento4 1.6.0-641 in function AP4_TfraAtom()

A prototype pollution in the lib.createUploader function of @rpldy/uploader v1.8.1 allows attackers to cause a Denial of

A Stored Cross-Site Scripting (XSS) vulnerability was identified affecting Skybox Change Manager versions 13.2.170 and e

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malw

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malw

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malw

When BIG-IP Next Central Manager is running, undisclosed requests to the BIG-IP Next Central Manager API can cause the B

When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption

When users log in through the webUI or API using local authentication, BIG-IP Next Central Manager may log sensitive inf

Proposed Generic UDP Encapsulation (GUE) (IETF Draft) do not validate or verify the source of a network packet allowing

GRE and GRE6 Protocols (RFC2784) do not validate or verify the source of a network packet allowing an attacker to spoof

A vulnerability in Simple Network Management Protocol (SNMP) polling for Cisco Secure Email and Web Manager, Cisco Secur

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) guest portals cou

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) guest portals cou

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco

A vulnerability in a policy-based Cisco Application Visibility and Control (AVC) implementation of Cisco AsyncOS Softwar

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager a

A vulnerability in the web-based management interface of Cisco Expressway Series could allow an unauthenticated, remote

HCL iAutomate is affected by a session fixation vulnerability.  An attacker could hijack a victim's session ID from thei

Dell Avamar, version 19.4 or later, contains an access token reuse vulnerability in the AUI. A low privileged local atta

IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21

IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21

IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21

An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 prior to 16.9.7, starting from 16

An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.0.6, starting from 17.1 prior

An issue has been discovered in GitLab EE affecting all versions starting from 15.2 prior to 16.9.7, starting from 16.10

A denial of service vulnerability was identified in GitLab CE/EE, affecting all versions from 15.11 prior to 16.6.7, 16.

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: don't fail inserts if duplica

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: don't skip expired elements d

The WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto plugin for WordPress is vulnerable t

Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t

Adobe Experience Manager versions 6.5.21 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerabilit

Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t

Adobe Experience Manager versions 6.5.21 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerabilit

Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t

Discourse is an open source platform for community discussion. In affected versions users who disable chat in preference

Discourse is an open source platform for community discussion. In affected versions the endpoint for generating inline o

Discourse is an open source platform for community discussion. In affected versions with some combinations of plugins, a

The "NagVis" component within Checkmk is vulnerable to reflected cross-site scripting. An attacker can craft a malicious

Discourse is an open source platform for community discussion. In affected versions an attacker can execute arbitrary Ja

Discourse is an open source platform for community discussion. An attacker can execute arbitrary JavaScript on users' br

IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 could allow a local privileged user to perform

IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 transmits sensitive or security-critical data i

IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 is vulnerable to cross-site scripting. This vul

IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 is vulnerable to cross-site request forgery whi

reNgine is an automated reconnaissance framework for web applications. A stored cross-site scripting (XSS) vulnerability

reNgine is an automated reconnaissance framework for web applications. HTML Injection occurs when an application imprope

Vitest is a testing framework powered by Vite. The `__screenshot-error` handler on the browser mode HTTP server that res

Multiple Western Telematic (WTI) products contain a web interface that is vulnerable to a local file inclusion attack (L

A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager (CPPM) allows rem