2025

A vulnerability has been found in PHPGurukul Online Banquet Booking System 1.0 and classified as critical. This vulnerab

An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDir

An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, where the authenticat

An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, where the functions `

An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.27 and 200.18.7.1.323, and in Ruckus ZoneDir

An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.27 and 200.18.7.1.323, and in Ruckus ZoneDir

An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139 and in Ruckus ZoneDire

An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDir

An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDir

The com.skt.prod.dialer application through 12.5.0 for Android enables any installed application (with no permissions) t

The com.enflick.android.tn2ndLine application through 24.17.1.0 for Android enables any installed application (with no p

A vulnerability, which was classified as problematic, was found in PHPGurukul Online Banquet Booking System 1.0. This af

An SQL injection vulnerability in the legacy (transparent) SMTP proxy of Sophos Firewall versions older than 21.0 MR2 (2

A command injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to adjac

An arbitrary file writing vulnerability in the Secure PDF eXchange (SPX) feature of Sophos Firewall versions older than

In ExtremeControl before 25.5.12, a cross-site scripting (XSS) vulnerability was discovered in a login interface of the

Use of Hard-coded Credentials vulnerability in PAVO Inc. PAVO Pay allows Read Sensitive Constants Within an Executable.

Authorization Bypass Through User-Controlled Key vulnerability in PAVO Inc. PAVO Pay allows Exploitation of Trusted Iden

A business logic vulnerability in the Up2Date component of Sophos Firewall older than version 21.0 MR1 (20.0.1) can lead

A post-auth SQL injection vulnerability in WebAdmin of Sophos Firewall versions older than 21.0 MR1 (21.0.1) can potenti

A vulnerability, which was classified as problematic, has been found in PHPGurukul Online Banquet Booking System 1.0. Af

Authorization Bypass Through User-Controlled Key vulnerability in Turpak Automatic Station Monitoring System allows Priv

Incorrect authentication vulnerability in ParkingDoor. Through this vulnerability it is possible to operate the device w

An attacker spoofing answers to ECS enabled requests sent out by the Recursor has a chance of success higher than non-EC

Authorization Bypass Through User-Controlled Key vulnerability in Akbim Software Online Exam Registration allows Exploit

A vulnerability classified as problematic was found in PHPGurukul Online Banquet Booking System 1.0. Affected by this vu

Authorization Bypass Through User-Controlled Key vulnerability in Turtek Software Eyotek allows Exploitation of Trusted

Insufficient protection against brute-force and runtime manipulation in the local authentication component in Two App St

Unencrypted storage in the database in Two App Studio Journey v5.5.9 for iOS allows local attackers to extract sensitive

File access paths in configuration files uploaded by users with administrator access are not validated. This issue affe

Users with administrator access can create databases files outside the files area of the Fuseki server. This issue affe

A high privileged remote attacker can gain persistent XSS via POST requests due to improper neutralization of special el

An unauthenticated remote attacker could exploit a buffer overflow vulnerability in the device causing a denial of servi

A high privileged remote attacker can alter the configuration database via POST requests due to improper neutralization

A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST requests to

A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST requests to

A high privileged remote attacker can execute arbitrary system commands via GET requests in the cloud server communicati

A high privileged remote attacker can execute arbitrary system commands via POST requests in the diagnostic action due t

A high privileged remote attacker can execute arbitrary system commands via POST requests in the send_sms action due to

Authorization Bypass Through User-Controlled Key vulnerability in Turtek Software Eyotek allows Exploitation of Trusted

Due to insufficient verification, an attacker could use a malicious client to bypass authentication checks and run RPC c

The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Cross-Site Request Forgery in all v

The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

The Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-S

An insecure sensitive key storage issue was found in MyASUS. potentially allowing unauthorized actor to obtain a token t

An insecure sensitive key storage issue was found in MyASUS. potentially allowing unauthorized actor to obtain a token t

Use of hard-coded, the same among all vulnerable installations SQLite credentials vulnerability in SIGNUM-NET FARA allow

Certain modem models developed by Askey has a Stack-based Buffer Overflow vulnerability, allowing unauthenticated remote

WinMatrix3 Web package developed by Simopro Technology has a Reflected Cross-site Scripting vulnerability, allowing unau

WinMatrix3 Web package developed by Simopro Technology has a SQL Injection vulnerability, allowing unauthenticated remot