2025

An unrestricted upload of file with dangerous type vulnerability in the course management function of Wisdom Master Pro

A missing authorization vulnerability in the retrieve teacher Information function of Wisdom Master Pro versions 5.0 thr

VisiCut 2.1 allows stack consumption via an XML document with nested set elements, as demonstrated by a java.util.HashMa

A race condition Use-After-Free vulnerability exists in the virtio_transport_space_update function within the Kernel 5.4

Arctera/Veritas Data Insight before 7.1.2 can send cleartext credentials when configured to use HTTP Basic Authenticatio

Out-of-Bounds Read in netfilter/ipset in Linux Kernel ChromeOS [6.1, 5.15, 5.10, 5.4, 4.19] allows a local attacker with

Overview   XML documents optionally contain a Document Type Definition (DTD), which, among other features, enable

Overview   XML documents optionally contain a Document Type Definition (DTD), which, among other features, enable

Overview   The software does not neutralize or incorrectly neutralize user-controllable input before it is placed

Overview   The product uses external input to construct a pathname that should be within a restricted directory,

Overview   The product uses external input to construct a pathname that should be within a restricted directory,

ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users

Access Control Vulnerability in Gerrit chromiumos project configuration in Google ChromeOS 16063.87.0 allows an attacker

DNS Leak in Native System VPN in Google ChromeOS Dev Channel on ChromeOS 16002.23.0 allows network observers to expose p

Overview  The product specifies permissions for a security-critical resource in a way that allows that resource to be

Overview   The software does not neutralize or incorrectly neutralize user-controllable input before it is placed

Overview   The product receives input from an upstream component, but it does not restrict or incorrectly restric

An issue was discovered in Ankitects Anki through 25.02. A crafted shared deck can result in attacker-controlled access

The Backstage Scaffolder plugin houses types and utilities for building scaffolder-related modules. A vulnerability in t

EspoCRM is an Open Source Customer Relationship Management software. Prior to version 9.0.7, users can be sorted by thei

SoftEtherVPN is a an open-source cross-platform multi-protocol VPN Program. Versions 5.02.5184 to 5.02.5187 are vulnerab

XWiki Platform is a generic wiki platform. A vulnerability in versions from 5.0 to 16.7.1 affects users with Message Str

Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and O

Zulip is an open-source team collaboration tool. Zulip supports a configuration where account creation is limited solely

Omnissa Horizon Client for Windows contains an LPE Vulnerability. A malicious actor with local access where Horizon Clie

A vulnerability, which was classified as problematic, was found in PyTorch 2.6.0. Affected is the function torch.nn.func

A vulnerability, which was classified as critical, has been found in SourceCodester Web-based Pharmacy Product Managemen

A vulnerability classified as critical was found in SourceCodester Simple Hotel Booking System 1.0. This vulnerability a

A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7. This affects an unknown part of the com

Use after free in USB in Google Chrome prior to 135.0.7049.95 allowed a remote attacker to potentially exploit heap corr

Heap buffer overflow in Codecs in Google Chrome on Windows prior to 135.0.7049.95 allowed a remote attacker to potential

SourceCodester Company Website CMS 1.0 is vulnerable to Cross Site Scripting (XSS) via /dashboard/Services.

SourceCodester Company Website CMS 1.0 has a File upload vulnerability via the "Create portfolio" file /dashboard/portfo

SourceCodester Company Website CMS 1.0 contains a file upload vulnerability via the "Create Services" file /dashboard/Se

PHPGurukul Pre-School Enrollment System is vulnerable to Directory Traversal in manage-teachers.php.

A Stored XSS vulnerability exists in the message compose feature of Chamilo LMS 1.11.28. Attackers can inject malicious

Wallos <=2.38.2 has a file upload vulnerability in the restore database function, which allows unauthenticated users to

Wallos <= 2.38.2 has a file upload vulnerability in the restore backup function, which allows authenticated users to res

A vulnerability was found in PCMan FTP Server 2.0.7. It has been rated as critical. Affected by this issue is some unkno

A vulnerability was found in PCMan FTP Server 2.0.7. It has been declared as critical. Affected by this vulnerability is

A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as critical. Affected is an unknown function

A vulnerability was found in PCMan FTP Server 2.0.7 and classified as critical. This issue affects some unknown processi

A Improper Link Resolution vulnerability (CWE-59) in the SonicWall Connect Tunnel Windows (32 and 64 bit) client, this r

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Seq

A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4

Cross-Site Request Forgery (CSRF) vulnerability in wpweb WooCommerce Social Login woo-social-login allows Cross Site Req

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is v

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is v

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is v

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is v