2025

The ip_do_job request in GestioIP v3.5.7 is vulnerable to Cross-Site Scripting (XSS). It allows data exfiltration and en

A privilege escalation vulnerability was discovered that could allow a valid, authenticated LXCA user to escalate their

A potential buffer overflow vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo App Store that could al

A potential TOCTOU vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo App Store that could allow a loc

IPv6-in-IPv4 tunneling (RFC 4213) allows an attacker to spoof and route traffic via an exposed network interface.

IPv4-in-IPv6 and IPv6-in-IPv6 tunneling (RFC 2473) do not require the validation or verification of the source of a netw

TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user in

TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user in

TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user in

TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user in

TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user in

TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user in

TYPO3 is a free and open source Content Management Framework. Applications that use `TYPO3\CMS\Core\Http\Uri` to parse e

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F

Umbraco.Forms is a web form framework written for the nuget ecosystem. Character limits configured by editors for short

An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-

Out-of-bounds read in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker

Off-by-one error in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to

A flaw was found in the HAL Console in the Wildfly component, which does not neutralize or incorrectly neutralizes user-

On-Premises Data Gateway Information Disclosure Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Windows CSC Service Information Disclosure Vulnerability

Microsoft Outlook Remote Code Execution Vulnerability

Windows Digital Media Elevation of Privilege Vulnerability

Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability

Windows Cryptographic Information Disclosure Vulnerability

MapUrlToZone Security Feature Bypass Vulnerability

MapUrlToZone Security Feature Bypass Vulnerability

MapUrlToZone Security Feature Bypass Vulnerability

Windows Digital Media Elevation of Privilege Vulnerability

Windows Digital Media Elevation of Privilege Vulnerability

Windows Kernel Memory Information Disclosure Vulnerability

Windows Kernel Memory Information Disclosure Vulnerability

Windows Kernel Memory Information Disclosure Vulnerability

Windows Kernel Memory Information Disclosure Vulnerability

Windows Kernel Memory Information Disclosure Vulnerability

Windows Kernel Memory Information Disclosure Vulnerability

Windows Kernel Memory Information Disclosure Vulnerability

Windows SmartScreen Spoofing Vulnerability

Windows Security Account Manager (SAM) Denial of Service Vulnerability

Windows Digital Media Elevation of Privilege Vulnerability

Windows Themes Spoofing Vulnerability

Windows Geolocation Service Information Disclosure Vulnerability

Windows COM Server Information Disclosure Vulnerability

Windows Virtual Trusted Platform Module Denial of Service Vulnerability

Windows Virtual Trusted Platform Module Denial of Service Vulnerability

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

Windows Event Tracing Denial of Service Vulnerability

Windows COM Server Information Disclosure Vulnerability