2025

A vulnerability was found in Tenda O3V2 1.0.0.12(3880) and classified as critical. Affected by this issue is the functio

An authentication issue was addressed with improved state management. This issue is fixed in App Store Connect 3.0. An a

The protocol used for remote linking over RF for End-of-Train and Head-of-Train (also known as a FRED) relies on a BCH

A vulnerability has been found in Tenda O3V2 1.0.0.12(3880) and classified as critical. Affected by this vulnerability i

A vulnerability, which was classified as critical, was found in Tenda O3V2 1.0.0.12(3880). Affected is the function from

Brocade SANnav before Brocade SANnav 2.4.0a could log database passwords in clear text in audit logs when the daily data

Meshtastic is an open source mesh networking solution. The main_matrix.yml GitHub Action is triggered by the pull_reques

Meshtastic is an open source mesh networking solution. From 1.2.1 until 2.6.2, a packet sent to the routing module that

A vulnerability, which was classified as critical, has been found in Tenda O3V2 1.0.0.12(3880). This issue affects the f

A vulnerability classified as critical was found in Tenda O3V2 1.0.0.12(3880). This vulnerability affects the function f

Brocade SANnav before SANnav 2.4.0a logs passwords and pbe keys in the Brocade SANnav server audit logs after installati

Brocade SANnav before SANnav 2.4.0a logs plaintext passphrases in the Brocade SANnav host server audit logs while execut

The Honeywell Experion PKS contains an Integer Underflow vulnerability in the component Control Data Access (CDA). A

The Honeywell Experion PKS and OneWireless WDM contains a Deployment of Wrong Handler vulnerability in the comp

The Honeywell Experion PKS and OneWireless WDM contains an Integer Underflow vulnerability in the component Con

The Honeywell Experion PKS and OneWireless WDM contains Sensitive Information in Resource vulnerability in the compon

The Honeywell Experion PKS and OneWireless WDM contains a Memory Buffer vulnerability in the component Control Data Acce

A vulnerability classified as critical has been found in code-projects Library System 1.0. This affects an unknown part

A vulnerability was found in code-projects Library System 1.0. It has been rated as critical. Affected by this issue is

Fullscreen API Spoofing and UI Redressing in the handling of Fullscreen API and UI rendering in OpenAI Operator SaaS on

Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player. The HTTP Gateway processes h

Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player. When decoding a scenario (i.

Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player. When decoding a scenario (i.

llama.cpp is an inference of several LLM models in C/C++. Integer Overflow in the gguf_init_from_file_impl function in g

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.23.0, incoming requests usi

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.20.1, cpp-httplib does not

Uncontrolled Resource Consumption vulnerability in Apache Tomcat if an HTTP/2 client did not acknowledge the initial set

A cross-site scripting (XSS) vulnerability in the component /master/login.php of mpgram-web commit 94baadb allows attack

A remote code execution vulnerability exists in CryptoLog (PHP version, discontinued since 2009) due to a chained exploi

An unauthenticated command injection vulnerability exists in Serviio Media Server versions 1.4 through 1.8 on Windows, i

An unrestricted file upload vulnerability exists in BuilderEngine 3.5.0 via the integration of the elFinder 2.0 file man

An unauthenticated command injection vulnerability exists in VICIdial versions 2.9 RC1 through 2.13 RC1, within the vici

A path traversal vulnerability exists in Riverbed SteelHead VCX appliances (confirmed in VCX255U 9.6.0a) due to improper

An unrestricted file upload vulnerability exists in ProcessMaker versions prior to 3.5.4 due to improper handling of upl

A stack-based buffer overflow vulnerability exists in Easy File Sharing HTTP Server version 7.2. The flaw is triggered w

An OS command injection vulnerability exists in Mako Server versions 2.5 and 2.6, specifically within the tutorial inter

An authenticated command injection vulnerability exists in the Polycom HDX Series command shell interface accessible ove

The Honeywell Experion PKS contains an Uninitialized Variable in the common Epic Platform Analyzer (EPA) communications.

A vulnerability was found in code-projects LifeStyle Store 1.0. It has been declared as critical. Affected by this vulne

Secure-upload is a data submission service that validates single-use tokens when accepting submissions to channels. The

pdfme is a TypeScript-based PDF generator and React-based UI. The expression evaluation feature in pdfme 5.2.0 to 5.4.0

The DynamicPageList3 extension is a reporting tool for MediaWiki, listing category members and intersections with variou

The Matrix Rust SDK is a collection of libraries that make it easier to build Matrix clients in Rust. An SQL injection v

Headlamp is an extensible Kubernetes web UI. A command injection vulnerability was discovered in the codeSign.js script

Trend Micro Cleaner One Pro is vulnerable to a Privilege Escalation vulnerability that could allow a local attacker to u

A missing authentication vulnerability in Trend Micro Worry-Free Business Security Services (WFBSS) agent could have all

Trend Micro Password Manager (Consumer) version 5.8.0.1327 and below is vulnerable to a Link Following Privilege Escalat

Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that cou

For some unlikely configurations of multipart upload, an Integer Overflow vulnerability in Apache Tomcat could lead to a

liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Mult