2025

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to e

IBM Semeru Runtime 8.0.302.0 through 8.0.442.0, 11.0.12.0 through 11.0.26.0, 17.0.0.0 through 17.0.14.0, and 21.0.0.0 th

Web sessions in the web interface of Palo Alto Networks Prisma® Cloud Compute Edition do not expire when users are delet

An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® softwar

Using the AES-128-CCM algorithm for IPSec on certain Palo Alto Networks PAN-OS® firewalls (PA-7500, PA-5400, PA-5400f, P

An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables a

A code injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute a

A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect™ gateway and portal features of Palo Alto Netw

A missing authentication vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an unauthenticated user to dis

An incorrect privilege management vulnerability in the OPSWAT MetaDefender Endpoint Security SDK used by the Palo Alto N

Insufficient policy enforcement in Loader in Google Chrome prior to 136.0.7103.113 allowed a remote attacker to leak cro

CWE-611 Improper Restriction of XML External Entity Reference in the getDocumentBuilder() method of WebDav servlet in Pe

A vulnerability exists in the inftrees.c component of the zlib library, which is bundled within the PointCloudLibrary (P

Divide By Zero vulnerability in davisking dlib allows remote attackers to cause a denial of service via a crafted file

Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to impact app integrity via network acc

Buffer over-read in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service

Integer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct a denial of service via network

NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of

NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of

NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of

Cross-site scripting in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege v

Time-of-check time-of-use race condition in some Zoom Workplace Apps may allow an authenticated user to conduct an escal

A missing exception check in Palo Alto Networks PAN-OS® software with the web proxy feature enabled allows an unauthenti

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows

Missing Authorization vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Forceful Browsing.This issue affect

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Cross Site Request Forg

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows

Authentication Bypass by Capture-replay vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Remote Services w

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal IFrame Remo

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Klaro Cooki

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal COOKiES Con

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal oEmbed Prov

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Restrict route by IP allows Cross Site Request Forgery.This is

SourceCodester Best Employee Management System 1.0 is vulnerable to Cross Site Request Forgery (CSRF) in /admin/Operatio

SourceCodester Best Employee Management System V1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/profile.php vi

A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. By

It was possible to craft an email that showed a tracking link as an attachment. If the user attempted to open the attach

Thunderbird's handling of the X-Mozilla-External-Attachment-URL header can be exploited to execute JavaScript in the fil

Thunderbird parses addresses in a way that can allow sender spoofing in case the server allows an invalid From address t

An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 21

An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 21

motionEye is an online interface for the software motion, a video surveillance program with motion detection. In version

Rallly is an open-source scheduling and collaboration tool. Versions up to and including 3.22.1 of the application featu

Sulu is an open-source PHP content management system based on the Symfony framework. Starting in versions 2.5.21, 2.6.5,

5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. Versions prior to

Bullfrog is a GithHb Action to block unauthorized outbound traffic in GitHub workflows. Prior to version 0.8.4, using tc

iTop is an web based IT Service Management tool. Prior to version 3.2.1, a portal user can see any other contacts pictur

iTop is an web based IT Service Management tool. In version 3.2.0, an attacker may send a URL to the server to trigger a

iTop is an web based IT Service Management tool. Versions prior to 3.2.1 are vulnerable to regular expression denial of

iTop is an web based IT Service Management tool. Prior to versions 2.7.12, 3.1.3, and 3.2.1, server code execution is po