2025

HCL Traveler generates some error messages that provide detailed information about errors and failures, such as internal

HCL Traveler is affected by an internal path disclosure in a Windows application when the application inadvertently reve

A vulnerability classified as critical was found in projectworlds Online Doctor Appointment Booking System 1.0. Affected

A vulnerability classified as critical has been found in projectworlds Online Doctor Appointment Booking System 1.0. Aff

A vulnerability was found in projectworlds Online Doctor Appointment Booking System 1.0. It has been rated as critical.

This vulnerability affects Snowplow Collector 3.x before 3.3.0 (unless it’s set up behind a reverse proxy that establish

An issue was discovered in Iglu Server 0.13.0 and below. It is similar to CVE-2024-47214, but involves an authenticated

An issue was discovered in Snowbridge setups sending data to Google Tag Manager Server Side. It involves attaching an in

An issue was discovered in Iglu Server 0.13.0 and below. It is similar to CVE-2024-47212, but involves a different kind

An issue was discovered affecting Enrich 5.1.0 and below. It involves sending a maliciously crafted Snowplow event to th

An issue was discovered in Iglu Server 0.13.0 and below. It involves sending very large payloads to a particular API end

insightsoftware Hive JDBC through 2.6.13 has a remote code execution vulnerability. Attackers can inject malicious param

A vulnerability was found in FastCMS 0.1.5. It has been declared as critical. This vulnerability affects unknown code of

A vulnerability was found in Project Worlds Online Lawyer Management System 1.0. It has been classified as critical. Thi

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. The signature componen

API Platform Core is a system to create hypermedia-driven REST and GraphQL APIs. Prior to 4.0.22 and 3.4.17, a GraphQL g

API Platform Core is a system to create hypermedia-driven REST and GraphQL APIs. Using the Relay special node type you c

CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unle

generator-jhipster-entity-audit is a JHipster module to enable entity audit and audit log page. Prior to 5.9.1, generato

Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the

An issue in Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 allows a local attacker to escalate privileges via t

Insecure Permission vulnerability in student-manage 1 allows a local attacker to escalate privileges via the Unsafe perm

A buffer overflow vulnerability has been discovered in Tenda Ac15 V15.13.07.13. The vulnerability occurs when the webCgi

An issue in TOTOLINK x18 v.9.1.0cu.2024_B20220329 allows a remote attacker to execute arbitrary code via the sub_410E54

Netwrix Password Secure through 9.2 allows command injection.

Netwrix Password Secure 9.2.0.32454 allows OS command injection.

insightsoftware Spark JDBC 2.6.21 has a remote code execution vulnerability. Attackers can inject malicious parameters i

A vulnerability was found in Project Worlds Online Lawyer Management System 1.0 and classified as critical. Affected by

A vulnerability has been found in Project Worlds Online Lawyer Management System 1.0 and classified as critical. Affecte

A vulnerability, which was classified as critical, was found in Project Worlds Online Lawyer Management System 1.0. Affe

The XWiki JIRA extension provides various integration points between XWiki and JIRA (macros, UI, CKEditor plugin). If th

Vite is a frontend tooling framework for javascript. The contents of arbitrary files can be returned to the browser. By

SeaCMS v13.3 has a SQL injection vulnerability in the component admin_tempvideo.php.

OpenEMR 7.0.2 is vulnerable to SQL Injection via \openemr\library\classes\Pharmacy.class.php, \controllers\C_Pharmacy.cl

A vulnerability, which was classified as critical, has been found in Project Worlds Online Lawyer Management System 1.0.

A vulnerability classified as critical was found in Project Worlds Online Lawyer Management System 1.0. This vulnerabili

A vulnerability classified as critical has been found in Project Worlds Online Lawyer Management System 1.0. This affect

Miniflux is a feed reader. Due to a weak Content Security Policy on the /proxy/* route, an attacker can bypass the CSP o

Element X Android is a Matrix Android Client provided by element.io. In Element X Android versions between 0.4.16 and 25

Element X iOS is a Matrix iOS Client provided by Element. In Element X iOS version between 1.6.13 and 25.03.7, the entit

A vulnerability was found in Projeqtor up to 12.0.2. It has been rated as critical. Affected by this issue is some unkno

A vulnerability was found in PHPGurukul Time Table Generator System 1.0. It has been declared as critical. Affected by t

A vulnerability, which was classified as problematic, has been found in Tenda AC23 16.03.07.52. This issue affects some

A vulnerability classified as critical was found in code-projects Product Management System 1.0. This vulnerability affe

In JetBrains IntelliJ IDEA before 2024.3, 2024.2.4 source code could be logged in the idea.log file

XZ Utils provide a general-purpose data-compression library plus command-line tools. In XZ Utils 5.3.3alpha to 5.8.0, th

API Platform Core is a system to create hypermedia-driven REST and GraphQL APIs. From 3.2.0 until 3.2.4, exception messa

A vulnerability classified as critical has been found in thu-pacman chitu 0.1.0. This affects the function torch.load of

A vulnerability was found in Tencent Music Entertainment SuperSonic up to 0.9.8. It has been rated as critical. Affected

A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been declared as critical. Affected by this vulnerabi