2025

A vulnerability was found in huija bicycleSharingServer 1.0 and classified as critical. This issue affects the function

The isMobile plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘device’ parameter in all version

An issue in NetEase (Hangzhou) Network Co., Ltd NeacSafe64 Driver before v1.0.0.8 allows attackers to escalate privilege

A vulnerability has been found in Linksys WRT1900ACS, EA7200, EA7450 and EA7500 up to 20250619 and classified as critica

A vulnerability, which was classified as critical, was found in Linksys E8450 up to 1.2.00.360516. This affects the func

A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6. Affected by this issue is the funct

Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have cleartext storage of code.

Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have a hardcoded password for a system.

Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have an on-chip debug interface with improper

Flock Safety Gunshot Detection devices before 1.3 have a hardcoded password for a system.

A vulnerability classified as critical was found in huija bicycleSharingServer up to 7b8a3ba48ad618604abd4797d2e7cf3b5ac

A vulnerability classified as problematic has been found in Bharti Airtel Thanks App 4.105.4 on Android. Affected is an

Flock Safety Gunshot Detection devices before 1.3 have cleartext storage of code.

Flock Safety Gunshot Detection devices before 1.3 have an on-chip debug interface with improper access control.

Flock Safety Gunshot Detection devices before 1.3 have a hard-coded password for a connection.

A vulnerability, which was classified as critical, has been found in huija bicycleSharingServer up to 7b8a3ba48ad618604a

A vulnerability classified as critical was found in juzaweb CMS 3.4.2. Affected by this vulnerability is an unknown func

A vulnerability classified as critical has been found in juzaweb CMS 3.4.2. Affected is an unknown function of the file

A vulnerability was found in UTT HiPER 840G up to 3.1.1-190328. It has been rated as critical. This issue affects the fu

A vulnerability was found in UTT HiPER 840G up to 3.1.1-190328. It has been declared as critical. This vulnerability aff

Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation G-50 all versions, G-50-W

A vulnerability was found in UTT HiPER 840G up to 3.1.1-190328. It has been classified as critical. This affects the fun

A vulnerability was found in yzcheng90 X-SpringBoot up to 5.0 and classified as critical. Affected by this issue is the

A flaw was found in Infinispan CLI. A sensitive password, decoded from a Base64-encoded Kubernetes secret, is processed

pycode-browser before version 1.0 is prone to a predictable temporary file vulnerability.

yubiserver before 0.6 is prone to buffer overflows due to misuse of sprintf.

yubiserver before 0.6 is prone to SQL injection issues, potentially leading to an authentication bypass.

Ceph is a distributed object, block, and file storage platform. In versions 17.2.7, 18.2.1 through 18.2.4, and 19.0.0 th

pdns specific as packaged in Debian in version before 3.3.1-1 creates a too privileged MySQL user. It was discovered tha

git-annex had a bug in the S3 and Glacier remotes where if embedcreds=yes was set, and the remote used encryption=pubkey

Vulnerability in fusionforge in the shipped Apache configuration, where the web server may execute scripts that the use

Canon EOS Webcam Utility Pro for MAC OS version 2.3d (2.3.29) and earlier contains an improper directory permissions vul

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in OpenNMS Horizon an

n8n is a workflow automation platform. Versions prior to 1.98.0 have an Open Redirect vulnerability in the login flow. A

Buffer overflow vulnerability in matplotlib.This issue affects matplotlib: before upstream commit ba4016014cb4fb4927e36c

Multiple stored XSS were found on different nodes with unsanitized parameters in OpenMNS Horizon 33.0.8 and versions ear

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, previ

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, previ

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. A vulnerability present in versions 0.9

Northern.tech Mender Server before 3.7.11 and 4.x before 4.0.1 has Incorrect Access Control.

Octo-STS is a GitHub App that acts like a Security Token Service (STS) for the GitHub API. Octo-STS versions before v0.5

An issue was discovered on IROAD Dashcam FX2 devices. An unauthenticated file upload endpoint can be leveraged to execut

Arc before 1.26.1 on Windows has a bypass issue in the site settings that allows websites (with previously granted permi

A vulnerability, which was classified as problematic, was found in linlinjava litemall 1.8.0. Affected is an unknown fun

A vulnerability, which was classified as problematic, has been found in Xuxueli xxl-sso 1.1.0. This issue affects some u

A vulnerability classified as problematic was found in Xuxueli xxl-sso 1.1.0. This vulnerability affects unknown code of

A vulnerability classified as problematic has been found in LabRedesCefetRJ WeGIA 3.4.0. This affects an unknown part of

A SQL injection vulnerability was discovered in the PHPGurukul Dairy Farm Shop Management System 1.3. The vulnerability

PHPGurukul Pre-School Enrollment System Project v1.0 is vulnerable to Directory Traversal in manage-classes.php.

A Cross-Site Scripting (XSS) vulnerability exists in the node creation form of Backdrop CMS 1.30.