2025

CVE-2025-49084 is a vulnerability in the management console of Absolute Secure Access prior to version 13.56. Attackers

CVE-2025-49083 is a vulnerability in the management console of Absolute Secure Access after version 12.00 and prior to v

CVE-2025-49082 is a vulnerability in the management console of Absolute Secure Access prior to version 13.56. Attackers

IBM Aspera Faspex 5.0.0 through 5.0.12.1 could allow an authenticated user to perform unauthorized actions due to client

IBM Aspera Faspex 5.0.0 through 5.0.12.1 could allow an authenticated user to perform unauthorized actions due to client

A vulnerability, which was classified as problematic, has been found in code-projects Simple Car Rental System 1.0. This

A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. This vulnerabili

A vulnerability classified as problematic has been found in code-projects Simple Car Rental System 1.0. This affects an

A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been rated as critical. Affected

GitProxy is an application that stands between developers and a Git remote endpoint. In versions 1.19.1 and below, att

A vulnerability was found in code-projects Online Farm System 1.0. It has been declared as critical. Affected by this vu

A vulnerability was found in code-projects Online Farm System 1.0. It has been classified as critical. Affected is an un

GitProxy is an application that stands between developers and a Git remote endpoint. In versions 1.19.1 and below, attac

A vulnerability was found in code-projects Online Farm System 1.0 and classified as critical. This issue affects some un

A vulnerability has been found in code-projects Vehicle Management 1.0 and classified as critical. This vulnerability af

GitProxy is an application that stands between developers and a Git remote endpoint (e.g., github.com). In versions 1.19

GitProxy is an application that stands between developers and a Git remote endpoint (e.g., github.com). Versions 1.19.1

vproxy is an HTTP/HTTPS/SOCKS5 proxy server. In versions 2.3.3 and below, untrusted data is extracted from the user-cont

OAuth2-Proxy is an open-source tool that can act as either a standalone reverse proxy or a middleware component integrat

ImageSharp is a 2D graphics library. In versions below 2.1.11 and 3.0.0 through 3.1.10, a specially crafted GIF file con

TrustedFirmware-M (aka Trusted Firmware for M profile Arm CPUs) before 2.1.3 and 2.2.x before 2.2.1 lacks length validat

GetProjectsIdea Create School Management System 1.0 is vulnerable to Cross Site Scripting (XSS) in my_profile_update_for

playground.electronhub.ai v1.1.9 was discovered to contain a cross-site scripting (XSS) vulnerability.

Ceph is a distributed object, block, and file storage platform. In versions 19.2.3 and below, it is possible to send an

A vulnerability, which was classified as critical, was found in code-projects Vehicle Management 1.0. This affects an un

andisearch v0.5.249 was discovered to contain a cross-site scripting (XSS) vulnerability.

The firmware of the AZIOT 2MP Full HD Smart Wi-Fi CCTV Home Security Camera (version V1.00.02) contains an Incorrect Acc

A buffer overflow vulnerability exists in the upload.cgi module of the iptime NAS firmware v1.5.04. The vulnerability ar

Dell SmartFabric OS10 Software, versions prior to 10.6.0.5, contains a Use of Hard-coded Password vulnerability. A low p

Dell SmartFabric OS10 Software, versions prior to 10.6.0.5, contains an Improper Restriction of XML External Entity Refe

Dell SmartFabric OS10 Software, versions prior to 10.6.0.5 contains a Files or Directories Accessible to External Partie

A vulnerability, which was classified as critical, has been found in code-projects Exam Form Submission 1.0. Affected by

A vulnerability classified as critical was found in code-projects Exam Form Submission 1.0. Affected by this vulnerabili

Dell PowerProtect Data Manager, versions prior to 19.19, contain(s) an Improper Input Validation vulnerability in PowerP

Dell XtremIO, version(s) 6.4.0-22, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low p

TechAdvisor versions 2.6 through 3.37-30 for Dell XtremIO X2, contain(s) an Insertion of Sensitive Information into Log

An issue in Aver PTC310UV2 v.0.1.0000.59 allows a remote attacker to obtain sensitive information via a crafted request

An issue in Aver PTC310UV2 firmware v.0.1.0000.59 allows a remote attacker to execute arbitrary code via the SendAction

Dell Encryption and Dell Security Management Server, versions prior to 11.11.0, contain an Improper Link Resolution Befo

A PHAR deserialization vulnerability in the _getHeaders function of PrestaShop v8.2.0 allows attackers to execute arbitr

A PHAR deserialization vulnerability in the component /themes/import of PrestaShop v8.2.0 allows attackers to execute ar

Rocket Software Rocket Zena 4.4.1.26 is vulnerable to SQL Injection via the filter parameter.

UI synchronization issue in the Just-in-Time (JIT) access request approval interface in Devolutions Server 2025.2.4.0 an

Deadlock in PAM automatic check-in feature in Devolutions Server allows a password to remain valid beyond the end of its

** UNSUPPORTED WHEN ASSIGNED ** Improper Output Neutralization for Logs vulnerability in Apache Struts. This issue affe

LinuxServer.io heimdall 2.6.3-ls307 contains a vulnerability in how it handles user-supplied HTTP headers, specifically

A flaw exists within the Linux kernel's handling of new TCP connections. The issue results from the lack of memory relea

CVAT is an open source interactive video and image annotation tool for computer vision. In versions 1.1.0 through 2.41.0

Bugsink is a self-hosted error tracking service. In versions 1.4.2 and below, 1.5.0 through 1.5.4, 1.6.0 through 1.6.3,

AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents. In v0.6