2025

rust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions `ssl::select_next_prot

The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that included square

PMD is an extensible multilanguage static code analyzer. The passphrase for the PMD and PMD Designer release signing key

This vulnerability allows appliance compromise at boot time.

A specific authentication strategy allows to learn ids of PAM users associated with certain authentication types.

This vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected P

An improper input validation the CSRF filter results in unsanitized user input written to the application logs.

A malicious actor can fix the session of a PAM user by tricking the user to click on a specially crafted link to the PAM

An improper session validation allows an unauthenticated attacker to cause certain request notifications to be executed

An improper input validation allows an unauthenticated attacker to alter PAM logs by sending a specially crafted HTTP re

The vulnerability allows an unauthenticated attacker to access information in PAM database.

Potential privilege escalation vulnerability in Revenera InstallShield versions 2022 R2 and 2021 R2 due to adding Instal

A misconfiguration in lmadmin.exe of FlexNet Publisher versions prior to 2024 R1 (11.19.6.0) allows the OpenSSL configur

go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A vulnerable node can be forced

kube-audit-rest is a simple logger of mutation/creation requests to the k8s api. If the "full-elastic-stack" example vec

A Local Code Injection Vulnerability exists in the product and version listed above. The vulnerability is due to incorre

An Incorrect Permission Assignment Vulnerability exists in the product and version listed above. The vulnerability is du

A Remote Code Execution Vulnerability exists in the product and version listed above. The vulnerability is due to lack o

A Local Code Execution Vulnerability exists in the product and version listed above. The vulnerability is due to a defau

A denial-of-service vulnerability exists in the affected products. The vulnerability could allow a remote, non-privilege

A Credential Exposure Vulnerability exists in the above-mentioned product and version. The vulnerability is due to using

Hyperbridge is a hyper-scalable coprocessor for verifiable, cross-chain interoperability. A critical vulnerability was d

A path traversal vulnerability exists in the Rockwell Automation DataEdge Platform DataMosaix Private Cloud. By specifyi

Anubis is a tool that allows administrators to protect bots against AI scrapers through bot-checking heuristics and a pr

Eura7 CMSmanager in version 4.6 and below is vulnerable to Reflected XSS attacks through manipulation of return GET requ

Develocity (formerly Gradle Enterprise) before 2024.3.1 allows an attacker who has network access to a Develocity server

In some circumstances, debug artifacts uploaded by the CodeQL Action after a failed code scanning workflow run may conta

A file handling command vulnerability in certain versions of Armoury Crate may result in arbitrary file deletion. Refer

By utilizing software-defined radios and a custom low-latency processing pipeline, RF signals with spoofed location data

For TCAS II systems using transponders compliant with MOPS earlier than RTCA DO-181F, an attacker can impersonate a grou

Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in Payara Pl

Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as

This vulnerability exists in the CP Plus Router due to insecure handling of cookie flags used within its web interface.

nbgrader is a system for assigning and grading notebooks. Enabling frame-ancestors: 'self' grants any JupyterHub user th

Bible Module is a tool designed for ROBLOX developers to integrate Bible functionality into their games. The `FetchVerse

stats is a macOS system monitor in for the menu bar. The Stats application is vulnerable to a local privilege escalation

A vulnerability exists in Algo Edge up to 2.1.1 - a previously used (legacy) component of navify® Algorithm Suite. The

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Newtec NTC2218, NTC2250, NTC2299

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Newtec/iDire

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could allow l

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ S

A stored Cross-site Scripting (XSS) vulnerability exists in the MGate 5121/5122/5123 Series firmware version v1.0 becaus

Moxa’s Ethernet switch is vulnerable to an authentication bypass because of flaws in its authorization mechanism. Althou

In Yubico pam-u2f before 1.3.1, local privilege escalation can sometimes occur. This product implements a Pluggable Auth

Git LFS is a Git extension for versioning large files. When Git LFS requests credentials from Git for a remote host, it

@codidact/qpixel is a Q&A-based community knowledge-sharing software. In affected versions when a category is set to pri

next-forge is a Next.js project boilerplate for modern web application. The BASEHUB_TOKEN commited in apps/web/.env.exam

During MegaBIP installation process, a user is encouraged to change a default path to administrative portal, as keeping

Websites managed by MegaBIP in versions below 5.15 are vulnerable to Cross-Site Request Forgery (CSRF) as the form avail

JWK Set (JSON Web Key Set) is a JWK and JWK Set Go implementation. Prior to 0.6.0, the project's provided HTTP client's