2025

The bitnami/pgpool Docker image, and the bitnami/postgres-ha k8s chart, under default configurations, comes with an 'rep

A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.2). The login

A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4). The file

A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4). The affec

A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4). The appli

A vulnerability has been identified in Desigo CC (All versions if access from Installed Clients to Desigo CC server is a

An unauthenticated remote attacker could use a demo account of the portal to hijack devices that were created in that ac

CWE-121: Stack-based Buffer Overflow vulnerability exists that could cause local attackers being able to exploit these i

Incorrect Authorization vulnerability in Apache Superset allows ownership takeover of dashboards, charts or datasets by

The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on t

The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on t

The TheGem theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on t

The TheGem theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the thegem

The Newsletters plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby' parameter in all versio

Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 2

VMware Aria automation contains a DOM based Cross-Site Scripting (XSS) vulnerability. A malicious actor may exploit this

Cloud Foundry UAA release versions from v77.21.0 to v7.31.0 are vulnerable to a private key exposure in logs.

The Relevanssi – A Better Search plugin for WordPress is vulnerable to time-based SQL Injection via the cats and tags qu

conda-forge openssl-feedstock before 066e83c (2024-05-20), on Microsoft Windows, configures OpenSSL to use an OPENSSLDIR

Under certain conditions, SAP Landscape Transformation's PCL Basis module does not perform the necessary authorization c

SAP S/4HANA Cloud Private Edition or on Premise (SCM Master Data Layer (MDL)) allows an authenticated attacker with SAP

SAP Service Parts Management (SPM) does not perform necessary authorization checks for an authenticated user, allowing a

Due to missing authorization check, an unauthorized user can view the files of other company. This might lead to disclos

SAP Service Parts Management (SPM) does not perform necessary authorization checks for an authenticated user, allowing a

SAP Supplier Relationship Management (Master Data Management Catalogue) allows an unauthenticated attacker to execute ma

SAP GUI for Windows allows an unauthenticated attacker to exploit insecure obfuscation algorithms used by the GuiXT appl

Due to a security misconfiguration vulnerability, customers can develop Production Operator Dashboards (PODs) that enabl

SAP S/4 HANA allows an authenticated attacker with user privileges to configure a field not intended for their access an

SAP S4CORE OData meta-data property allows an authenticated attacker to access restricted information due to missing aut

Under certain conditions Promotion Management Wizard (PMW) allows an attacker to access information which would otherwis

SAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can upload untrusted or malicious c

Under certain conditions, SAP Gateway Client allows a high-privileged user to access restricted information beyond the s

SAP NetWeaver is vulnerable to an Information Disclosure vulnerability caused by the injection of malicious instructions

The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) allows an unauthenticated attacker to submit an a

The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component, which al

The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component within th

The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component within th

he Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component within the

The Data Services Management Console does not sufficiently encode user-controlled inputs, allowing an attacker to inject

Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter

Kanboard is project management software that focuses on the Kanban methodology. Versions 1.2.26 through 1.2.44 have a St

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.5. An app may be

A privacy issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.5, macOS Sequoia 15.7, macOS

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.5. An app may be able

This issue was addressed with improved memory handling. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, ma

The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.5. Hot corner may unex

This issue was addressed through improved state management. This issue is fixed in iOS 18.5 and iPadOS 18.5. Muting the

The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7

An information disclosure issue was addressed with improved privacy controls. This issue is fixed in macOS Sequoia 15.5.

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.5. An app may be able to acces