2025

Malicious or unintentional API requests can be used to add significant amount of data to caches. Caches may evict inform

The WooCommerce Designer Pro theme for WordPress is vulnerable to arbitrary file read in all versions up to, and includi

The WordPress User Extra Fields plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file p

FutureNet MA and IP-K series provided by Century Systems Co., Ltd. contain an OS command Injection vulnerability. A user

LibreChat version 0.7.9 is vulnerable to a Denial of Service (DoS) attack due to unbounded parameter values in the `/api

Scrapy versions up to 2.13.2 are vulnerable to a denial of service (DoS) attack due to a flaw in its brotli decompressio

SQL injection in Revive Adserver 6.0.0 causes potential disruption or information access when specifically crafted paylo

A vulnerability was identified in certain UniFi Talk devices where internal debugging functionality remained unintention

A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user.

This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation if a system administrator

Nagios Log Server versions prior to 2024R1.3.2 contain a privilege escalation vulnerability in the account email-change

Nagios XI versions prior to 2024R2 contain an improperly owned script, process_perfdata.pl, which is executed periodical

Nagios XI versions prior to 2026R1 contain a remote code execution vulnerability in the Core Config Manager (CCM) Run C

Nagios XI versions prior to 2024R2 contain a command injection vulnerability in the WinRM plugin. Insufficient validatio

Nagios Network Analyzer versions prior to 2024R2.0.1 contain a vulnerability in the LDAP certificate management function

Nagios XI versions prior to 2024R1.4.2 contain a remote code execution vulnerability in the Business Process Intelligenc

Nagios Log Server versions prior to 2024R1.0.2 contain a local privilege escalation vulnerability that allows an attacke

Nagios XI versions prior to 2024R1.0.1 contain a privilege escalation vulnerability in the System Profile component. The

Nagios XI versions prior to 2024R1.3.2 contain a remote command execution vulnerability in the WinRM Configuration Wizar

Nagios XI versions prior to 2024R1.2 contain a command injection vulnerability in the Docker Wizard. Insufficient valida

Nagios XI versions prior to 2024R1.2 contain a privilege escalation vulnerability related to NagVis configuration handli

Nagios XI versions prior to 2024R1.1.2 may (confirmed in 2024R1.1 and 2024R1.1.1) disclose sensitive user account inform

Nagios Log Server versions prior to 2024R1 contain an incorrect authorization vulnerability. Users who lacked the requir

Nagios XI versions prior to 2024R1 contain a missing access control vulnerability via the Web SSH Terminal. A remote, lo

Nagios XI versions prior to 5.8.7 used a temporary directory for Highcharts exports with overly permissive ownership/per

The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.1.3 / Nagios XI 5.8.5 contains a SQL injection vulner

Nagios XI versions prior to 5.7.5 contain a SQL injection vulnerability in the SNMP Trap Interface edit page. Exploitati

Nagios XI versions prior to 5.7.3 contain a privilege escalation vulnerability in the getprofile.sh helper script. The s

Nagios XI versions prior to 5.7.3 contain a command injection vulnerability in the report PDF download/export functional

Nagios XI versions prior to 5.7.2 allow PHP files to be uploaded to the Audio Import directory and executed from that lo

The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.0.7 / Nagios XI 5.7.4 contains multiple SQL injection

Nagios XI versions prior to 5.6.14 contain a post-authentication SQL injection vulnerability in the SNMP Trap Interface

Nagios XI versions prior to 5.6.14 contain an authenticated remote command execution vulnerability in the CCM command_te

Nagios XI versions prior to 5.5.7 contain a privilege escalation vulnerability in the MRTG graphing component. MRTG-rela

Nagios XI versions prior to 5.4.13 contain a remote code execution vulnerability in the Component Download page. The dow

Nagios XI versions prior to 5.2.4 contain a SQL injection vulnerability in the notification search functionality. User-s

Nagios XI versions prior to 2012R1.6 contain a shell command injection vulnerability in the Auto-Discovery tool. User-co

Nagios XI versions prior to 2011R1.9 contain privilege escalation vulnerabilities in the scripts that install or update

In danny-avila/librechat version 0.7.9, there is an insecure API design issue in the 2-Factor Authentication (2FA) flow.

Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 was discovered to store the Administrator passw

A buffer overflow in the UPnP service of Tenda AC8 Hardware v03.03.10.01 allows attackers to cause a Denial of Service (

sqls-server/sqls 0.2.28 is vulnerable to command injection in the config command because the openEditor function passes

IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 21 could allow a remote attacker to traverse directories on t

IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 21 could allow a remote attacker to traverse directories on t

Incorrect access control in the Web management interface in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRou

A path traversal vulnerability was identified in SourceCodester Pet Grooming Management System 1.0, affecting the admin/

IBM Sterling Connect Direct for Unix 6.2.0.7 through 6.2.0.9 iFix004, 6.4.0.0 through 6.4.0.2 iFix001, and 6.3.0.2 throu

Statmatic is a Laravel and Git powered content management system (CMS). Stored XSS vulnerabilities in Collections and Ta

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDL

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to v3.10.21-lts