2025

DVP-12SE - Modbus/TCP Cleartext Transmission of Sensitive Information

Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/Io

Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems (ICS) and OT/Io

A vulnerability was identified in simstudioai sim up to 0.5.27. This vulnerability affects unknown code of the file apps

Gitea before 1.23.0 allows attackers to add attachments with forbidden file extensions by editing an attachment name via

A vulnerability was found in Alteryx Server. Affected by this issue is some unknown functionality of the file /gallery/a

A vulnerability was identified in UTT 进取 512W up to 1.7.7-171114. Impacted is the function strcpy of the file /goform/Co

A vulnerability was determined in UTT 进取 512W up to 1.7.7-171114. This issue affects the function strcpy of the file /go

A vulnerability was found in UTT 进取 512W up to 1.7.7-171114. This vulnerability affects the function strcpy of the file

A vulnerability has been found in UTT 进取 512W up to 1.7.7-171114. This affects the function strcpy of the file /goform/A

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Verisay Com

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Verisay Com

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Verisay Com

Pexip Infinity 35.0 through 38.1 before 39.0, in non-default configurations that use Direct Media for WebRTC, has Improp

Pexip Infinity before 39.0 has Improper Input Validation in the media implementation, allowing a remote attacker to trig

Pexip Infinity before 39.0 has Missing Authentication for a Critical Function in a product-internal API, allowing an att

Pexip Infinity 15.0 through 38.0 before 38.1 has Improper Access Control in the Secure Scheduler for Exchange service, w

Pexip Infinity 35.0 through 37.2 before 38.0 has Improper Input Validation in signalling that allows an attacker to trig

Pexip Infinity 33.0 through 37.0 before 37.1 has improper input validation in signaling that allows an attacker to trigg

Pexip Infinity before 37.0 has improper input validation in signalling that allows a remote attacker to trigger a softwa

A vulnerability was detected in itsourcecode Student Management System 1.0. The impacted element is an unknown function

A security vulnerability has been detected in itsourcecode Student Management System 1.0. The affected element is an unk

A weakness has been identified in Tenda CH22 1.0.0.1. Impacted is an unknown function of the file /public/. Executing a

A security flaw has been discovered in itsourcecode Student Management System 1.0. This issue affects some unknown proce

A vulnerability was identified in itsourcecode Online Frozen Foods Ordering System 1.0. This vulnerability affects unkno

OpenOps before 0.6.11 allows remote code execution in the Terraform block.

A vulnerability was determined in itsourcecode Online Frozen Foods Ordering System 1.0. This affects an unknown part of

C-Kermit (aka ckermit) through 10.0 Beta.12 (aka 416-beta12) before 244644d allows a remote Kermit system to overwrite f

A remote unauthenticated attacker may be able to bypass authentication by utilizing a specific API route to execute arb

LogicalDOC Enterprise 7.7.4 contains multiple post-authentication file disclosure vulnerabilities that allow attackers t

KYOCERA Net Admin 3.4.0906 contains a cross-site request forgery vulnerability that allows attackers to create administr

KYOCERA Net Admin 3.4.0906 contains an XML External Entity (XXE) injection vulnerability in the Multi-Set Template Edito

Beward N100 M2.1.6.04C014 contains an unauthenticated vulnerability that allows remote attackers to access live video st

Beward N100 H.264 VGA IP Camera M2.1.6 contains an authenticated file disclosure vulnerability that allows attackers to

Ross Video DashBoard 8.5.1 contains an elevation of privileges vulnerability that allows authenticated users to modify e

FaceSentry 6.4.8 contains an authenticated remote command injection vulnerability in pingTest.php and tcpPortTest.php sc

V-SOL GPON/EPON OLT Platform 2.03 contains an unauthenticated information disclosure vulnerability that allows attackers

Microhard Systems IPn4G 1.1.0 contains multiple authenticated remote code execution vulnerabilities in the admin interfa

Microhard Systems IPn4G 1.1.0 contains hardcoded default credentials that cannot be changed through normal gateway opera

Microhard Systems IPn4G 1.1.0 contains an undocumented vulnerability that allows authenticated attackers to list and man

Microhard Systems IPn4G 1.1.0 contains an authentication bypass vulnerability in the hidden system-editor.sh script that

Microhard Systems IPn4G 1.1.0 contains a service vulnerability that allows authenticated users to enable a restricted SS

FLIR thermal traffic cameras contain an unauthenticated vulnerability that allows remote attackers to access live video

FLIR thermal traffic cameras contain an unauthenticated device manipulation vulnerability in their WebSocket implementat

FLIR AX8 Thermal Camera 1.32.16 contains an unauthenticated vulnerability that allows remote attackers to access live vi

FLIR Brickstream 3D+ 2.1.742.1842 contains an unauthenticated vulnerability in the ExportConfig REST API that allows att

FLIR Brickstream 3D+ 2.1.742.1842 contains an unauthenticated vulnerability that allows remote attackers to access live

Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 contains a stored cross-site scripting vulnerability in the configura

SOCA Access Control System 180612 contains multiple insecure direct object reference vulnerabilities that allow attacker

SOCA Access Control System 180612 contains multiple SQL injection vulnerabilities that allow attackers to manipulate dat