2025

Windows HTML Platforms Security Feature Bypass Vulnerability

MapUrlToZone Security Feature Bypass Vulnerability

Windows Digital Media Elevation of Privilege Vulnerability

Windows Digital Media Elevation of Privilege Vulnerability

Windows Digital Media Elevation of Privilege Vulnerability

Windows Digital Media Elevation of Privilege Vulnerability

Windows Digital Media Elevation of Privilege Vulnerability

Windows WLAN AutoConfig Service Information Disclosure Vulnerability

Windows Digital Media Elevation of Privilege Vulnerability

Windows Digital Media Elevation of Privilege Vulnerability

Windows Digital Media Elevation of Privilege Vulnerability

Windows Kerberos Information Disclosure Vulnerability

Windows Digital Media Elevation of Privilege Vulnerability

Windows Digital Media Elevation of Privilege Vulnerability

Windows Digital Media Elevation of Privilege Vulnerability

Windows Digital Media Elevation of Privilege Vulnerability

Windows Digital Media Elevation of Privilege Vulnerability

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

MapUrlToZone Security Feature Bypass Vulnerability

Windows NTLM Spoofing Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Windows BitLocker Information Disclosure Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Windows BitLocker Information Disclosure Vulnerability

Windows Recovery Environment Agent Elevation of Privilege Vulnerability

Active Directory Federation Server Spoofing Vulnerability

MapUrlToZone Security Feature Bypass Vulnerability

A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of symbolic links. Rs

A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic

A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive` option, a defaul

A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's mach

Cross-Site Request Forgery (CSRF), Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scrip

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F

A vulnerability was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.0.0. It has been classified

A vulnerability was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.0.0 and classified as criti

A stored cross-site scripting (XSS) vulnerability in Arcadyan Meteor 2 CPE FG360 Firmware ETV2.10 allows attackers to ex

IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD web console could allow a local user to obtain sensitive information when a

In Apache Linkis <1.7.0, due to the lack of effective filtering of parameters, an attacker configuring malicious Mysql J

A vulnerability has been found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.0.0 and classified as

A vulnerability, which was classified as problematic, has been found in libretro RetroArch up to 1.19.1 on Windows. Affe

A vulnerability classified as problematic was found in Virtual Computer Vysual RH Solution 2024.12.1. Affected by this v

Sourcecodester House Rental Management system v1.0 is vulnerable to Cross Site Scripting (XSS) in rental/manage_categori

An information disclosure vulnerability exists in the testsave.sh functionality of Wavlink AC3000 M33A8.V5030.210505. A

An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiMail vers

An Improper Neutralization of CRLF Sequences in HTTP Headers ('http response splitting') vulnerability [CWE-113] in Fort

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiS

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiSOAR 7.3.0 through 7.3.3,

An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in

A improper limitation of a pathname to a restricted directory ('path traversal') [CWE-23] in Fortinet FortiRecorder vers