2025

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Tomc

Cross-site scripting (XSS) vulnerability in Alteryx Server 2023.1.1.460 allows remote attackers to inject arbitrary web

Insecure Permissions vulnerability in the Local Storage in Alteryx Server 2023.1.1.460 allows remote attackers to obtain

An issue in Alteryx Server v.2023.1.1.460 allows HTML injection via a crafted script to the pages component.

DiscordNotifications is an extension for MediaWiki that sends notifications of actions in your Wiki to a Discord channel

A vulnerability was found in code-projects LifeStyle Store 1.0. It has been classified as critical. Affected is an unkno

A vulnerability was found in code-projects Mobile Shop 1.0 and classified as critical. This issue affects some unknown p

Late Release of Memory after Effective Lifetime vulnerability in Apache HTTP Server. This issue affects Apache HTTP Ser

In some mod_ssl configurations on Apache HTTP Server versions through to 2.4.63, an HTTP desynchronisation attack allows

In certain proxy configurations, a denial of service attack against Apache HTTP Server versions 2.4.26 through to 2.4.63

Classic buffer overflow in certain Zoom Clients for Windows may allow an authorised user to conduct a denial of service

Insufficient control flow management in certain Zoom Clients for iOS before version 6.4.5 may allow an unauthenticated u

Cross-site scripting in certain Zoom Clients before version 6.4.5 may allow an authenticated user to conduct a disclosu

loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a

In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection o

In Wing FTP Server through 7.4.4, the administrative web interface (listening by default on port 5466) runs as root or S

Wing FTP Server before 7.4.4 does not properly validate and sanitize the url parameter of the downloadpass.html endpoint

In some mod_ssl configurations on Apache HTTP Server 2.4.35 through to 2.4.63, an access control bypass by trusted clien

Insufficient escaping of user-supplied data in mod_ssl in Apache HTTP Server 2.4.63 and earlier allows an untrusted SSL/

Server-Side Request Forgery (SSRF) in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a maliciou

SSRF in Apache HTTP Server with mod_proxy loaded allows an attacker to send outbound proxy requests to a URL controlled

HTTP response splitting in the core of Apache HTTP Server allows an attacker who can manipulate the Content-Type respons

A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite().

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Starting in 5.3.

Classic buffer overflow in certain Zoom Clients for Windows may allow an authorized user to conduct a denial of service

Improper certificate validation in Zoom Workplace for Linux before version 6.4.13 may allow an unauthorized user to cond

A vulnerability has been found in SourceCodester Zoo Management System 1.0 and classified as problematic. This vulnerabi

A flaw was found in Keycloak. When an authenticated attacker attempts to merge accounts with another existing account du

Git GUI allows you to use the Git source control management tools via a GUI. When a user clones an untrusted repository

Git GUI allows you to use the Git source control management tools via a GUI. A malicious repository can ship versions of

Ecovacs Deebot T10 1.7.2 transmits Wi-Fi credentials in cleartext during the pairing process.

IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 could allow a remote attacker to obtain information about the applicati

Gitk is a Tcl/Tk based Git history browser. Starting with 2.41.0, a Git repository can be crafted in such a way that wit

Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs git

IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 could be vulnerable to malicious file upload by not validating the type

IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 is vulnerable to information exposure and further attacks due to an exp

IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 could allow a remote attacker to obtain sensitive information when a de

A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory m

A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which

A vulnerability, which was classified as critical, was found in Netgear D6400 1.0.0.114. This affects an unknown part of

A cross-site scripting (XSS) vulnerability in the Admin Login page of Allworx System Software v9.1.9.12 allows attackers

A vulnerability in the DocugamiReader class of the run-llama/llama_index repository, up to version 0.12.28, involves the

A maliciously crafted RTE file, when parsed through Autodesk Revit, can force a Heap-Based Overflow vulnerability. A mal

A maliciously crafted RFA, RTE, or RVT file, when parsed through Autodesk Revit, can force a Memory Corruption vulnerabi

A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certt

Improper Control of Generation of Code ('Code Injection') vulnerability in OpenText™ Directory Services allows Remote Co

An issue has been discovered in GitLab CE/EE affecting all versions from 17.11 before 17.11.6, 18.0 before 18.0.4, and 1

An issue has been discovered in GitLab EE affecting all versions from 18.0 before 18.0.4 and 18.1 before 18.1.2 that cou

Use of Hard-coded Credentials vulnerability in Mitsubishi Electric Corporation photovoltaic system monitor “EcoGuideTAB”

Weak Password Requirements vulnerability in Mitsubishi Electric Corporation photovoltaic system monitor “EcoGuideTAB” PV