2025

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Umami Analy

LiteLLM Information health API_KEY Information Disclosure Vulnerability. This vulnerability allows remote attackers to d

The Dyson MQTT server (2022 and possibly later) allows publications and subscriptions by a client that has the correct v

GitHub Workflow Updater is a VS Code extension that automatically pins GitHub Actions to specific commits for enhanced s

A flaw was found in Keycloak. The Keycloak guides recommend to not expose /admin path to the outside in case the install

A flaw has been found in SourceCodester Student Grades Management System 1.0. This affects the function delete_user of t

A security flaw has been discovered in Willow CMS up to 1.4.0. This issue affects some unknown processing of the file /a

A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0. Impacted is an unknown function of the file vie

A vulnerability was detected in PHPGurukul Curfew e-Pass Management System 1.0. This issue affects some unknown processi

A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0. The impacted element is an unknown function of

A vulnerability was identified in code-projects Client Details System 1.0. The affected element is an unknown function o

A vulnerability was determined in code-projects Client Details System 1.0. Impacted is an unknown function of the file /

A vulnerability was found in code-projects Client Details System 1.0. This issue affects some unknown processing of the

A vulnerability has been found in code-projects Client Details System 1.0. This vulnerability affects unknown code of th

ZohoCorp ManageEngine Endpoint Central versions prior to 11.4.2528.05 are vulnerable to a sensitive information logging

A vulnerability was found in LearnHouse up to 98dfad76aad70711a8113f6c1fdabfccf10509ca. The affected element is an unkno

A security flaw has been discovered in Wisencode up to 20251012. Affected by this vulnerability is an unknown functional

A vulnerability has been found in OpenWGA 7.11.12 Build 737. This impacts an unknown function of the component Admin UI.

A security vulnerability has been detected in projectworlds Expense Management System 1.0. Affected is an unknown functi

A weakness has been identified in projectworlds Expense Management System 1.0. This impacts an unknown function of the f

A security flaw has been discovered in projectworlds Expense Management System 1.0. This affects an unknown function of

A vulnerability was identified in projectworlds Expense Management System 1.0. The impacted element is an unknown functi

A vulnerability was determined in projectworlds Gate Pass Management System 1.0. The affected element is an unknown func

A flaw has been found in Iqbolshoh php-business-website up to 10677743a8dfc281f85291a27cf63a0bce043c24. This vulnerabili

A vulnerability has been found in Kamailio 5.5. This affects the function yyerror_at of the file src/core/cfg.y of the c

A flaw has been found in Kamailio 5.5. The impacted element is the function rve_is_constant of the file src/core/rvalue.

GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.3, and 18.5 before 18.5.1 that

GitLab has remediated an issue in GitLab EE affecting all versions from 17.6.0 before 18.3.5, 18.4 before 18.4.3, and 18

The ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution plugin for WordPress is vulnerable

The Password Protected plugin for WordPress is vulnerable to authorization bypass via IP address spoofing in all version

Wasmtime is a runtime for WebAssembly. In versions from 38.0.0 to before 38.0.3, the implementation of component-model r

The PixelYourSite WordPress plugin before 11.1.2 does not validate some URL parameters before using them to generate pa

A high privileged remote attacker can influence the parameters passed to the openssl command due to improper neutralizat

On Mercku M6a devices through 2.1.0, the authentication system uses predictable session tokens based on timestamps.

Mercku M6a devices through 2.1.0 allow TELNET sessions via a router.telnet.enabled.update request by an administrator.

On Mercku M6a devices through 2.1.0, session tokens remain valid for at least months in some cases.

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Naming Subsystem). The sup

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Block Storage). The suppor

Vulnerability in the Oracle GraalVM for JDK product of Oracle Java SE (component: Compiler). Supported versions that ar

Vulnerability in the Unified Audit component of Oracle Database Server. Supported versions that are affected are 23.4-2

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE

Vulnerability in the RDBMS Functional Index component of Oracle Database Server. Supported versions that are affected a

A vulnerability was detected in DCMTK up to 3.6.7. The impacted element is the function DcmQueryRetrieveConfig::readPeer

ZohoCorp ManageEngine Endpoint Central versions earlier than 11.4.2508.14, 11.4.2516.06, and 11.4.2518.01 are affected b

Tileservice module is affected by information leak vulnerability, successful exploitation of this vulnerability may affe

A security flaw has been discovered in LogicalDOC Community Edition up to 9.2.1. This issue affects some unknown process

A vulnerability was identified in toeverything AFFiNE up to 0.24.1. This vulnerability affects unknown code of the compo

The Restaurant Brands International (RBI) assistant platform through 2025-09-06 transmits passwords of user accounts in

LobeChat is an open source chat application platform. The web-crawler package in LobeChat version 1.136.1 allows server-

radare2 v5.9.8 and before contains a memory leak in the function bochs_open.