2025

A maliciously crafted CATPRODUCT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vu

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerabi

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerabi

A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force a Memory corruption vulnerab

Misskey is an open source, federated social media platform. Attackers who use an untrusted reverse proxy or not using a

Weblate is a web based localization tool. The Create Component functionality in Weblate allows authorized users to add n

Misskey is an open source, federated social media platform. Starting in version 13.0.0-beta.16 and prior to version 2025

FreshRSS is a self-hosted RSS feed aggregator. In versions 1.23.0 through 1.27.0, using a path traversal inside the `lan

A weakness has been identified in CTCMS Content Management System up to 2.1.2. This affects an unknown function in the l

A maliciously crafted CATPART file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulne

AA maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulne

AA maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulne

AA maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulne

A maliciously crafted CATPART file, when parsed through certain Autodesk products, can force a Memory corruption vulnera

AA maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulne

A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force a Memory corruption vulnerabi

A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force a Memory corruption vulnerabi

AA maliciously crafted CATPART file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vul

A maliciously crafted CATPRODUCT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read v

AA maliciously crafted X_T file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnera

A maliciously crafted CATPRODUCT file, when parsed through certain Autodesk products, can force a Heap-Based Overflow vu

Hitachi Vantara Pentaho Data Integration and Analytics Community Dashboard Framework prior to versions 10.2.0.4, includi

Pentaho Data Integration and Analytics Community Dashboard Editor plugin versions before 10.2.0.4, including 9.3.0.x and

A security flaw has been discovered in CTCMS Content Management System up to 2.1.2. The impacted element is an unknown f

A vulnerability was identified in CTCMS Content Management System up to 2.1.2. The affected element is the function Save

Weblate is a web based localization tool. In versions prior to 5.15, it was possible to accept an invitation opened by a

NanoMQ is a messaging broker/bus for IoT Edge & SDV. Versions prior to 0.24.4 have a buffer overflow case while the PUBL

TOTOLINK A3300R V17.0.0cu.557_B20221024 and N200RE V9.3.5u.6448_B20240521 and V9.3.5u.6437_B20230519 are vulnerable to I

A vulnerability was determined in vion707 DMadmin up to 3403cafdb42537a648c30bf8cbc8148ec60437d1. This impacts the funct

Ateme TITAN File 3.9.12.4 contains an authenticated server-side request forgery vulnerability in the job callback URL pa

Blackcat CMS 1.4 contains a remote code execution vulnerability that allows authenticated administrators to upload malic

Blackcat CMS 1.4 contains a stored cross-site scripting vulnerability that allows authenticated users to inject maliciou

Perch CMS 3.2 contains a stored cross-site scripting vulnerability that allows authenticated users to upload malicious S

Perch CMS 3.2 contains a remote code execution vulnerability that allows authenticated administrators to upload arbitrar

Zomplog 3.9 contains a remote code execution vulnerability that allows authenticated attackers to inject and execute arb

Zomplog 3.9 contains a cross-site scripting vulnerability that allows authenticated users to inject malicious scripts wh

Xlight FTP Server 3.9.3.6 contains a stack buffer overflow vulnerability in the 'Execute Program' configuration that all

Webutler v3.2 contains a remote code execution vulnerability that allows authenticated administrators to upload PHP file

Webedition CMS v2.9.8.8 contains a stored cross-site scripting vulnerability that allows authenticated users to upload m

Webedition CMS v2.9.8.8 contains a remote code execution vulnerability that allows authenticated attackers to inject sys

JLex GuestBook 1.6.4 contains a reflected cross-site scripting vulnerability in the 'q' URL parameter that allows attack

ReyeeOS 1.204.1614 contains an unencrypted CWMP communication vulnerability that allows attackers to intercept and manip

Lucee 5.4.2.17 contains a reflected cross-site scripting vulnerability that allows authenticated attackers to inject mal

NVClient 5.0 contains a stack buffer overflow vulnerability in the user configuration contact field that allows attacker

Member Login Script 3.3 contains a client-side desynchronization vulnerability that allows attackers to manipulate HTTP

Bus Reservation System 1.1 contains a SQL injection vulnerability in the pickup_id parameter that allows attackers to ma

Academy LMS 6.1 contains a file upload vulnerability that allows authenticated users to upload malicious SVG files with

GOM Player 2.3.90.5360 contains a remote code execution vulnerability in its Internet Explorer component that allows att

GOM Player 2.3.90.5360 contains a buffer overflow vulnerability in the equalizer preset name input field that allows att

SyncBreeze 15.2.24 contains a denial of service vulnerability in the login authentication mechanism that allows attacker