2025

A vulnerability has been found in Campcodes Payroll Management System 1.0 and classified as critical. This vulnerability

A path traversal vulnerability exists in run-llama/llama_index versions 0.12.27 through 0.12.40, specifically within the

A vulnerability, which was classified as critical, was found in itsourcecode Employee Management System up to 1.0. This

A vulnerability, which was classified as critical, has been found in itsourcecode Employee Management System up to 1.0.

A vulnerability classified as critical was found in itsourcecode Employee Management System up to 1.0. Affected by this

A vulnerability classified as critical has been found in code-projects Online Note Sharing 1.0. Affected is an unknown f

A vulnerability was found in Campcodes Complaint Management System 1.0. It has been rated as critical. This issue affect

A vulnerability was found in Campcodes Complaint Management System 1.0. It has been declared as critical. This vulnerabi

The parisneo/lollms repository is affected by a timing attack vulnerability in the `authenticate_user` function within t

A vulnerability in the ObsidianReader class of the run-llama/llama_index repository, specifically in version 0.12.27, al

The JSONReader in run-llama/llama_index versions 0.12.28 is vulnerable to a stack overflow due to uncontrolled recursive

lunary-ai/lunary versions prior to 1.9.24 are vulnerable to stored cross-site scripting (XSS). An unauthenticated attack

Hugging Face Transformers versions up to 4.49.0 are affected by an improper input validation vulnerability in the `image

A physical attacker with no privileges can gain full control of the affected device due to improper neutralization of sp

A remote attacker with administrator account can gain full control of the device due to improper neutralization of speci

An XSS vulnerability exists in langgenius/dify versions prior to 1.1.3, specifically affecting Firefox browsers. This vu

langgenius/dify versions 1.1.0 to 1.1.2 are vulnerable to unsanitized input in the code node, allowing execution of arbi

A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, sp

A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, sp

A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the huggingface/transformers repository,

An XML Entity Expansion vulnerability, also known as a 'billion laughs' attack, exists in the sitemap parser of the run-

A vulnerability in the `ObsidianReader` class of the run-llama/llama_index repository, versions 0.12.23 to 0.12.28, allo

A vulnerability in the ArxivReader class of the run-llama/llama_index repository, versions up to v0.12.22.post1, allows

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gavias Zilom zilom

A vulnerability was found in Campcodes Complaint Management System 1.0. It has been classified as critical. This affects

A vulnerability was found in Campcodes Complaint Management System 1.0 and classified as critical. Affected by this issu

A vulnerability was identified in SUR-FBD CMMS where hard-coded credentials were found within a compiled DLL file. These

A vulnerability has been found in Campcodes Complaint Management System 1.0 and classified as critical. Affected by this

A vulnerability, which was classified as critical, has been found in UTT HiPER 840G up to 3.1.1-190328. This issue affec

A vulnerability classified as critical was found in UTT HiPER 840G up to 3.1.1-190328. This vulnerability affects unknow

A vulnerability classified as critical has been found in UTT 进取 750W up to 3.2.2-191225. This affects an unknown part of

A remote unauthenticated attacker may use default certificates to generate JWT Tokens and gain full access to the tool a

A vulnerability was found in rowboatlabs rowboat up to 8096eaf63b5a0732edd8f812bee05b78e214ee97. It has been rated as cr

A vulnerability was found in SimStudioAI sim up to 37786d371e17d35e0764e1b5cd519d873d90d97b. It has been declared as cri

A vulnerability was found in Portabilis i-Educar 2.9.0. It has been classified as problematic. Affected is an unknown fu

A vulnerability was found in Portabilis i-Educar 2.9.0 and classified as problematic. This issue affects some unknown pr

A vulnerability has been found in Portabilis i-Educar 2.9.0 and classified as problematic. This vulnerability affects un

Server-side request forgery (SSRF) vulnerability exists n multiple versions of Nimesa Backup and Recovery, If this vulne

An OS command injection issue exists in Nimesa Backup and Recovery v2.3 and v2.4. If this vulnerability is exploited, an

Extraction of Account Connectivity Credentials (ACCs) from the IT Management Agent secure storage

A vulnerability, which was classified as problematic, was found in Portabilis i-Educar 2.9.0. This affects an unknown pa

ThreatSonar Anti-Ransomware developed by TeamT5 has an OS Command Injection vulnerability, allowing remote attackers wit

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.9.0. Affected by this issu

A vulnerability classified as critical was found in risesoft-y9 Digital-Infrastructure up to 9.6.7. Affected by this vul

A vulnerability classified as critical has been found in SimStudioAI sim up to 0.1.17. Affected is the function handleLo

Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module Im

Virtual address reuse issue in the memory management module, which can be exploited by non-privileged users to access re

Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability m

Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability m

Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability m