2025

A Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in spacewalk-java allows e

The default mode of pseudo terminals (PTYs) allocated by Screen was changed from 0620 to 0622, thereby allowing anyone t

In the Linux kernel, the following vulnerability has been resolved: net_sched: Flush gso_skb list too during ->change()

A vulnerability has been found in Wing FTP Server up to 7.4.3 and classified as critical. Affected by this vulnerability

Screen version 5.0.0 and older version 4 releases have a TOCTOU race potentially allowing to send SIGHUP, SIGCONT to pr

A minor information leak when running Screen with setuid-root privileges allows unprivileged users to deduce information

Insertion of Sensitive Information Into Sent Data vulnerability in Spotlight Spotlight - Social Media Feeds (Premium) al

A vulnerability was found in thinkgem JeeSite up to 5.11.1. It has been rated as critical. Affected by this issue is the

A vulnerability was found in Summer Pearl Group Vacation Rental Management Platform up to 1.0.1. It has been declared as

Missing authorization vulnerability in TCMAN's GIM v11. This allows an authenticated attacker to access any functionalit

Time-based blind SQL injection vulnerabilities in TCMAN's GIM v11. These allow an attacker to retrieve, create, update a

Time-based blind SQL injection vulnerabilities in TCMAN's GIM v11. These allow an attacker to retrieve, create, update a

Missing authentication vulnerability in TCMAN GIM v11. This allows an unauthenticated attacker to access the resources /

Stored Cross-Site Scripting (XSS) vulnerability in i2A-Cronos version 23.02.01.17, from i2A. It allows an authenticated

User enumeration vulnerability in M3M Printer Server Web. This issue occurs during user authentication, where a differen

Stored Cross-Site Scripting (XSS) vulnerability in the CoverManager booking software. This allows an attacker to inject

Insecure Direct Object Reference (IDOR) vulnerability in Clickedu. This vulnerability could allow an attacker to retriev

A vulnerability was found in Summer Pearl Group Vacation Rental Management Platform up to 1.0.1. It has been classified

A vulnerability was found in Summer Pearl Group Vacation Rental Management Platform up to 1.0.1 and classified as proble

A vulnerability has been found in Summer Pearl Group Vacation Rental Management Platform up to 1.0.1 and classified as c

A vulnerability, which was classified as problematic, was found in Summer Pearl Group Vacation Rental Management Platfor

A vulnerability, which was classified as critical, has been found in Wondershare Filmora 14.5.16. Affected by this issue

A vulnerability classified as problematic was found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. Affected by

A vulnerability classified as critical has been found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. Affected i

A vulnerability was found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. It has been rated as problematic. This

A flaw was found in ActiveMQ Artemis. The password generated by activemq-artemis-operator does not regenerate between se

The data stored in Be-Tech Mifare Classic card is stored in cleartext. An attacker having access to a Be-Tech hotel gues

A Privilege Escalation vulnerability has been found in Panloader component v3.24.0.0 by Espiral MS Group. This vulnerabi

SQL injection vulnerability in AES Multimedia's Gestnet v1.07. This vulnerability allows an attacker to retrieve, create

Improper Restriction of Operations within the Bounds of a Memory Buffer and Stack-based Buffer Overflow vulnerabilities

An unauthenticated remote attacker can access a URL which causes the device to reboot.

An unauthenticated remote attacker can access information about running processes via the SNMP protocol. The amount of r

Due to improper neutralization of input during web page generation (XSS) an unauthenticated remote attacker can inject H

A vulnerability was found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. It has been declared as critical. This

A vulnerability was found in erdogant pypickle up to 1.1.5. It has been classified as critical. This affects the functio

A vulnerability was found in erdogant pypickle up to 1.1.5 and classified as problematic. Affected by this issue is the

A vulnerability has been found in HumanSignal label-studio-ml-backend up to 9fb7f4aa186612806af2becfb621f6ed8d9fdbaf and

Mailform Pro CGI prior to 4.3.4 generates error messages containing sensitive information, which may allow a remote unau

A vulnerability, which was classified as critical, was found in Econtrata up to 20250516. Affected is an unknown functio

A vulnerability, which was classified as critical, has been found in llisoft MTA Maita Training System 4.5. This issue a

A vulnerability classified as critical was found in llisoft MTA Maita Training System 4.5. This vulnerability affects th

A vulnerability classified as problematic has been found in Open Asset Import Library Assimp 5.4.3. This affects the fun

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as problematic. Affected by this

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been declared as problematic. Affected by th

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as problematic. Affected is

A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects th

A vulnerability has been found in PerfreeBlog 4.0.11 and classified as problematic. This vulnerability affects the funct

A vulnerability, which was classified as problematic, was found in yangshare 技术杨工 warehouseManager 仓库管理系统 1.0. This affe

A vulnerability, which was classified as critical, has been found in H3C SecCenter SMP-E1114P02 up to 20250513. Affected

A vulnerability classified as problematic was found in H3C SecCenter SMP-E1114P02 up to 20250513. Affected by this vulne