2025

A memory corruption vulnerability exists in the Shared String Table Record Parser implementation in xls2csv utility vers

A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002

A directory traversal arbitrary file deletion vulnerability exists in HPE StoreOnce Software.

An authentication bypass vulnerability exists in HPE StoreOnce Software.

A command injection remote code execution vulnerability exists in HPE StoreOnce Software.

A command injection remote code execution vulnerability exists in HPE StoreOnce Software.

A server-side request forgery vulnerability exists in HPE StoreOnce Software.

A command injection remote code execution vulnerability exists in HPE StoreOnce Software.

The desktop application in Dot through 0.9.3 allows XSS and resultant command execution because user input and LLM outpu

A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002

A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002

A Use of Out-of-range Pointer Offset vulnerability in sslh leads to denial of service on some architectures.This issue a

The SolarWinds Dameware Mini Remote Control was determined to be affected by Incorrect Permissions Local Privilege Escal

Yandex Telemost for Desktop before 2.7.0 has a DLL Hijacking Vulnerability because an untrusted search path is used.

A vulnerability has been found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.0

A vulnerability, which was classified as critical, was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE900

NeKernal is a free and open-source operating system stack. Version 0.0.2 has a 1-byte heap overflow in `rt_copy_memory`,

Froxlor is open source server administration software. Prior to version 2.2.6, an HTML Injection vulnerability in the cu

AstrBot is a large language model chatbot and development framework. A path traversal vulnerability present in versions

Para is a multitenant backend server/framework for object persistence and retrieval. A vulnerability that exists in vers

Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. By renaming the friendly n

A Allocation of Resources Without Limits or Throttling vulnerability in sslh allows attackers to easily exhaust the file

A vulnerability, which was classified as critical, has been found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and

A vulnerability classified as critical was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.00

Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. When using end-to-end encr

CE Phoenix is a free, open-source eCommerce platform. A stored cross-site scripting (XSS) vulnerability was discovered i

The CE Phoenix eCommerce platform, starting in version 1.0.9.7 and prior to version 1.1.0.3, allowed logged-in users to

This vulnerability in Grafana's datasource proxy API allows authorization checks to be bypassed by adding an extra slash

quic-go is an implementation of the QUIC protocol in Go. The loss recovery logic for path probe packets that was added i

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Bifrost GPU Userspace D

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Ge

Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver al

A vulnerability classified as critical has been found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.0

A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002

A security vulnerability in the /apis/dashboard.grafana.app/* endpoints allows authenticated users to bypass dashboard a

An SQL injection vulnerability exists in the delete function of DuckDBVectorStore in run-llama/llama_index version v0.12

An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkRe

A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002

A vulnerability classified as critical has been found in Multilaser Sirius RE016 MLT1.0. Affected is an unknown function

A vulnerability was found in Multilaser Sirius RE016 MLT1.0. It has been rated as problematic. This issue affects some u

A vulnerability was found in Marwal Infotech CMS 1.0. It has been declared as critical. This vulnerability affects unkno

The Diviotec professional series exposes a web interface. One endpoint is vulnerable to arbitrary command injection and

During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Devi

A Guard Tour VAPIX API parameter allowed the use of arbitrary values and can be incorrectly called, allowing an attacker

The VAPIX Device Configuration framework allowed a privilege escalation, enabling a lower-privileged user to gain admini

A vulnerability was found in Aem Solutions CMS up to 1.0. It has been classified as critical. This affects an unknown pa

A vulnerability was found in Fengoffice Feng Office 3.5.1.5 and classified as critical. Affected by this issue is some u

The Netcom NTC 6200 and NWL 222 series expose a web interface to be configured and set up by operators. Multiple endpoin

A low privileged attacker can set the date of the devices to the 19th of January 2038 an therefore exceed the 32-Bit tim

A vulnerability has been found in AssamLook CMS 1.0 and classified as critical. Affected by this vulnerability is an unk