2025

A vulnerability, which was classified as critical, was found in PHPGurukul Bus Pass Management System 1.0. This affects

A vulnerability, which was classified as problematic, has been found in MindSpore 2.5.0. Affected by this issue is the f

UNIX symbolic link (Symlink) following issue exists in FutureNet NXR series, VXR series and WXR series routers. Attachin

A vulnerability classified as problematic was found in MindSpore 2.5.0. Affected by this vulnerability is the function m

A vulnerability classified as critical has been found in SourceCodester Apartment Visitor Management System 1.0. Affecte

A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been rated as critical. This

Issue that bypasses the "Mark of the Web" security warning function for files when opening a symbolic link that points t

The MapPress Maps for WordPress plugin before 2.94.9 does not sanitise and escape some parameters when outputing them in

A vulnerability was found in SourceCodester Online Medicine Ordering System 1.0. It has been declared as critical. This

A vulnerability was found in SourceCodester Online Medicine Ordering System 1.0. It has been classified as critical. Thi

A vulnerability was found in code-projects Bus Reservation System 1.0 and classified as critical. Affected by this issue

A vulnerability has been found in PHPGurukul Online Security Guards Hiring System 1.0 and classified as critical. Affect

A vulnerability, which was classified as critical, was found in PHPGurukul Online Security Guards Hiring System 1.0. Aff

A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0. This issue affects the function t

A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_ins

Yubico YubiKey 5.4.1 through 5.7.3 before 5.7.4 has an incorrect FIDO CTAP PIN/UV Auth Protocol Two implementation. It u

Concrete CMS version 9 below 9.4.0RC2 and versions below 8.5.20 are vulnerable to CSRF and XSS in the Concrete CMS Addre

A vulnerability classified as critical was found in fcba_zzm ics-park Smart Park Management System 2.1. This vulnerabili

A vulnerability classified as critical has been found in code-projects Payroll Management System 1.0. This affects an un

Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid VerticesPerRow value in a PDF shading dictio

A vulnerability, which was classified as critical, has been found in WonderCMS 3.5.0. Affected by this issue is the func

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Obfuscate a

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Access code allows Brute Force.This is

A vulnerability classified as problematic was found in WebAssembly wabt 1.0.36. Affected by this vulnerability is the fu

A vulnerability classified as problematic has been found in PyTorch 2.6.0. Affected is the function torch.jit.jit_module

A vulnerability was found in SourceCodester Apartment Visitors Management System 1.0. It has been rated as critical. Thi

A vulnerability was found in SourceCodester Online Tutor Portal 1.0. It has been declared as critical. This vulnerabilit

conda-forge infrastructure holds common configurations and settings for key pieces of the conda-forge infrastructure. Be

canonical/get-workflow-version-action is a GitHub composite action to get commit SHA that GitHub Actions reusable workfl

The Tauri shell plugin allows access to the system shell. Prior to 2.2.1, the Tauri shell plugin exposes functionality t

Next.js is a React framework for building full-stack web applications. To mitigate CVE-2025-29927, Next.js validated the

Arduino IDE 2.x is an IDE based on the Theia IDE framework and built with Electron. A Self Cross-Site Scripting (XSS) vu

HCL DevOps Deploy / HCL Launch could allow unauthorized access to other services or potential exposure of sensitive data

A vulnerability was found in SourceCodester Online Tutor Portal 1.0. It has been classified as critical. This affects an

Signalling in Pexip Infinity 29 through 36.2 before 37.0 has improper input validation that allows remote attackers to t

OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to trigger a denial of se

SourceCodester (rems) Employee Management System 1.0 is vulnerable to Cross Site Scripting (XSS) in add_employee.php via

SQL injection vulnerability in vipshop Saturn v.3.5.1 and before allows a remote attacker to execute arbitrary code via

An issue in BL-AC2100 V1.0.4 and before allows a remote attacker to execute arbitrary code via the enable parameter pass

An issue in BL-AC2100 <=V1.0.4 allows a remote attacker to execute arbitrary code via the time1 and time2 parameters in

OS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection vulnerability via the table parameter at /attendanc

OS4ED openSIS v7.0 through v9.1 contains a SQL injection vulnerability via the stu_id parameter at /modules/students/Stu

An issue in OS4ED openSIS v8.0 through v9.1 allows attackers to execute a directory traversal and delete files by sendin

Pexip Infinity Connect before 1.13.0 lacks sufficient authenticity checks during the loading of resources, and thus remo

Pexip Infinity before 35.0 has improper input validation that allows remote attackers to trigger a denial of service (so

An HTML injection vulnerability previously discovered in Trend Vision One could have allowed a malicious user to execute

A broken access control vulnerability previously discovered in the Trend Vision One Role Name component could have allow

A broken access control vulnerability previously discovered in the Trend Vision One Status component could have allowed

A broken access control vulnerability previously discovered in the Trend Vision One User Roles component could have allo

A broken access control vulnerability previously discovered in the Trend Vision One User Account component could have al