2025

The SIMPLE.ERP client stores superuser password in a recoverable format, allowing any authenticated SIMPLE.ERP user to e

SIMPLE.ERP client is vulnerable to MS SQL protocol downgrade request from a server side, what could lead to an unencrypt

Out-of-bounds array write in Xpdf 4.05 and earlier, due to incorrect integer overflow checking in the PostScript functio

When the library bridge feature is enabled, the clickhouse-library-bridge exposes an HTTP API on localhost. This allows

There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prio

There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prio

imFAQ is an advanced questions and answers management system for ImpressCMS. Prior to 1.0.1, if the $_GET['seoOp'] param

Insecure information storage vulnerability in NTFS Tools version 3.5.1. Exploitation of this vulnerability could allow a

Buildx is a Docker CLI plugin that extends build capabilities using BuildKit. Cache backends support credentials by set

Zincati is an auto-update agent for Fedora CoreOS hosts. Zincati ships a polkit rule which allows the `zincati` system u

Incorrect string encoding vulnerability in NASK - PIB BotSense allows injection of an additional field separator charact

`zip` is a zip library for rust which supports reading and writing of simple ZIP files. In the archive extraction routin

Agate is central authentication server software for OBiBa epidemiology applications. Prior to version 3.3.0, when regist

Buffer overflow vulnerability in Immunity Debugger affecting version 1.85, its exploitation could allow a local attacker

Broken access control vulnerability in the Innovación y Cualificación local administration plugin ajax.php. This vulnera

Broken access control vulnerability in the IcProgress Innovación y Cualificación plugin. This vulnerability allows an at

SQL injection vulnerability in the IcProgreso Innovación y Cualificación plugin. This vulnerability allows an attacker t

SQL injection vulnerability in the Innovación y Cualificación local administration plugin ajax.php. This vulnerability a

HtmlSanitizer is a client-side HTML Sanitizer. Versions prior to 2.0.3 have a cross-site scripting vulnerability when th

Post-Quantum Secure Feldman's Verifiable Secret Sharing provides a Python implementation of Feldman's Verifiable Secret

Post-Quantum Secure Feldman's Verifiable Secret Sharing provides a Python implementation of Feldman's Verifiable Secret

xml-crypto is an XML digital signature and encryption library for Node.js. An attacker may be able to exploit a vulnerab

SendQuick Entera devices before 11HF5 are vulnerable to CAPTCHA bypass by removing the Captcha parameter.

Saved search functionality contains a blind SQL injection that can be exploited by authenticated attackers. Using a time

Document history functionality contains a blind SQL injection that can be exploited by authenticated attackers. Using a

Login functionality contains a blind SQL injection that can be exploited by unauthenticated attackers. Using a time-base

Logout functionality contains a blind SQL injection that can be exploited by unauthenticated attackers. Using a time-bas

The API used to interact with documents in the application contains a flaw that allows an authenticated attacker to read

xml-crypto is an XML digital signature and encryption library for Node.js. An attacker may be able to exploit a vulnerab

Azle is a WebAssembly runtime for TypeScript and JavaScript on ICP. Calling `setTimer` in Azle versions `0.27.0`, `0.28.

A Privilege Escalation through a Mass Assignment exists in Camaleon CMS When a user wishes to change his password, the

Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 are vulnerable to a

Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain an exposed

Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain a hard code

Integrated Scripting is a tool for creating scripts for handling complex operations in Integrated Dynamics. Minecraft us

This vulnerability exists in the CAP back office application due to missing rate limiting on OTP requests in an API endp

This vulnerability exists in the CAP back office application due to improper authorization checks on certain API endpoin

This vulnerability exists in the CAP back office application due to improper implementation of OTP verification mechanis

This vulnerability exists in the CAP back office application due to a weak password-reset mechanism implemented at API e

This vulnerability exists in the CAP back office application due to improper authentication check at the API endpoint. A

Improper Input Validation vulnerability in Avid Avid NEXIS E-series on Linux, Avid Avid NEXIS F-series on Linux, Avid Av

A reliance on untrusted input for a security decision in the GlobalProtect app on Windows devices potentially enables a

A Denial of Service (DoS) vulnerability in Palo Alto Networks PAN-OS software causes the firewall to unexpectedly reboot

A vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated admin on the PAN-OS CLI to read arbit

Unquoted Search Path or Element vulnerability in OpenText™ Service Manager.  The vulnerability could allow a user to ga

Improper Neutralization of Script in an Error Message Web Page vulnerability in OpenText™ Service Manager.  The vulnera

Opal is OBiBa’s core database application for biobanks or epidemiological studies. Prior to version 5.1.1, the protectio

Opal is OBiBa’s core database application for biobanks or epidemiological studies. Prior to version 5.1.1, when copying

Inadequate checks in the Media Manager allowed users with "edit" privileges to change file extension to arbitrary extens

Ratify is a verification engine as a binary executable and on Kubernetes which enables verification of artifact security