2025

Liferay Portal 7.4.0 through 7.4.3.97, and Liferay DXP 2023.Q3.1 through 2023.Q3.2, 7.4 GA through update 92, 7.3 GA thr

In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could execute c

A vulnerability has been found in code-projects Restaurant Order System 1.0 and classified as critical. This vulnerabili

A vulnerability, which was classified as critical, was found in code-projects Restaurant Order System 1.0. This affects

A vulnerability, which was classified as critical, has been found in D-Link DIR-632 FW103B08. Affected by this issue is

A vulnerability classified as critical was found in Open Asset Import Library Assimp up to 5.4.3. Affected by this vulne

A flaw was found in the temporary user record that authd uses in the pre-auth NSS. As a result, a user login for the fir

Possible kernel exceptions caused by reading and writing kernel heap data after free.

A vulnerability in the OTRS Admin Interface and Agent Interface (versions before OTRS 8) allow parameter injection due t

A vulnerability classified as critical has been found in Open Asset Import Library Assimp up to 5.4.3. Affected is the f

A vulnerability was found in Das Parking Management System 停车场管理系统 6.2.0. It has been rated as critical. This issue affe

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Erlang OTP (stdlib modul

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability was discovered in Apache NuttX RTO

Out-of-bounds Write resulting in possible Heap-based Buffer Overflow vulnerability was discovered in tools/bdf-converter

Mojolicious::Plugin::CaptchaPNG version 1.05 for Perl uses a weak random number source for generating the captcha. That

A vulnerability was found in Das Parking Management System 停车场管理系统 6.2.0. It has been declared as critical. This vulnera

A vulnerability was found in Das Parking Management System 停车场管理系统 6.2.0. It has been classified as critical. This affec

A web application for configuring the controller is accessible at a specific path. It contains an endpoint that allows a

An unauthenticated remote attacker can trick an admin to visit a website containing malicious java script code. The curr

Permission vulnerability in the mobile application (com.afmobi.boomplayer) may lead to the risk of unauthorized operatio

A vulnerability was found in D-Link DIR-619L 2.06B01 and classified as critical. Affected by this issue is the function

A vulnerability has been found in D-Link DIR-619L 2.06B01 and classified as critical. Affected by this vulnerability is

Reflected Cross-Site Scripting (XSS) in /customer_support/index.php in Customer Support System v1.0, which allows remote

SQL injection vulnerability in Customer Support System v1.0. This vulnerability allows an authenticated attacker to retr

A Reflected Cross Site Scripting (XSS) vulnerability was found in '/search' in Phoenix Site CMS from Phoenix, which allo

Reflected Cross-Site Scripting (XSS) vulnerability in /pages/search-results-page in Nosto, which allows remote attackers

A race condition vulnerability exists in Armoury Crate. This vulnerability arises from a Time-of-check Time-of-use issue

An open redirection vulnerability in M-Files mobile applications for Android and iOS prior to version 25.6.0 allows atta

A vulnerability, which was classified as critical, was found in Tenda FH1203 2.0.1.6. Affected is the function fromadvse

A vulnerability, which was classified as critical, has been found in Tenda FH1205 2.0.0.7. This issue affects the functi

A stored Cross-site Scripting (XSS) vulnerability affecting Opportunity Management in Project Portfolio Manager from Rel

The WIMP website co-construction management platform from HAMASTAR Technology has a SQL Injection vulnerability, allowin

A vulnerability classified as critical was found in Tenda FH1205 2.0.0.7(775). This vulnerability affects the function f

A vulnerability classified as critical has been found in Tenda FH1201 1.2.0.14(408). This affects an unknown part of the

A vulnerability was found in javahongxi whatsmars 2021.4.0. It has been rated as problematic. Affected by this issue is

A vulnerability was found in hansonwang99 Spring-Boot-In-Action up to 807fd37643aa774b94fd004cc3adbd29ca17e9aa. It has b

A vulnerability was found in comfyanonymous comfyui 0.3.40. It has been classified as problematic. Affected is the funct

A vulnerability was found in WuKongOpenSource WukongCRM 9.0 and classified as problematic. This issue affects some unkno

A vulnerability has been found in jflyfox jfinal_cms 5.0.1 and classified as problematic. This vulnerability affects unk

A vulnerability, which was classified as critical, was found in Wifi-soft UniBox Controller up to 20250506. This affects

A vulnerability, which was classified as critical, has been found in Wifi-soft UniBox Controller up to 20250506. Affecte

A vulnerability classified as critical was found in Wifi-soft UniBox Controller up to 20250506. Affected by this vulnera

A vulnerability classified as critical has been found in letta-ai letta up to 0.4.1. Affected is the function function_m

A vulnerability was found in realguoshuai open-video-cms 1.0. It has been rated as critical. This issue affects some unk

A vulnerability was found in szluyu99 gin-vue-blog up to 61dd11ccd296e8642a318ada3ef7b3f7776d2410. It has been declared

A vulnerability was found in UTT 进取 750W up to 5.0. It has been classified as critical. This affects the function strcpy

A vulnerability was found in UTT 进取 750W up to 5.0 and classified as critical. Affected by this issue is the function fo

A vulnerability has been found in codesiddhant Jasmin Ransomware up to 1.0.1 and classified as critical. Affected by thi

A vulnerability, which was classified as critical, was found in codesiddhant Jasmin Ransomware 1.0.1. Affected is an unk

A vulnerability, which was classified as critical, has been found in qianfox FoxCMS up to 1.2.5. This issue affects the