2025

Sulu is an open-source PHP content management system based on the Symfony framework. Starting in versions 2.5.21, 2.6.5,

Improper Input validation leads to XSS or Cross-site Scripting vulnerability in OpenText Advanced Authentication. This i

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in OpenText Advanced

Unauthorized access to "/api/Token/gettoken" endpoint in EZD RP allows file manipulation.This issue affects EZD RP in ve

Cap Collectif is an online decision making platform that integrates several tools. Before commit 812f2a7d271b76deab1175b

Flask is a web server gateway interface (WSGI) web application framework. In Flask 3.1.0, the way fallback key configura

SQL injection vulnerability in DomainsPRO 1.2. This vulnerability could allow an attacker to retrieve, create, update an

CWE-121: Stack-based Buffer Overflow vulnerability exists that could cause local attackers being able to exploit these i

Improper authentication handling was identified in a set of HTTP POST requests affecting the following product families:

ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol (MCP) servers. Due to

The OZI action is a GitHub Action that publishes releases to PyPI and mirror releases, signature bundles, and provenance

julmud/phpDVDProfiler is an adoption of the defunct phpDVDProfiler project, which allows users to display on the web the

A stack buffer overflow has been identified in the AsIO3.sys driver. This vulnerability can be triggered by input manipu

Kong Insomnia Desktop Application before 11.0.2 contains a template injection vulnerability that allows attackers to exe

Improper Limitation of a Pathname caused a Path Traversal vulnerability in Sparx Systems Pro Cloud Server. This vulnera

Improper Input Validation vulnerability in Sparx Systems Pro Cloud Server's WebEA model search field allows Cross-Site S

Cross-Site Request Forgery (CSRF) vulnerability in Sparx Systems Pro Cloud Server allows Cross-Site Request Forgery to p

"This issue is limited to motherboards and does not affect laptops, desktop computers, or other endpoints." An insuffici

"This issue is limited to motherboards and does not affect laptops, desktop computers, or other endpoints." An insuffici

Programs/P73_SimplePythonEncryption.py illustrates a simple Python encryption example using the RSA Algorithm. In versio

Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Versions prior to 2.1.15 are vulnerable to

Horner Automation Cscape version 10.0 (10.0.415.2) SP1 is vulnerable to an out-of-bounds read vulnerability that could a

Endpoint /cgi-bin-igd/netcore_set.cgi which is used for changing device configuration is accessible without authenticati

WF2220 exposes endpoint /cgi-bin-igd/netcore_get.cgi that returns configuration of the device to unauthorized users. Ret

Improper Input Validation, the returnUrl parameter in Account Security Settings lacks proper input validation, allowing

insa-auth is an authentication server for INSA Rouen. A minor issue allowed third-party websites to access the server's

Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager. The vulnerability could allows privilege e

Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager.  The vulnerability could allow authentica

Besu Native contains scripts and tooling that is used to build and package the native libraries used by the Ethereum cli

266 vulnerability in Crestron Automate VX allows Privilege Escalation.This issue affects Automate VX: from 5.6.8161.2153

Cleartext Transmission of Sensitive Information vulnerability in Crestron Automate VX allows Sniffing Network Traffic.

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Crestron Automate VX allows Functionality Mi

passport-wsfed-saml2 provides passport strategy for both WS-fed and SAML2 protocol. A vulnerability present starting in

passport-wsfed-saml2 provides passport strategy for both WS-fed and SAML2 protocol. A vulnerability present starting in

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Crestron Automate VX allows Functionality Mi

In Optigo Networks ONS NC600 versions 4.2.1-084 through 4.7.2-330, an attacker could connect with the device's ssh serve

Terraform WinDNS Provider allows users to manage their Windows DNS server resources through Terraform. A security issue

The MQTT add-on of PcVue fails to verify that a remote device’s certificate has not already expired or has not yet becom

The AWS Amplify Studio UI component property expressions in the aws-amplify/amplify-codegen-ui package lack input valida

Vulnerability in Best Practical Solutions, LLC's Request Tracker prior to v5.0.8, where the Triple DES (3DES) cryptograp

OpenVM is a performant and modular zkVM framework built for customization and extensibility. In version 1.0.0, OpenVM is

Open Policy Agent (OPA) is an open source, general-purpose policy engine. Prior to version 1.4.0, when run as a server,

Auth0 Account Link Extension is an extension aimed to help link accounts easily. Versions 2.3.4 to 2.6.6 do not verify t

base-x is a base encoder and decoder of any given alphabet using bitcoin style leading zero compression. Versions 4.0.0,

Volcano is a Kubernetes-native batch scheduling system. Prior to versions 1.11.2, 1.10.2, 1.9.1, 1.11.0-network-topology

KHC-INVITATION-AUTOMATION is a GitHub automation script that automatically invites followers of a bot account to join yo

The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. Versions starting from

An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of

Registry Access Management (RAM) is a security feature allowing administrators to restrict access for their developers t

Recording of environment variables, configured for running containers, in Docker Desktop application logs could lead to