2025

Improper handling of insufficient permission in Samsung Device Health Manager Service prior to SMR Apr-2025 Release 1 al

Improper authorization in wireless download protocol in Galaxy Watch prior to SMR Apr-2025 Release 1 allows physical att

Improper access control in SamsungContacts prior to SMR Apr-2025 Release 1 allows local attackers to access protected da

Improper access control in HDCP trustlet prior to SMR Apr-2025 Release 1 allows local attackers with shell privilege to

Improper handling of insufficient permission or privileges in ClipboardService prior to SMR Apr-2025 Release 1 allows lo

Improper access control in Sticker Center prior to SMR Apr-2025 Release 1 allows local attackers to access image files w

The Melhor Envio plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includi

A vulnerability was found in Nothings stb up to f056911. It has been rated as critical. Affected by this issue is the fu

A vulnerability was found in Nothings stb up to f056911. It has been declared as critical. Affected by this vulnerabilit

A vulnerability was found in Nothings stb up to f056911. It has been classified as problematic. Affected is the function

A vulnerability was found in FCJ Venture Builder appclientefiel 3.0.27. It has been declared as problematic. Affected by

A vulnerability was found in Vivotek NVR ND8422P, NVR ND9525P and NVR ND9541P 2.4.0.204/3.3.0.104/4.2.0.101. It has been

A vulnerability was found in Seeyon Zhiyuan Interconnect FE Collaborative Office Platform 5.5.2 and classified as critic

A vulnerability has been found in ESAFENET CDG 5.6.3.154.205_20250114 and classified as critical. This vulnerability aff

The SSH service of PowerStation from HGiga has a Chroot Escape vulnerability, allowing attackers with root privileges to

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindi

Vulnerability-Lookup before 2.7.1 allows stored XSS via a user bio in website/web/views/user.py.

A vulnerability, which was classified as critical, was found in ESAFENET CDG 5.6.3.154.205_20250114. This affects an unk

A vulnerability, which was classified as critical, has been found in ESAFENET CDG 5.6.3.154.205_20250114. Affected by th

A vulnerability classified as critical was found in lenve VBlog up to 1.0.0. Affected by this vulnerability is the funct

A vulnerability classified as problematic has been found in YzmCMS 7.1. Affected is an unknown function of the file mess

A vulnerability was found in mrcen springboot-ucan-admin up to 5f35162032cbe9288a04e429ef35301545143509. It has been cla

A vulnerability was found in hailey888 oa_system up to 2025.01.01 and classified as problematic. Affected by this issue

The web service of iSherlock from HGiga has an OS Command Injection vulnerability, allowing unauthenticated remote attac

The web service of iSherlock from HGiga has an OS Command Injection vulnerability, allowing unauthenticated remote attac

The web service of iSherlock from HGiga has an OS Command Injection vulnerability, allowing unauthenticated remote attac

The Streamit theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and i

The Streamit theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'st_

The Sreamit theme for WordPress is vulnerable to arbitrary file downloads in all versions up to, and including, 4.0.1. T

A vulnerability has been found in hailey888 oa_system up to 2025.01.01 and classified as problematic. Affected by this v

A vulnerability, which was classified as problematic, was found in hailey888 oa_system up to 2025.01.01. Affected is the

A vulnerability, which was classified as problematic, has been found in hailey888 oa_system up to 2025.01.01. This issue

A vulnerability classified as problematic was found in hailey888 oa_system up to 2025.01.01. This vulnerability affects

A vulnerability classified as problematic has been found in renrenio renren-security up to 5.4.0. This affects an unknow

A vulnerability was found in LinZhaoguan pb-cms 2.0. It has been rated as problematic. Affected by this issue is some un

A vulnerability was found in LinZhaoguan pb-cms 2.0. It has been declared as problematic. Affected by this vulnerability

Ratta SuperNote A6 X2 Nomad before December 2024 allows remote code execution because an arbitrary firmware image (signe

The DB chooser functionality in Jalios JPlatform 10 SP6 before 10.0.6 improperly neutralizes special elements used in an

A vulnerability was found in 1000 Projects Human Resource Management System 1.0. It has been classified as critical. Aff

A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0 and classified as critical.

The Apollo Router Core is a configurable, high-performance graph router written in Rust to run a federated supergraph th

The Apollo Router Core is a configurable, high-performance graph router written in Rust to run a federated supergraph th

The Apollo Router Core is a configurable, high-performance graph router written in Rust to run a federated supergraph th

Apollo Gateway provides utilities for combining multiple GraphQL microservices into a single GraphQL endpoint. Prior to

Apollo Gateway provides utilities for combining multiple GraphQL microservices into a single GraphQL endpoint. Prior to

ts-asn1-der is a collection of utility classes to encode ASN.1 data following DER rule. Incorrect number DER encoding ca

apollo-compiler is a query-based compiler for the GraphQL query language. Prior to 1.27.0, a vulnerability in Apollo Com

A vulnerability has been found in joey-zhou xiaozhi-esp32-server-java up to a14fe8115842ee42ab5c7a51706b8a85db5200b7 and

A vulnerability, which was classified as critical, was found in zhangyanbo2007 youkefu 4.2.0. This affects an unknown pa

libvips is a demand-driven, horizontally threaded image processing library. The heifsave operation could incorrectly de