2025

A SQL injection vulnerability in the "Search" functionality of "tickets.php" page in osTicket <=1.17.5 allows authentica

An issue in the /usr/local/bin/jncs.sh script of Gefen WebFWC (In AV over IP products) v1.85h, v1.86v, and v1.70 allows

In the Linux kernel, the following vulnerability has been resolved: bpf: consider that tail calls invalidate packet poi

In the Linux kernel, the following vulnerability has been resolved: bpf: check changes_pkt_data property for extension

In the Linux kernel, the following vulnerability has been resolved: bpf: track changes_pkt_data property for global fun

Improper access control in PAM feature in Devolutions Server allows a PAM user to self approve their PAM requests even i

ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafte

SourceCodester Web Based Pharmacy Product Management System 1.0 is vulnerable to Cross Site Scripting (XSS) in add-admin

The Multiple File Upload add-on component 3.1.0 for OutSystems is vulnerable to Unrestricted File Upload. This occurs be

Vulnerability in Best Practical Solutions, LLC's Request Tracker prior to v5.0.8, where the Triple DES (3DES) cryptograp

A vulnerability was found in Mechrevo Control Console 1.0.2.70. It has been rated as critical. Affected by this issue is

Due to the improper configuration of XML parser, user-supplied XML is parsed without applying sufficient restrictions, e

A vulnerability was found in TOTOLINK A720R 4.1.5cu.374. It has been declared as problematic. Affected by this vulnerabi

A vulnerability was found in TOTOLINK A720R 4.1.5cu.374. It has been classified as problematic. Affected is an unknown f

A vulnerability was found in TOTOLINK A720R 4.1.5cu.374 and classified as critical. This issue affects some unknown proc

A vulnerability has been found in TOTOLINK A720R 4.1.5cu.374 and classified as critical. This vulnerability affects unkn

A vulnerability, which was classified as critical, was found in SourceCodester/oretnom23 Stock Management System 1.0. Th

A vulnerability, which was classified as critical, has been found in PHPGurukul Notice Board System 1.0. Affected by thi

The Newsletter WordPress plugin before 8.7.1 does not sanitise and escape some of its settings, which could allow high

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AlphaEfficiencyTea

A vulnerability classified as critical was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected by this v

A vulnerability classified as critical has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected is a

A vulnerability was found in PHPGurukul Online DJ Booking Management System 1.0. It has been rated as critical. This iss

A vulnerability was found in PHPGurukul Online DJ Booking Management System 1.0. It has been declared as critical. This

A vulnerability was found in GAIR-NLP factool up to 3f3914bc090b644be044b7e0005113c135d8b20f. It has been classified as

A vulnerability was found in zhangyanbo2007 youkefu up to 4.2.0 and classified as problematic. Affected by this issue is

A vulnerability has been found in newbee-mall 1.0 and classified as critical. Affected by this vulnerability is the func

In thermal, there is a possible out of bounds write due to a race condition. This could lead to local escalation of priv

In Modem, there is a possible permission bypass due to improper certificate validation. This could lead to remote inform

In scp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In Modem, there is a possible information disclosure due to incorrect error handling. This could lead to remote informat

In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if

In devinfo, there is a possible information disclosure due to a missing SELinux policy. This could lead to local informa

A vulnerability, which was classified as critical, was found in zhangyanbo2007 youkefu up to 4.2.0. Affected is the func

A vulnerability, which was classified as problematic, has been found in SeaCMS 13.2. This issue affects some unknown pro

A vulnerability classified as problematic was found in SeaCMS 13.2. This vulnerability affects unknown code of the file

A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7. This affects an unknown part of the com

A vulnerability was found in PCMan FTP Server 2.0.7. It has been rated as critical. Affected by this issue is some unkno

A vulnerability was found in PCMan FTP Server 2.0.7. It has been declared as critical. Affected by this vulnerability is

A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as critical. Affected is an unknown function

A vulnerability was found in PCMan FTP Server 2.0.7 and classified as critical. This issue affects some unknown processi

A vulnerability was found in code-projects Nero Social Networking Site 1.0. It has been classified as critical. This aff

A vulnerability was found in PHPGurukul e-Diary Management System 1.0 and classified as critical. Affected by this issue

A vulnerability has been found in SourceCodester Simple To-Do List System 1.0 and classified as critical. Affected by th

A vulnerability, which was classified as critical, was found in SourceCodester Simple To-Do List System 1.0. Affected is

In BlueWave Checkmate through 2.0.2 before d4a6072, an invite request can be modified to specify a privileged role.

Inedo ProGet through 2024.22 allows remote attackers to reach restricted functionality through the C# reflection layer,

In browser-use (aka Browser Use) before 0.1.45, URL parsing of allowed_domains is mishandled because userinfo can be pla

A vulnerability, which was classified as critical, was found in code-projects Online Bus Reservation System 1.0. This af

A vulnerability, which was classified as critical, has been found in code-projects Online Bus Reservation System 1.0. Af