2025

A vulnerability, which was classified as critical, has been found in libav up to 12.3. Affected by this issue is the fun

A vulnerability classified as problematic was found in libav up to 12.3. Affected by this vulnerability is the function

Improper Input Validation vulnerability in Roche Diagnostics navify Monitoring allows an attacker to manipulate input da

Adobe Experience Manager versions 6.5.23 and earlier are affected by an Improper Restriction of XML External Entity Refe

Adobe Experience Manager versions 6.5.23 and earlier are affected by a Misconfiguration vulnerability that could result

An issue was discovered on FIRSTNUM JC21A-04 devices through 2.01ME/FN. They enable the SSH service by default with the

Jointelli 5G CPE 21H01 firmware JY_21H01_A3_v1.36 devices allow (blind) OS command injection. Multiple endpoints are vul

An issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6. There are verbose error messages.

An issue was discovered on FIRSTNUM JC21A-04 devices through 2.01ME/FN that allows authenticated attackers to execute ar

OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3, a call to opj_jp2_read_header may lead

An issue in thinkphp3 v.3.2.5 allows a remote attacker to execute arbitrary code via the index.php component

An issue in thinkphp v.5.1 allows a remote attacker to execute arbitrary code via the routecheck function

An out-of-bounds read vulnerability exists in the EMF functionality of PDF-XChange Co. Ltd PDF-XChange Editor 10.6.0.396

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t

A lack of SSL certificate validation in BlueStacks v5.20 allows attackers to execute a man-it-the-middle attack and obta

The ICTBroadcast application unsafely passes session cookie data to shell processing, allowing an attacker to inject she

A vulnerability affecting the scanning module in Emsisoft Anti-Malware prior to 2024.12 allows attackers on a remote ser

An out-of-bounds read vulnerability exists in the EMF functionality of PDF-XChange Editor version 10.5.2.395. By using

A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to re

A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to re

A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to re

IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.03 could be susceptible to cross-site scripting due to n

A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker

A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker

A vulnerability, which was classified as problematic, was found in atjiu pybbs up to 6.0.0. Affected is an unknown funct

A vulnerability, which was classified as problematic, has been found in atjiu pybbs up to 6.0.0. This issue affects some

A vulnerability classified as problematic was found in atjiu pybbs up to 6.0.0. This vulnerability affects unknown code

A vulnerability classified as problematic has been found in atjiu pybbs up to 6.0.0. This affects an unknown part of the

A vulnerability was found in atjiu pybbs up to 6.0.0. It has been rated as problematic. Affected by this issue is some u

The Employee Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘noaccess_msg’ paramete

The Download Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘name’ parameter in all v

The WP Import Export Lite plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validati

The WP Import Export Lite plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validati

A low privileged local attacker can interact with the affected service although user-interaction should not be allowed.

A low privileged local attacker can abuse the affected service by using a hardcoded cryptographic key.

A vulnerability was found in atjiu pybbs up to 6.0.0. It has been declared as problematic. Affected by this vulnerabilit

A vulnerability was found in atjiu pybbs up to 6.0.0. It has been classified as critical. Affected is the function updat

A vulnerability was found in atjiu pybbs up to 6.0.0 and classified as problematic. This issue affects the function send

The WP Easy Contact plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘noaccess_msg’ parameter i

The Campus Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘noaccess_msg’ parameter

The Use-your-Drive | Google Drive plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting

A vulnerability has been found in atjiu pybbs up to 6.0.0 and classified as critical. This vulnerability affects unknown

An improper verification of cryptographic signature in Zscaler's SAML authentication mechanism on the server-side allowe

A vulnerability, which was classified as problematic, was found in atjiu pybbs up to 6.0.0. This affects the function ad

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.10. Affected by this issue

A vulnerability classified as problematic was found in Portabilis i-Educar 2.10. Affected by this vulnerability is an un

LibreChat is a ChatGPT clone with additional features. In versions 0.0.6 through 0.7.7-rc1, an exposed testing endpoint

A vulnerability classified as problematic has been found in Portabilis i-Educar 2.10. Affected is an unknown function of

A vulnerability was found in Portabilis i-Educar 2.10. It has been rated as problematic. This issue affects some unknown

A vulnerability was found in Portabilis i-Educar 2.10. It has been declared as problematic. This vulnerability affects u