2025

A vulnerability, which was classified as critical, has been found in PHPGurukul Notice Board System 1.0. This issue affe

A flaw was found in libsoup. When handling cookies, libsoup clients mistakenly allow cookies to be set for public suffix

A vulnerability classified as critical was found in code-projects Prison Management System 1.0. This vulnerability affec

A vulnerability classified as critical has been found in Projectworlds Online Examination System 1.0. This affects an un

An XSS issue was discovered in MDaemon Email Server version 25.0.1 and below. An attacker can send a specially crafted H

A flaw was found in the mod_auth_openidc module for Apache httpd. This flaw allows a remote, unauthenticated attacker to

When DNSdist is configured to provide DoH via the nghttp2 provider, an attacker can cause a denial of service by craftin

A Regular Expression Denial of Service (ReDoS) vulnerability was identified in the huggingface/transformers library, spe

In the Linux kernel, the following vulnerability has been resolved: vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_

The SecuPress Free — WordPress Security plugin for WordPress is vulnerable to unauthorized modification of data due to a

The Gutenverse – Ultimate Block Addons and Page Builder for Site Editor plugin for WordPress is vulnerable to Stored Cro

The Calculated Fields Form WordPress plugin before 5.2.62 does not sanitise and escape some of its settings, which could

n8n is a workflow automation platform. Prior to version 1.90.0, n8n is vulnerable to stored cross-site scripting (XSS) t

Audiobookshelf is a self-hosted audiobook and podcast server. Prior to version 2.21.0, an improper input handling vulner

libsnowflakeclient is the Snowflake Connector for C/C++. Versions starting from 0.5.0 to before 2.2.0, incorrectly treat

libsnowflakeclient is the Snowflake Connector for C/C++. Versions starting from 0.5.0 to before 2.2.0, are vulnerable to

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadO

A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4

The issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequ

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.

An access issue was addressed with improved access restrictions. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.4 and iPadOS 18.4, i

The issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequ

An authentication issue was addressed with improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, i

A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.3 and iPadOS 18.3

snowflake-connector-nodejs is a NodeJS driver for Snowflake. Versions starting from 1.10.0 to before 2.0.4, are vulnerab

gosnowflake is the Snowflake Golang driver. Versions starting from 1.7.0 to before 1.13.3, are vulnerable to a Time-of-C

snowflake-connector-net is the Snowflake Connector for .NET. Versions starting from 2.1.2 to before 4.4.1, are vulnerabl

A vulnerability was found in PHPGurukul Rail Pass Management System 1.0. It has been rated as critical. Affected by this

A vulnerability was found in code-projects Train Ticket Reservation System 1.0. It has been declared as critical. Affect

A vulnerability was found in code-projects ATM Banking 1.0. It has been classified as critical. Affected is the function

When a Web User without Create permission on subfolders attempts to upload a file to a non-existent directory, the error

Missing input validation in certain features of the Web Client of Fortra's GoAnywhere prior to version 7.8.0 allows an a

Enterprise Protection contains an improper input validation vulnerability in attachment defense that allows an unauthent

A vulnerability was found in 201206030 Novel 3.5.0 and classified as critical. This issue affects the function updateBoo

A vulnerability classified as critical was found in projectworlds Online Examination System 1.0. Affected by this vulner

A vulnerability was found in PHPGurukul Hostel Management System 2.1 in the /hostel/change-password.php file of the user

A critical vulnerability was found in PHPGurukul User Registration & Login and User Management System V3.3 in the /login

An issue in phpgurukul Online Banquet Booking System V1.2 allows an attacker to execute arbitrary code via the /obbs/cha

A vulnerability in the update process of Docker Desktop for Windows versions prior to 4.41.0 could allow a local, low-pr

GFI MailEssentials prior to version 21.8 is vulnerable to a .NET deserialization issue. A remote and authenticated attac

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. For a subset of unlikely r

Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP priority header

A vulnerability classified as critical has been found in PHPGurukul Nipah Virus Testing Management System 1.0. Affected

A vulnerability was found in inclusionAI AWorld up to 8c257626e648d98d793dd9a1a950c2af4dd84c4e. It has been rated as cri

GFI MailEssentials prior to version 21.8 is vulnerable to an XML External Entity (XXE) issue. An authenticated and remot

GFI MailEssentials prior to version 21.8 is vulnerable to a local privilege escalation issue. A local attacker can escal

A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0. It has been declared as critical. This vulnera

A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. It has been classified as critical. This