2025

A vulnerability was found in Campcodes Online Teacher Record Management System 1.0. It has been rated as critical. This

A vulnerability was found in D-Link DIR-816 1.10CNB05. It has been declared as critical. This vulnerability affects the

Atheos is a self-hosted browser-based cloud integrated development environment. Prior to version 6.0.4, improper use of

A vulnerability was found in D-Link DIR-816 1.10CNB05. It has been classified as critical. This affects the function qos

A vulnerability was found in D-Link DIR-816 1.10CNB05 and classified as critical. Affected by this issue is the function

A vulnerability has been found in D-Link DIR-816 1.10CNB05 and classified as critical. Affected by this vulnerability is

A vulnerability, which was classified as critical, was found in D-Link DIR-816 1.10CNB05. Affected is the function setip

A vulnerability, which was classified as critical, has been found in Tenda CH22 1.0.0.1. This issue affects the function

A vulnerability classified as critical was found in PHPGurukul Online Fire Reporting System 1.2. This vulnerability affe

A vulnerability classified as critical has been found in PHPGurukul Online Fire Reporting System 1.2. This affects an un

A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been rated as critical. Affected by thi

Rack is a modular Ruby web server interface. Starting in version 3.1.0 and prior to version 3.1.16, there is a denial of

PostgreSQL Anonymizer v2.0 and v2.1 contain a vulnerability that allows a masked user to bypass the masking rules define

A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been declared as critical. Affected by

A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been classified as critical. Affected i

A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2 and classified as critical. This issue affects

A vulnerability has been found in PHPGurukul Online Fire Reporting System 1.2 and classified as critical. This vulnerabi

A vulnerability, which was classified as critical, was found in CodeAstro Real Estate Management System 1.0. This affect

A vulnerability, which was classified as critical, has been found in CodeAstro Real Estate Management System 1.0. Affect

The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. In Auth0 Next.js SDK ve

FreshRSS is a self-hosted RSS feed aggregator. Prior to version 1.26.2, when the server is using HTTP auth via reverse p

A vulnerability classified as critical was found in Tenda AC18 15.03.05.05. Affected by this vulnerability is the functi

A vulnerability classified as critical has been found in Tenda AC18 15.03.05.05. Affected is the function formsetreboott

A vulnerability was found in Tenda AC18 15.03.05.05. It has been rated as critical. This issue affects the function form

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 2.2.0 and prior to versions 2.2.5, it is

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to versions 2.1.13 and 2.2.13, the `Deno.env.toObject`

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 1.41.3 and prior to versions 2.1.13, 2.2.

FreshRSS is a self-hosted RSS feed aggregator. Prior to version 1.26.2, it's possible to poison feed favicons by adding

An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /course/edit/{id} endpoint.

An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /students/edit/{id} endpoint.

Listmonk v4.1.0 (fixed in v5.0.0) is vulnerable to SQL Injection in the QuerySubscribers function which allows attackers

FreshRSS is a self-hosted RSS feed aggregator. Prior to version 1.26.2, HTML is sanitized improperly inside the `<iframe

FreshRSS is a self-hosted RSS feed aggregator. A vulnerability in versions prior to 1.26.2 causes a user to be repeatedl

FreshRSS is a self-hosted RSS feed aggregator. Prior to version 1.26.2, it's possible to run arbitrary JavaScript on the

FreshRSS is a self-hosted RSS feed aggregator. Prior to version 1.26.2, an attacker can gain additional information abou

VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the router port due to improper input validatio

VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the gateway firewall due to improper input vali

VMware NSX Manager UI is vulnerable to a stored Cross-Site Scripting (XSS) attack due to improper input validation.

A vulnerability was found in Tenda AC18 15.03.05.05. It has been declared as critical. This vulnerability affects the fu

A vulnerability was found in Campcodes Hospital Management System 1.0 and classified as critical. Affected by this issue

A vulnerability has been found in Campcodes Hospital Management System 1.0 and classified as critical. Affected by this

A vulnerability, which was classified as critical, was found in Campcodes Hospital Management System 1.0. Affected is an

A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. This issue

A vulnerability classified as critical was found in PHPGurukul Student Result Management System 1.3. This vulnerability

We have identified a buffer overflow issue allowing out-of-bounds write when processing LLMNR or mDNS queries with very

A vulnerability was found in FreeFloat FTP Server 1.0. It has been classified as critical. Affected is an unknown functi

A vulnerability was found in FreeFloat FTP Server 1.0 and classified as critical. This issue affects some unknown proces

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '<image>' SVG elements in AngularJS's 'n

A vulnerability in Amazon Web Services (AWS), Microsoft Azure, and Oracle Cloud Infrastructure (OCI) cloud deployments o

A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, remote attacker