2025

An issue was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. Sensitive Informati

npm package `expr-eval` is vulnerable to Prototype Pollution. An attacker with access to express eval interface can use

A vulnerability was detected in code-projects Simple Online Hotel Reservation System 1.0. This issue affects some unknow

A security vulnerability has been detected in code-projects Simple Online Hotel Reservation System 1.0. This vulnerabili

Memos is a privacy-first, lightweight note-taking service that uses Access Tokens to authenticate application access. Wh

A vulnerability exists in QuickCMS version 6.8 where sensitive admin credentials are hardcoded in a configuration file a

Rockwell Automation Arena® suffers from a stack-based buffer overflow vulnerability. The specific flaw exists within the

Authorization Bypass Through User-Controlled Key, Weak Password Recovery Mechanism for Forgotten Password, Authenticatio

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in NCP-HG100 1.4

The Creta Testimonial Showcase WordPress plugin before 1.2.4 is vulnerable to Local File Inclusion. This makes it possib

IQ-Support developed by IQ Service International has an Arbitrary File Read vulnerability, allowing unauthenticated remo

The SNORDIAN's H5PxAPIkatchu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'insert_data' AJA

Use after free in Internals in Google Chrome on iOS prior to 127.0.6533.88 allowed a remote attacker who convinced a use

Inappropriate implementation in DevTools in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potential

Apollo Federation is an architecture for declaratively composing APIs into a unified graph. A vulnerability in versions

SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the cl

IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a

A vulnerability was found in Sonarr 4.0.15.2940. The impacted element is an unknown function of the file C:\ProgramData\

A vulnerability has been found in Radarr 5.28.0.10274. The affected element is an unknown function of the file C:\Progra

A stack buffer overflow vulnerability exists in the D-Link DIR-816A2 router firmware DIR-816A2_FWv1.10CNB05_R1B011D88210

Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization design

Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contains an Insecure Temporary File vulnerability

Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain a Detection of Error Condition Without Ac

An issue in Intermesh BV GroupOffice vulnerable before v.25.0.47 and 6.8.136 allows a remote attacker to execute arbitra

The issue was addressed by refusing external connections by default. This issue is fixed in Compressor 4.11.1. An unauth

A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_FW102B02 within the `prog.cgi` a

A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_FW102B02 within the `prog.cgi` a

A vulnerability was detected in SourceCodester Patients Waiting Area Queue Management System 1.0. The affected element i

Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering

A stack-based buffer overflow vulnerability exists in the makeRequest.cgi binary of Linksys RE7000 routers (Firmware FW_

A stack-based buffer overflow exists in the validate_static_route function of the httpd binary on Linksys E1200 v2 route

A stack-based buffer overflow vulnerability exists in the libshared.so library of Cisco Linksys E1200 v2 routers (Firmwa

A stack-based buffer overflow exists in the httpd binary of Linksys E1200 v2 routers (Firmware E1200_v2.0.11.001_us.tar.

A stack-based buffer overflow exists in the get_merge_ipaddr function of the httpd binary on Linksys E1200 v2 routers (F

A vulnerability in Cisco Catalyst Center Virtual Appliance could allow an authenticated, remote attacker to elevate priv

A security vulnerability has been detected in cameasy Liketea 1.0.0. Impacted is the function list of the file laravel/a

MaxKB is an open-source AI assistant for enterprise. In versions prior to 2.3.1, a user can access internal network serv

Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthent

Improper authorization handling in Zoom Workplace for Android before version 6.5.10 may allow an unauthenticated user to

Improper verification of cryptographic signature in the installer for Zoom Workplace VDI Client for Windows may allow an

pgAdmin <= 9.9  is affected by a vulnerability in the LDAP authentication mechanism allows bypassing TLS certificate ver

pgAdmin <= 9.9  is affected by an LDAP injection vulnerability in the LDAP authentication flow that allows an attacker t

The AI Engine plugin for WordPress is vulnerable to PHP Object Injection via PHAR Deserialization in all versions up to,

The Import any XML, CSV or Excel File to WordPress (WP All Import) plugin for WordPress is vulnerable to Remote Code Exe

The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to privilege escalati

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, previ

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Symfony's HttpFoundati

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_objref: validate objref and objrefma

In the Linux kernel, the following vulnerability has been resolved: btrfs: avoid potential out-of-bounds in btrfs_encod

In the Linux kernel, the following vulnerability has been resolved: sctp: Fix MAC comparison to be constant-time To pr