2025

AutoConnect 1.4.2, an Arduino library, is vulnerable to a cross site scripting (xss) vulnerability. The AutoConnect web

Middleware causes a prohibitive amount of heap allocations when processing malicious preflight requests that include a A

An issue was discovered in 4C Strategies Exonaut 21.6. Passwords, stored in the database, are hashed without a salt.

4C Strategies Exonaut before v22.4 was discovered to contain an access control issue.

4C Strategies Exonaut before v21.6.2.1-1 was discovered to contain a Server-Side Request Forgery (SSRF).

4C Strategies Exonaut before v22.4 was discovered to contain insecure permissions.

Cross-site scripting (XSS) vulnerability in Zone Bitaqati thru 3.4.0.

An issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6. Information disclosure can occur via an external HT

poco v1.14.1-release was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key

jsrsasign v11.1.0 was discovered to contain weak encryption. NOTE: this issue has been disputed by a third party who bel

Dell SupportAssist OS Recovery, versions prior to 5.5.14.0, contain a Creation of Temporary File With Insecure Permissio

Dell SupportAssist OS Recovery, versions prior to 5.5.14.0, contains an Exposure of Sensitive Information to an Unauthor

A vulnerability, which was classified as critical, was found in SkyworkAI DeepResearchAgent up to 08eb7f8eb9505d0094d75b

A vulnerability, which was classified as critical, has been found in agno-agi agno up to 1.7.5. This issue affects the f

A vulnerability was found in Keycloak-services. Special characters used during e-mail registration may perform SMTP Inje

An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. Once access is gained either by default, common, or c

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to modi

A vulnerability in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remot

A vulnerability in the meeting-join functionality of Cisco Webex Meetings could have allowed an unauthenticated, network

On April 18th 2025, Microsoft announced Exchange Server Security Changes for Hybrid Deployments and accompanying non-sec

Incorrect access control in Sage DPW 2024_12_004 and earlier allows unauthorized attackers to access the built-in Databa

A reflected cross-site scripting (XSS) vulnerability in Sage DPW 2024_12_004 and earlier allows attackers to execute arb

An attacker with authenticated and privileged access could modify the contents of a non-sensitive file by traversing the

The server identity check mechanism for firmware upgrade performed via command shell is insecurely implemented potential

The filepath.Walk and filepath.WalkDir functions are documented as not following symbolic links, but both functions are

In Gatling Enterprise versions below 1.25.0, a low-privileged user that does not hold the role "admin" could perform a R

In Gatling Enterprise versions below 1.25.0, a user logging-out can still use his session token to continue using the ap

Electrolink FM/DAB/TV Transmitter Web Management System Unauthorized access vulnerability via the /FrameSetCore.html end

A Remote Code Execution (RCE) vulnerability in Grav CMS v1.7.48 allows an authenticated admin to upload a malicious plug

MCCMS v2.7.0 has an SSRF vulnerability located in the index() method of the sys\apps\controllers\api\Gf.php file, where

A vulnerability in QCMS version 6.0.5 allows authenticated users to read arbitrary files from the server due to insuffic

IBM Guardium Data Protection could allow a remote attacker to obtain sensitive information due to cleartext transmission

Lack of TLS validation when downloading a CSV file including mapping from IPs to countries used ONLY for displaying coun

The Mobile Access Portal's File Share application is vulnerable to a directory traversal attack, allowing an authenticat

A weakness identified in OpenText Advanced Authentication where a Malicious browser plugin can record and replay the use

IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 20 is vulnerable to a heap-based buffer overflow, caused by i

IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 20 is vulnerable to a heap-based buffer overflow, caused by i

NVIDIA Triton Inference Server for Windows and Linux and the Tensor RT backend contain a vulnerability where an attacker

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker c

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker c

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause a memory allocati

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause an integer o

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause an integer o

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause uncontrolled

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause an integer overfl

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause an integer overfl

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where multiple requests could cause a doub

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause a divide by zero

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker c

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker c