2025

Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU rac

Nagios Log Server versions prior to 2026R1.0.1 are vulnerable to local privilege escalation due to a combination of sudo

Nagios Log Server versions prior to 2026R1.0.1 contain an authenticated command injection vulnerability in the experimen

A security vulnerability has been detected in itsourcecode Web-Based Internet Laboratory Management System 1.0. The impa

PDFPatcher thru 1.1.3.4663 executable's XML bookmark import functionality does not restrict XML external entity (XXE) re

phpMyFAQ is an open source FAQ web application. Prior to version 4.0.14, an authenticated SQL injection vulnerability in

Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to m

An injection vulnerability has been discovered in the API feature in Digi On-Prem Manager, enabling an attacker with val

A vulnerability was found in Campcodes Supplier Management System 1.0. This affects an unknown part of the file /manufac

MyScreenTools v2.2.1.0 contains a critical OS command injection vulnerability in the GIF compression tool. The applicati

QaTraq 6.9.2 allows authenticated users to upload arbitrary files via the "Add Attachment" feature in the "Test Script"

A security vulnerability has been detected in Tenda CH22 1.0.0.1. This impacts the function fromPptpUserSetting of the f

A vulnerability was identified in itsourcecode Online Voting System 1.0. The affected element is an unknown function of

A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of

A vulnerability has been identified in PS/IGES Parasolid Translator Component (All versions < V29.0.258), Simcenter Fema

A flaw has been found in code-projects Nero Social Networking Site 1.0. This issue affects some unknown processing of th

A vulnerability was detected in g33kyrash Online-Banking-System up to 12dbfa690e5af649fb72d2e5d3674e88d6743455. This vul

A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Affected is an unknown function o

A vulnerability was determined in Campcodes School Fees Payment Management System 1.0. This impacts an unknown function

OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Sig

EasyFlow GP developed by Digiwin has a Denial of service vulnerability, allowing unauthenticated remote attackers to sen

A vulnerability was determined in lsfusion platform up to 6.1. Affected by this vulnerability is the function UploadFile

TenderDocTransfer developed by Chunghwa Telecom has a Arbitrary File Copy and Paste vulnerability. The application sets

TenderDocTransfer developed by Chunghwa Telecom has a Arbitrary File Delete vulnerability. The application sets up a sim

A vulnerability was detected in Tenda AC20 up to 16.03.08.12. The impacted element is an unknown function of the file /g

A security vulnerability has been detected in itsourcecode Inventory Management System 1.0. The affected element is an u

A vulnerability was found in shsuishang ShopSuite ModulithShop up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a. Affected

A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element

A security flaw has been discovered in PHPGurukul Tourism Management System 1.0. The affected element is an unknown func

A vulnerability has been found in code-projects Student Information System 2.0. This issue affects some unknown processi

A flaw has been found in code-projects Student Information System 2.0. This vulnerability affects unknown code of the fi

A vulnerability was detected in code-projects Student Information System 2.0. This affects an unknown part of the file /

A security flaw has been discovered in itsourcecode Inventory Management System 1.0. Affected is an unknown function of

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to SQL Injection via the ‘s

A vulnerability was determined in itsourcecode Inventory Management System 1.0. This affects an unknown function of the

A vulnerability has been found in itsourcecode Inventory Management System 1.0. The affected element is an unknown funct

A weakness has been identified in code-projects Simple Cafe Ordering System 1.0. This vulnerability affects unknown code

A vulnerability was identified in code-projects Simple Cafe Ordering System 1.0. Affected by this issue is some unknown

A vulnerability was determined in D-Link DIR-816L 2_06_b09_beta. This issue affects the function soapcgi_main of the fil

A vulnerability was found in D-Link DIR-816L 2_06_b09_beta. This vulnerability affects the function scandir_main of the

A vulnerability has been found in D-Link DIR-816L 2_06_b09_beta. This affects the function genacgi_main of the file gena

The vulnerability, if exploited, could allow a miscreant with read access to Edge Project files or Edge Offline Cache f

The affected product discloses device telemetry, configuration, and sensitive information via WebSocket traffic to unaut

General Industrial Controls Lynx+ Gateway is vulnerable to a cleartext transmission vulnerability that could allow an a

General Industrial Controls Lynx+ Gateway is missing critical authentication in the embedded web server which could all

General Industrial Controls Lynx+ Gateway is vulnerable to a weak password requirement vulnerability, which may allow a

Information Disclosure in web-accessible backup file in SourceCodester Simple Online Book Store System allows a remote u

A vulnerability was identified in the email parsing library due to improper handling of specially formatted recipient em

Nero BackItUp in the Nero Productline is vulnerable to a path parsing/UI rendering flaw (CWE-22) that, in combination wi

A Reflected Cross Site Scripting (XSS) vulnerability was found in the Application Server of Desktop Alert PingAlert vers