2025

The MCP inspector is a developer tool for testing and debugging MCP servers. Versions of MCP Inspector below 0.14.1 are

Use of fixed learning codes, one code to lock the car and the other code to unlock it, in the Key Fob Transmitter in Cyc

Use of fixed learning codes, one code to lock the car and the other code to unlock it, the Key Fob Transmitter in KIA-br

A SQL injection vulnerability in No Boss Calendar component before 5.0.7 for Joomla was discovered. The vulnerability al

An information disclosure vulnerability in the SD-WAN feature of Palo Alto Networks PAN-OS® software enables an unauthor

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypas

An incorrect privilege assignment vulnerability in Palo Alto Networks Cortex® XDR Broker VM allows an authenticated admi

An insufficient implementation of cache vulnerability in Palo Alto Networks Prisma® Access Browser enables users to bypa

PCSX2 is a free and open-source PlayStation 2 (PS2) emulator. A stack-based buffer overflow exists in the Kprintf_HLE fu

A SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla was discovered. The extension i

A potential elevated privilege issue has been reported with InstallShield built Standalone MSI setups having multiple In

A SQL injection vulnerability in RSMediaGallery! component 1.7.4 - 2.1.7 for Joomla was discovered. The issue occurs wit

A stored XSS vulnerability in RSTickets! component 1.9.12 - 3.3.0 for Joomla was discovered. It allows attackers to perf

Remote code execution vulnerability in RSForm!pro component 3.0.0 - 3.3.14 for Joomla was discovered. The issue occurs w

The iSTAR Configuration Utility (ICU) tool leaks memory, which could result in the unintended exposure of unauthorized d

There is a "Use After Free" vulnerability in Qt's QHttp2ProtocolHandler in the QtNetwork module. This only affects HTTP/

SunGrow's back end users system iSolarCloud https://isolarcloud.com  uses an MQTT service to transport data from the us

Improper input validation in the OSSEC HIDS agent for Windows prior to version 3.8.0 allows an attacker in with control

A critical security vulnerability exists in remote cache extensions for common build systems utilizing bucket-based remo

Improper input validation performed during the authentication process of FlashBlade could lead to a system Denial of Ser

Improper input validation performed during the authentication process of FlashArray could lead to a system Denial of Ser

Improper Neutralization of Special Elements in the chromium_path variable may allow OS command injection. This issue aff

Improper Neutralization of Special Elements in the backup name field may allow OS command injection. This issue affects

Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Abu

Improper Input Validation vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Exploiting Incorr

Laravel Translation Manager is a package to manage Laravel translation files. Prior to version 0.6.8, the application is

Wasp (Web Application Specification) is a Rails-like framework for React, Node.js, and Prisma. Prior to version 0.16.6,

In the moPS App through 1.8.618, all users can access administrative API endpoints without additional authentication, re

Kafbat UI is a web user interface for managing Apache Kafka clusters. An unsafe deserialization vulnerability in version

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a r

Stored Cross-Site Scripting (XSS) vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. This vulnerability allow

In IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04, a configuration error has been detected in cross-origin resource sharing

Code injection vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. This vulnerability allows an attacker to st

Stored Cross-Site Scripting (XSS) vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. This vulnerability allow

In IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04, a configuration error has been detected in cross-origin resource sharing

Code injection vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. This vulnerability allows an attacker to st

Uncontrolled resource consumption vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. The devices improperly h

Uncontrolled resource consumption vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. The device is vulnerable

An improper neutralization of inputs used in expression language allows remote code execution with the highest privilege

A predefined administrative account is not documented and cannot be deactivated. This account cannot be misused from the

The wallet has an authentication bypass vulnerability that allows access to specific pages.

SystemUI has an incorrect component protection setting, which allows access to specific information.

Improper neutralization of input provided by an unauthorized user into changes__reference_id parameter in URL allows for

Atheos is a self-hosted browser-based cloud integrated development environment. Prior to version 6.0.4, improper use of

The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. In Auth0 Next.js SDK ve

We have identified a buffer overflow issue allowing out-of-bounds write when processing LLMNR or mDNS queries with very

CVE-2025-1701 is a high-severity vulnerability in the MIM Admin service. An attacker could exploit this vulnerability by

Path Traversal vulnerability in WF Steuerungstechnik GmbH airleader MASTER allows Retrieve Embedded Sensitive Data.This

Improper Authentication vulnerability in WF Steuerungstechnik GmbH airleader MASTER allows Authentication Bypass.This is

Auth0-PHP is a PHP SDK for Auth0 Authentication and Management APIs. Versions 8.0.0-BETA3 prior to 8.3.1 contain a vulne