2025

Successful exploitation of the vulnerability could allow an attacker to cause repeated reboots, potentially leading to r

Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets

Successful exploitation of the vulnerability could allow an attacker to intercept data and conduct session hijacking on

Successful exploitation of the vulnerability could allow an attacker to consume all available session slots and block ot

Successful exploitation of the vulnerability could allow an unauthenticated attacker to conduct brute force guessing and

A vulnerability was found in java-aodeng Hope-Boot 1.0.0 and classified as problematic. This issue affects the function

A vulnerability has been found in Tarantool up to 3.3.1 and classified as problematic. Affected by this vulnerability is

An OS command injection vulnerability exists in the Chinese versions of Sangfor Endpoint Detection and Response (EDR) ma

An arbitrary file upload vulnerability exists in the Zhiyuan OA platform via the wpsAssistServlet interface. The realFil

A code injection vulnerability exists in Yonyou UFIDA NC v6.5 and prior due to the exposure of the BeanShell testing ser

A SQL injection vulnerability exists in Weaver E-cology 8.0 via the getdata.jsp endpoint. The application directly passe

A vulnerability has been found in xxyopen/201206030 novel-plus up to 5.1.3 and classified as critical. This vulnerabilit

A vulnerability, which was classified as problematic, was found in xxyopen/201206030 novel-plus up to 5.1.3. This affect

An OS command injection vulnerability exists in various models of E-Series Linksys routers via the /tmUnblock.cgi and /h

An OS command injection vulnerability exists in white-labeled DVRs manufactured by TVT, affecting a custom HTTP service

An OS command injection vulnerability exists in EnGenius EnShare Cloud Service version 1.4.11 and earlier. The usbintera

A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems. The app

An OS command injection vulnerability exists in the Blue Angel Software Suite running on embedded Linux devices via the

A reflected cross-site scripting (XSS) vulnerability exists in the Moodle LMS Jmol plugin version 6.1 and prior via the

A path traversal vulnerability exists in the Moodle LMS Jmol plugin version 6.1 and prior via the query parameter in jsm

A vulnerability, which was classified as critical, has been found in xxyopen/201206030 novel-plus up to 5.1.3. Affected

A vulnerability classified as problematic was found in NOYAFA/Xiami LF9 Pro up to 20250611. Affected by this vulnerabili

A vulnerability was found in SIFUSM/MZZYG BD S1 up to 20250611. It has been declared as problematic. This vulnerability

A vulnerability was found in 70mai M300 up to 20250611. It has been classified as problematic. This affects an unknown p

A vulnerability was found in 70mai M300 up to 20250611 and classified as critical. Affected by this issue is some unknow

A vulnerability has been found in 70mai M300 up to 20250611 and classified as problematic. Affected by this vulnerabilit

A vulnerability, which was classified as problematic, was found in 70mai M300 up to 20250611. Affected is an unknown fun

A vulnerability, which was classified as problematic, has been found in 70mai M300 up to 20250611. This issue affects so

A vulnerability classified as problematic was found in 70mai 1S up to 20250611. This vulnerability affects unknown code

A vulnerability classified as problematic has been found in 70mai 1S up to 20250611. This affects an unknown part of the

Convoy is a KVM server management panel for hosting businesses. In versions 3.9.0-rc3 to before 4.4.1, there is a direct

HTMLSanitizer.jl is a Whitelist-based HTML sanitizer. Prior to version 0.2.1, when adding the style tag to the whitelist

changedetection.io is a free open source web page change detection, website watcher, restock monitor and notification se

A Server-Side Request Forgery (SSRF) vulnerability exists in the RequestsToolkit component of the langchain-community pa

Mitel OpenScape Accounting Management through V5 R1.1.0 could allow an authenticated attacker with administrative privil

Quarkus is a Cloud Native, (Linux) Container First framework for writing Java applications. In versions prior to 3.24.1,

A vulnerability in the WebApl component of Mitel OpenScape Xpressions through V7R1 FR5 HF43 P913 could allow an unauthen

An issue in Texas Instruments LP-CC2652RB SimpleLink CC13XX CC26XX SDK 7.41.00.17 allows attackers to cause a Denial of

An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code and obtain sensitive informa

In WhiteBeam 0.2.0 through 0.2.1 before 0.2.2, a user with local access to a server can bypass the allow-list functional

Improper Input Validation vulnerability in pbkdf2 allows Signature Spoofing by Improper Validation.This issue affects pb

Improper Input Validation vulnerability in pbkdf2 allows Signature Spoofing by Improper Validation. This vulnerability i

A vulnerability was found in PySpur-Dev pyspur up to 0.1.18. It has been classified as critical. Affected is the functio

PHPGurukul Pre-School Enrollment System Project V1.0 is vulnerable to Directory Traversal in update-teacher-pic.php.

PHPGurukul Pre-School Enrollment System Project V1.0 is vulnerable to Directory Traversal in update-class-pic.php.

Notepad++ is a free and open-source source code editor. In versions 8.8.1 and prior, a privilege escalation vulnerabilit

A vulnerability was found in Dromara MaxKey up to 4.1.7 and classified as critical. This issue affects the function Add

Visionatrix is an AI Media processing tool using ComfyUI. In versions 1.5.0 to before 2.5.1, the /docs/flows endpoint is

An issue in NCR Terminal Handler v.1.5.1 allows a remote attacker to execute arbitrary code and obtain sensitive informa

A vulnerability has been found in HDF5 up to 1.14.6 and classified as critical. This vulnerability affects the function