2025

A reflected cross-site scripting (XSS) vulnerability in the List All FTP User Function in EHCP v20.04.1.b allows authent

A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability affects the f

A TLS vulnerability exists in the phone application used to manage a connected device. The phone application accepts se

By default, the Packet Power Monitoring and Control Web Interface do not enforce authentication mechanisms. This vulner

The affected product allows firmware updates to be downloaded from EG4's website, transferred via USB dongles, or insta

OpenMetadata <=1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function l

OpenMetadata <=1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function l

OpenMetadata <=1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function l

OpenMetadata <=1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function l

The public-facing product registration endpoint server responds differently depending on whether the S/N is valid and u

The affected product does not limit the number of attempts for inputting the correct PIN for a registered product, whic

A vulnerability was identified in TRENDnet TI-G160i, TI-PG102i and TPL-430AP up to 20250724. This affects an unknown par

In Xerox FreeFlow Core version 8.0.4, an attacker can exploit a Path Traversal vulnerability to access unauthorized file

In Xerox FreeFlow Core version 8.0.4, improper handling of XML input allows injection of external entities. An attacker

The MOD3 command traffic between the monitoring application and the inverter is transmitted in plaintext without encryp

A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.133, and Liferay DXP 2025

A vulnerability was found in Belkin F9K1009 and F9K1010 2.00.04/2.00.09 and classified as critical. Affected by this iss

IBM i 7.3, 7.4, 7.5, and 7.6 is affected by an authenticated user obtaining elevated privileges with IBM Digital Certifi

IBM Cloud Pak for Business Automation 24.0.0 through 24.0.0 IF005 and 24.0.1 through 24.0.1 IF002 could allow an authent

The /users endpoint in Statamic Core before 2.11.8 allows XSS to add an administrator user. This can be exploited via CS

A vulnerability has been found in MigoXLab LMeterX 1.2.0 and classified as critical. Affected by this vulnerability is t

Path Traversal vulnerability in API Endpoint in Mobile Industrial Robots (MiR) Software Versions prior to 3.0.0 on MiR R

A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by

MiR software versions prior to version 3.0.0 are affected by a command injection vulnerability. A malicious HTTP reques

Deserialization of Untrusted Data vulnerability in Apache Seata (incubating). This issue affects Apache Seata (incubati

If untrusted users are allowed to configure JMS for Apache CXF, previously they could use RMI or LDAP URLs, potentially

The OpenStreetMap for Gutenberg and WPBakery Page Builder (formerly Visual Composer) WordPress plugin through 1.2.0 does

Powered BLUE Server versions 0.20130927 and prior contain a path traversal vulnerability. If this vulnerability is explo

Powered BLUE 870 versions 0.20130927 and prior contain an OS command injection vulnerability. If this vulnerability is e

An HTML injection vulnerability exists in WordPress plugin "Advanced Custom Fields" prior to 6.4.3. If this vulnerabilit

EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary com

EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary com

EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary com

A vulnerability was found in Antabot White-Jotter 0.22. It has been declared as critical. This vulnerability affects the

A vulnerability was found in Huuge Box App 1.0.3 on Android. It has been classified as problematic. This affects an unkn

A vulnerability has been found in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0 and classified as criti

A vulnerability, which was classified as critical, was found in Wanzhou WOES Intelligent Optimization Energy Saving Syst

A vulnerability, which was classified as critical, has been found in Wanzhou WOES Intelligent Optimization Energy Saving

A vulnerability classified as critical was found in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0. This

jwe is a Ruby implementation of the RFC 7516 JSON Web Encryption (JWE) standard. In versions 1.1.0 and below, authentica

skops is a Python library which helps users share and ship their scikit-learn based models. In versions 0.12.0 and below

Astro is a web framework for content-driven websites. In versions 5.2.0 through 5.12.7, there is an Open Redirect vulner

A vulnerability classified as critical has been found in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0.

An integer overflow vulnerability in the loading of ExecuTorch models can cause smaller-than-expected memory regions to

uv is a Python package and project manager written in Rust. In versions 0.8.5 and earlier, remote ZIP archives were hand

A group of related buffer overflow vulnerabilities in the loading of ExecuTorch models can cause the runtime to crash an

An out-of-bounds access vulnerability in the loading of ExecuTorch models can cause the runtime to crash and potentially

A heap buffer overflow vulnerability in the loading of ExecuTorch models can potentially result in code execution or oth

An integer overflow vulnerability in the loading of ExecuTorch models can cause objects to be placed outside their alloc

An integer overflow vulnerability in the loading of ExecuTorch models can cause overlapping allocations, potentially res