2025

Inappropriate implementation in Tab Strip in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to perform U

Inappropriate implementation in Messages in Google Chrome on Android prior to 137.0.7151.55 allowed a remote attacker wh

Inappropriate implementation in FileSystemAccess API in Google Chrome prior to 137.0.7151.55 allowed a remote attacker t

Inappropriate implementation in Background Fetch API in Google Chrome prior to 137.0.7151.55 allowed a remote attacker t

Use after free in Compositing in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit h

code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting (XSS) via the name field in the fee

An arbitrary file read vulnerability in the ReadTextAsynchronous function of SSCMS v7.3.1 allows attackers to read arbit

ZKTeco BioTime allows unauthenticated attackers to enumerate usernames and log in as any user with a password unchanged

A vulnerability was found in PHPGurukul News Portal Project 4.1. It has been declared as critical. This vulnerability af

maccms10 v2025.1000.4047 is vulnerable to Server-Side request forgery (SSRF) in Friend Link Management.

An issue was discovered in Wi-Fi in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1

A vulnerability was found in PHPGurukul News Portal Project 4.1. It has been classified as critical. This affects an unk

A vulnerability was found in PHPGurukul News Portal Project 4.1 and classified as critical. Affected by this issue is so

A vulnerability has been found in PHPGurukul News Portal Project 4.1 and classified as critical. Affected by this vulner

Icinga 2 is a monitoring system which checks the availability of network resources, notifies users of outages, and gener

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the len

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 128

An issue was discovered in the GPU in Samsung Mobile Processor Exynos 1480 and 2400. Type confusion leads to a Denial of

A vulnerability, which was classified as critical, was found in PHPGurukul Company Visitor Management System 1.0. Affect

auth-js is an isomorphic Javascript library for Supabase Auth. Prior to version 2.70.0, the library functions getUserByI

In the function process_crypto_cmd, the values of ptrs[i] can be potentially equal to NULL which is valid value after ca

There is a possible bypass of carrier restrictions due to an unusual root cause. This could lead to local escalation of

There is a possible disclosure of Bluetooth adapter details due to a permissions bypass. This could lead to local inform

A vulnerability, which was classified as critical, has been found in Gowabby HFish 0.1. This issue affects the function

A vulnerability classified as critical was found in Campcodes Online Hospital Management System 1.0. This vulnerability

A vulnerability classified as critical has been found in GNU Binutils up to 2.44. This affects the function debug_type_s

Django-Select2 is a Django integration for Select2. Prior to version 8.4.1, instances of HeavySelect2Mixin subclasses li

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DBAR Productions V

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in OpenText Advanced Authentica

A flaw was found in GIMP when processing XCF image files. If a user opens one of these image files that has been special

A flaw was found in GIMP when processing certain TGA image files. If a user opens one of these image files that has been

A flaw was found in GIMP. The GIMP ani_load_image() function is vulnerable to a stack-based overflow. If a user opens.AN

Memory safety bugs present in Firefox 138 and Thunderbird 138. Some of these bugs showed evidence of memory corruption a

Previewing a response in Devtools ignored CSP headers, which could have allowed content injection attacks. This vulnerab

In certain cases, SNI could have been sent unencrypted even when encrypted DNS was enabled. This vulnerability was fixed

Memory safety bug present in Firefox ESR 128.10, and Thunderbird 128.10. This bug showed evidence of memory corruption a

Memory safety bugs present in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10. Some of these bu

A clickjacking vulnerability could have been used to trick a user into leaking saved payment card details to a malicious

Script elements loading cross-origin resources generated load and error events which leaked information enabling XS-Leak

Due to insufficient escaping of the ampersand character in the “Copy as cURL” feature, an attacker could trick a user in

Due to insufficient escaping of the newline character in the “Copy as cURL” feature, an attacker could trick a user into

Error handling for script execution was incorrectly isolated from web content, which could have allowed cross-origin lea

A double-free could have occurred in `vpx_codec_enc_init_multi` after a failed allocation when initializing the encoder

A vulnerability was found in GNU Binutils up to 2.44. It has been rated as critical. Affected by this issue is the funct

The Property plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the use of

On macOS systems, by utilizing a Launch Agent and loading the viscosity_openvpn process from the application bundle, it

An unauthenticated remote attacker can exploit a denial-of-service vulnerability in the device's web server functionalit

The devices are vulnerable to an authentication bypass due to flaws in the authorization mechanism. An unauthenticated r

Due to missing authentication on a critical function of the devices an unauthenticated remote attacker can execute arbit

An unauthenticated remote attacker can exploit input validation in cmd services of the devices, allowing them to disrupt