2025

The EAI developed by Digiwin has a Privilege Escalation vulnerability, allowing remote attackers with regular privileges

The SFT developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbi

The web application allows user input to pass unfiltered to a command executed on the underlying operating system. An at

File contents could be read from the local file system by an attacker. Additionally, malicious code could be inserted in

The web application allows user input to pass unfiltered to a command executed on the underlying operating system. The v

A locally authenticated, privileged user can craft a malicious OpenSSL configuration file, potentially leading the agent

WinMatrix3 Web package developed by Simopro Technology has a SQL Injection vulnerability, allowing unauthenticated remot

WinMatrix3 Web package developed by Simopro Technology has an Arbitrary File Upload vulnerability, allowing remote attac

WinMatrix3 developed by Simopro Technology has an Insecure Deserialization vulnerability, allowing unauthenticated remot

WordPress 3.5 through 6.8.2 allows remote attackers to guess titles of private and draft posts via pingback.ping XML-RPC

A vulnerability was found in Chanjet CRM 1.0 and classified as critical. Affected by this issue is some unknown function

A vulnerability has been found in Tenda AC6 15.03.06.50 and classified as critical. Affected by this vulnerability is th

A vulnerability, which was classified as critical, was found in TOTOLINK T6 4.1.5cu.748_B20211015. Affected is the funct

A vulnerability, which was classified as critical, has been found in TOTOLINK T6 4.1.5cu.748_B20211015. This issue affec

A vulnerability classified as critical was found in D-Link DI-8100 1.0. This vulnerability affects the function sprintf

Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a networ

A vulnerability classified as critical has been found in D-Link DIR-513 1.10. This affects the function sprintf of the f

A vulnerability was found in D-Link DIR-513 1.0. It has been rated as critical. Affected by this issue is the function s

A vulnerability was found in D-Link DI-8100 1.0. It has been declared as critical. Affected by this vulnerability is the

A vulnerability was found in yangzongzhuan RuoYi up to 4.8.1. It has been classified as problematic. Affected is an unkn

An issue was discovered in Westermo WeOS 5 (5.24 through 5.24.4). A threat actor potentially can gain unauthorized acces

A vulnerability was found in yangzongzhuan RuoYi up to 4.8.1 and classified as critical. This issue affects the function

A vulnerability has been found in itsourcecode Insurance Management System 1.0 and classified as critical. This vulnerab

An issue was discovered in Logpoint before 7.6.0. An attacker with operator privileges can exploit a path traversal vuln

An issue was discovered in Logpoint before 7.6.0. When creating reports, attackers can create custom Jinja templates tha

In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding removal allows an attacker to

Mbed TLS before 3.6.4 allows a use-after-free in certain situations of applications that are developed in accordance wit

Mbed TLS before 3.6.4 has a NULL pointer dereference because mbedtls_asn1_store_named_data can trigger conflicting data

A vulnerability, which was classified as critical, was found in itsourcecode Insurance Management System 1.0. This affec

A vulnerability classified as problematic was found in yangzongzhuan RuoYi up to 4.8.1. Affected by this vulnerability i

A vulnerability classified as problematic has been found in yangzongzhuan RuoYi up to 4.8.1. Affected is the function ad

A vulnerability was found in yangzongzhuan RuoYi up to 4.8.1. It has been rated as problematic. This issue affects some

A vulnerability was found in Codecanyon iDentSoft 2.0. It has been classified as critical. This affects an unknown part

A vulnerability was found in harry0703 MoneyPrinterTurbo up to 1.2.6 and classified as critical. Affected by this issue

A vulnerability has been found in harry0703 MoneyPrinterTurbo up to 1.2.6 and classified as critical. Affected by this v

A vulnerability, which was classified as critical, was found in harry0703 MoneyPrinterTurbo up to 1.2.6. Affected is the

CWE-918 Server-Side Request Forgery (SSRF)

CWE-434 Unrestricted Upload of File with Dangerous Type

CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability, which was classified as critical, has been found in Onyx up to 0.29.1. This issue affects the function

A vulnerability classified as problematic was found in Foresight News App up to 2.6.4 on Android. This vulnerability aff

A vulnerability classified as problematic has been found in IDnow App up to 9.6.0 on Android. This affects an unknown pa

A vulnerability was found in InstantBits Web Video Cast App up to 5.12.4 on Android. It has been rated as problematic. A

A vulnerability was found in Dunamu StockPlus App up to 7.62.10 on Android. It has been declared as problematic. Affecte

A vulnerability was found in CallApp Caller ID App up to 2.0.4 on Android. It has been classified as problematic. Affect

A vulnerability was found in TDuckCloud tduck-platform 5.1 and classified as critical. This issue affects the function U

A vulnerability has been found in Zavy86 WikiDocs up to 1.0.78 and classified as problematic. This vulnerability affects

A vulnerability, which was classified as critical, was found in pmTicket Project-Management-Software up to 2ef379da2075f

A vulnerability, which was classified as problematic, has been found in Huashengdun WebSSH up to 1.6.2. Affected by this