2025

A vulnerability has been found in code-projects Online Appointment Booking System 1.0 and classified as critical. Affect

A local privilege escalation vulnerability in Sophos Intercept X for Windows with Central Device Encryption 2025.1 and o

An authentication bypass vulnerability was reported in FileZ client application that could allow a local attacker with e

A cross-site scripting (XSS) vulnerability was reported in the Lenovo Browser that could allow an attacker to obtain sen

An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local at

An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local at

A SQL injection vulnerability was reported in Lenovo Vantage that could allow a local attacker to modify the local SQLit

GoldenDict 1.5.0 and 1.5.1 has an exposed dangerous method that allows reading and modifying files when a user adds a cr

A buffer overflow vulnerability was reported in the Lenovo Protection Driver, prior to version 5.1.1110.4231, used in Le

A code execution vulnerability has been identified in the Robot Operating System (ROS) 'rosbag' tool, affecting ROS dist

A vulnerability was reported in version 1.0 of the Bluetooth Transmission Alliance protocol adopted by Motorola Smart Co

NVIDIA Jetson Linux contains a vulnerability in UEFI Management mode, where an unprivileged local attacker may cause exp

NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook, where an attacker could

NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, wher

A DLL hijacking vulnerability was reported in TrackPoint Quick Menu software that, under certain conditions, could allow

A DLL hijacking vulnerability was reported in the Motorola Software Fix (Rescue and Smart Assistant) installer that coul

An incorrect permissions vulnerability was reported in Elliptic Labs Virtual Lock Sensor that could allow a local, authe

HCL Connections is vulnerable to an information disclosure vulnerability that could allow a user to obtain sensitive inf

A code injection vulnerability has been discovered in the Robot Operating System (ROS) 'rostopic' command-line tool, aff

A code injection vulnerability has been discovered in the Robot Operating System (ROS) 'rostopic' command-line tool, aff

A code injection vulnerability has been identified in the Robot Operating System (ROS) 'roslaunch' command-line tool, af

A code execution vulnerability has been discovered in the Robot Operating System (ROS) 'rosparam' tool, affecting ROS di

A vulnerability, which was classified as critical, was found in code-projects Online Appointment Booking System 1.0. Aff

A local privilege escalation vulnerability in the Intercept X for Windows installer prior version 1.22 can lead to a loc

OpenZeppelin Contracts is a library for secure smart contract development. Starting in version 5.2.0 and prior to versio

Livewire is a full-stack framework for Laravel. In Livewire v3 up to and including v3.6.3, a vulnerability allows unauth

7-Zip is a file archiver with a high compression ratio. 7-Zip supports extracting from Compound Documents. Prior to vers

7-Zip is a file archiver with a high compression ratio. Zeroes written outside heap buffer in RAR5 handler may lead to m

nbcio-boot v1.0.3 was discovered to contain a SQL injection vulnerability via the userIds parameter at /sys/user/deleteR

Cross Site Scripting vulnerability in Beakon Software Beakon Learning Management System Sharable Content Object Referenc

A vulnerability related to registry permissions in the Intercept X for Windows updater prior to Core Agent version 2024.

A vulnerability, which was classified as critical, has been found in code-projects Online Appointment Booking System 1.0

A vulnerability classified as problematic was found in ZCMS 3.6.0. This vulnerability affects unknown code of the compon

A vulnerability classified as critical has been found in Tenda FH451 1.0.0.9. This affects the function fromWizardHandle

OpenCV is an Open Source Computer Vision Library. Versions 4.10.0 and 4.11.0 have an uninitialized pointer variable on s

Solady is software that provides Solidity snippets with APIs. Starting in version 0.0.125 and prior to version 0.1.24, w

An issue was discovered in AdGuard plugin before 1.11.22 for Safari on MacOS. AdGaurd verbosely logged each url that Saf

NVIDIA DOCA-Host and Mellanox OFED contain a vulnerability in the VGT+ feature, where an attacker on a VM might cause es

SQL Injection vulnerability in cnhcit.com Haichang OA v.1.0.0 allows a remote attacker to obtain sensitive information v

on-headers is a node.js middleware for listening to when a response writes headers. A bug in on-headers versions `<1.1.0

Multer is a node.js middleware for handling `multipart/form-data`. A vulnerability that is present starting in version 1

Island Lake WebBatch before 2025C allows Remote Code Execution via a crafted URL.

Totolink A3300R V17.0.0cu.596_B20250515 was found to contain a command injection vulnerability in the sub_4197C0 functio

An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerabi

Mingyu Security Gateway before v3.0-5.3p was discovered to contain a remote command execution (RCE) vulnerability via th

OA EKP v16 was discovered to contain an arbitrary download vulnerability via the component /ui/sys_ui_extend/sysUiExtend

DiracX-Web is a web application that provides an interface to interact with the DiracX services. Prior to version 0.1.0-

Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific da

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection