2025

A vulnerability was found in Portabilis i-Educar 2.10. It has been classified as problematic. This affects an unknown pa

DIAView (v4.2.0 and prior) - Directory Traversal Information Disclosure Vulnerability

A vulnerability was found in Portabilis i-Educar 2.10 and classified as problematic. Affected by this issue is some unkn

A vulnerability has been found in Portabilis i-Educar 2.10 and classified as problematic. Affected by this vulnerability

A vulnerability, which was classified as problematic, was found in Axiomatic Bento4 up to 1.6.0-641. Affected is the fun

A vulnerability, which was classified as problematic, has been found in cronoh NanoVault up to 1.2.1. This issue affects

Electron Capture facilitates video playback for screen-sharing and capture. In versions 2.19.1 and below, the elecap app

VTun-ng is a Virtual Tunnel over TCP/IP network. In versions 3.0.17 and below, failure to initialize encryption modules

Tilesheets MediaWiki Extension adds a table lookup parser function for an item and returns the requested image. A missin

Russh is a Rust SSH client & server library. In versions 0.54.0 and below, the channel window adjust message of the SSH

js-toml is a TOML parser for JavaScript, fully compliant with the TOML 1.0.0 Spec. In versions below 1.0.2, a prototype

pyLoad is the free and open-source Download Manager written in pure Python. In versions 0.5.0b3.dev89 and below, there i

Claude Code is an agentic coding tool. In versions below 1.0.20, an error in command parsing makes it possible to bypass

Claude Code is an agentic coding tool. In versions below 0.2.111, a path validation flaw using prefix matching instead o

The glpi-screenshot-plugin allows users to take screenshots or screens recording directly from GLPI. In versions below 2

IPX is an image optimizer powered by sharp and svgo. In versions 1.3.1 and below, 2.0.0-0 through 2.1.0, and 3.0.0 throu

Cursor is a code editor built for programming with AI. Cursor allows writing in-workspace files with no user approval in

Cursor is a code editor built for programming with AI. Cursor allows writing in-workspace files with no user approval in

ADOdb is a PHP database class library that provides abstractions for performing queries and managing databases. In versi

Trilium Notes is an open-source, cross-platform hierarchical note taking application with focus on building large person

EspoCRM is a web application with a frontend designed as a single-page application and a REST API backend written in PHP

A vulnerability classified as problematic was found in libtiff 4.6.0. This vulnerability affects the function PS_Lvl2pag

A vulnerability, which was classified as problematic, has been found in elunez eladmin up to 2.7. Affected by this issue

A vulnerability classified as critical was found in cloudfavorites favorites-web up to 1.3.0. Affected by this vulnerabi

LiquidFiles before 4.1.2 allows directory traversal by configuring the pathname of a local executable file as an Actions

LiquidFiles before 4.1.2 supports FTP SITE CHMOD for mode 6777 (setuid and setgid), which allows FTPDrop users to execut

An Improper Input Validation in certain UniFi Access devices could allow a Command Injection by a malicious actor with a

An Improper Input Validation in EdgeMAX EdgeSwitch (Version 1.10.4 and earlier) could allow a Command Injection by a mal

A vulnerability classified as problematic has been found in Exrick xboot up to 3.3.4. Affected is an unknown function of

A vulnerability was found in Exrick xboot up to 3.3.4. It has been rated as critical. This issue affects some unknown pr

Exporting a TPM based RSA key larger than 2048 bits from the TPM could overrun a stack buffer if the default `MAX_RSA_KE

tiaudit in Tera Insights tiCrypt before 2025-07-17 allows unauthenticated REST API requests that reveal sensitive inform

The vulnerable code can bypass the Captcha check in Liferay Portal 7.4.3.80 through 7.4.3.132, and Liferay DXP 2024.Q1.1

The fragment preview functionality in Liferay Portal 7.4.3.61 through 7.4.3.132, and Liferay DXP 2024.Q4.1 through 2024.

A vulnerability was found in Exrick xboot up to 3.3.4. It has been declared as critical. This vulnerability affects the

A vulnerability was found in Exrick xboot up to 3.3.4. It has been classified as problematic. This affects an unknown pa

CyberGhostVPNSetup.exe (Windows installer) is signed using the weak cryptographic hash algorithm SHA-1, which is vulnera

The GitKraken Desktop 10.8.0 and 11.1.0 is susceptible to code injection due to misconfigured Electron Fuses. Specifical

Unisite CMS version 5.0 contains a stored Cross-Site Scripting (XSS) vulnerability in the "Report" functionality. A mali

A Boolean-based SQL injection vulnerability was discovered in Axelor 5.2.4 via the _domain parameter. An attacker can ma

A vulnerability was found in Boquan DotWallet App 2.15.2 on Android and classified as problematic. Affected by this issu

A vulnerability has been found in RiderLike Fruit Crush-Brain App 1.0 on Android and classified as problematic. Affected

The YouDao plugin for StarDict, as used in stardict 3.0.7+git20220909+dfsg-6 in Debian trixie and elsewhere, sends an X1

An Insecure Direct Object Reference (IDOR) vulnerability was discovered in SOGo Webmail thru 5.6.0, allowing an authenti

A vulnerability, which was classified as critical, was found in givanz Vvvebjs up to 2.0.4. Affected is an unknown funct

A vulnerability, which was classified as problematic, has been found in givanz Vvveb up to 1.0.5. This issue affects som

Paramount Macrium Reflect through 2025-06-26 allows local attackers to execute arbitrary code with administrator privile

Paramount Macrium Reflect through 2025-06-26 allows attackers to execute arbitrary code with administrator privileges vi

An arbitrary file upload vulnerability in ZKEACMS v4.1 allows attackers to execute arbitrary code via a crafted file.

Dell Enterprise SONiC OS, version 4.5.0, contains a cryptographic key vulnerability in SSH. An unauthenticated remote at