2025

A user with access to the cluster with a limited set of privilege actions may be able to terminate queries that are bein

A security vulnerability has been detected in Eigenfocus up to 1.4.0. This vulnerability affects unknown code of the com

A flaw has been found in PHPGurukul Hostel Management System 2.1. The impacted element is an unknown function of the fil

A security vulnerability has been detected in jarun nnn up to 5.1. The impacted element is the function show_content_in_

Improper input validation in the TLS 1.3 CertificateVerify signature algorithm negotiation in wolfSSL 5.8.2 and earlier

The issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7. An attacke

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Frank Goossens WP YouTube Lyte wp-youtube-lyte allo

LogStare Collector improperly handles the password hash data. An administrative user may obtain the other users' passwor

A vulnerability was identified in Campcodes Complete Online Beauty Parlor Management System 1.0. This vulnerability affe

Improper neutralisation of format characters in the settings of Revive Adserver 5.5.2 and 6.0.1 and earlier versions cau

Medical Informatics Engineering Enterprise Health has a stored cross site scripting vulnerability that allows an authent

cups-filters contains backends, filters, and other software required to get the cups printing service working on operati

A security vulnerability has been detected in Public Knowledge Project omp and ojs 3.3.0/3.4.0/3.5.0. Impacted is an unk

A vulnerability was determined in SourceCodester Online Shop Project 1.0. Impacted is an unknown function of the file /s

A vulnerability was identified in icret EasyImages up to 2.8.6. This affects an unknown part of the file /app/upload.php

A vulnerability was determined in Campcodes Retro Basketball Shoes Online Store 1.0. Affected by this issue is some unkn

Astro is a web framework. Prior to version 5.14.3, a vulnerability has been identified in the Astro framework's developm

A security vulnerability has been detected in mrubyc up to 3.4. This impacts the function mrbc_raw_realloc of the file s

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.11.0, a weak password

HCL Connections is vulnerable to a sensitive information disclosure vulnerability which could allow a user to obtain sen

An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Drupal core allows Exploiting Incorrec

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Simple mult

Mattermost versions 10.11.x <= 10.11.3, 10.5.x <= 10.5.11 fail to enforce access permissions on the Agents plugin which

A vulnerability has been found in SourceCodester Student Grades Management System 1.0. This issue affects some unknown p

A security flaw has been discovered in SourceCodester Interview Management System 1.0. Affected is an unknown function o

Missing Release of Resource after Effective Lifetime (CWE-772) in the T21 Reader allows an attacker with physical access

The Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without Hardened Runtime. A loc

Freebox v5 HD (firmware = 1.7.20), Freebox v5 Crystal (firmware = 1.7.20), Freebox v6 Révolution r1–r3 (firmware = 4.7.x

GoSign Desktop through 2.4.1 disables TLS certificate validation when configured to use a proxy server. This can be prob

A vulnerability was identified in code-projects Student Information System 2.0. The impacted element is an unknown funct

A flaw has been found in projectsend up to r1720. Impacted is an unknown function of the component File Editor/Custom Do

A security flaw has been discovered in code-projects Simple Cafe Ordering System 1.0. This affects an unknown part of th

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.9 before 18.3.6, 18.4 before 18.4.4, and 1

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.9 before 18.3.6, 18.4 before 18.4.4, and 1

GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 18.3.6, 18.4 before 18.4.4, and 18.5

GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.4, and 18.5 before 18.5.2 that

A weakness has been identified in Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution up to 4.0. This

A vulnerability was identified in pojoin h3blog 1.0. The impacted element is an unknown function of the file /admin/cms/

A vulnerability was determined in pojoin h3blog 1.0. The affected element is an unknown function of the file /admin/cms/

A vulnerability was found in Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System up to 2025032

A flaw has been found in Bdtask/CodeCanyon SalesERP up to 20250728. This vulnerability affects unknown code of the file

A Server-side Request Forgery vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0

An issue was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows remote

A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. There is Exp

Mattermost versions <11.0 fail to properly enforce the "Allow users to view archived channels" setting which allows regu

Astro is a web framework. Starting in version 5.2.0 and prior to version 5.15.6, a Reflected Cross-Site Scripting (XSS)

OpenObserve is a cloud-native observability platform. In versions up to and including 0.16.1, when creating or renaming

Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain a Process Control vulnerability. A low pr

Mattermost versions 10.11.x <= 10.11.3, 10.5.x <= 10.5.11 fail to properly validate team membership permissions in the A