2025

Jooby is a web framework for Java and Kotlin. The pac4j io.jooby.internal.pac4j.SessionStoreImpl#get module deserializes

gifplayer is a customizable jquery plugin to play and stop animated gifs. gifplayer contains a cross-site scripting (XSS

Netty QUIC codec is a QUIC codec for netty which makes use of quiche. An issue was discovered in the codec. A hash colli

A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been declared as critical. This vulnerabil

A vulnerability was found in Sayski ForestBlog up to 20250321 and classified as problematic. Affected by this issue is s

A vulnerability has been found in Sayski ForestBlog up to 20250321 and classified as problematic. Affected by this vulne

A vulnerability, which was classified as critical, was found in ESAFENET CDG 3. Affected is an unknown function of the f

Vite is a frontend tooling framework for javascript. Vite exposes content of non-allowed files using ?inline&import or ?

scratch-coding-hut.github.io is the website for Coding Hut. In 1.0-beta3 and earlier, the login link can be used to logi

OpenEMR is a free and open source electronic health records and medical practice management application. An Out-of-Band

Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessment framework capable of perfor

Zulip is an open-source team collaboration tool. The API for deleting an organization custom profile field is supposed t

Zulip is an open-source team collaboration tool. The API for deleting an organization export is supposed to be restricte

Beego is an open-source web framework for the Go programming language. Prior to 2.3.6, a Cross-Site Scripting (XSS) vuln

Xorcom CompletePBX is vulnerable to a reflected cross-site scripting (XSS) in the administrative control panel. This

Xorcom CompletePBX is vulnerable to a path traversal via the Diagnostics reporting module, which will allow reading of a

Xorcom CompletePBX is vulnerable to command injection in the administrator Task Scheduler functionality, allowing for at

An unsafe reflection vulnerability in Kentico Xperience allows an unauthenticated attacker to kill the current process,

Xorcom CompletePBX is vulnerable to an authenticated path traversal, allowing for arbitrary file reads via the Backup an

After completing a build with AWS Serverless Application Model Command Line Interface (SAM CLI) which include symlinks,

When running the AWS Serverless Application Model Command Line Interface (SAM CLI) build process with Docker and symlink

A vulnerability, which was classified as critical, has been found in Digital China DCME-520 up to 20250320. This issue a

A vulnerability classified as critical was found in PyTorch 2.6.0. This vulnerability affects the function torch.lstm_ce

Tuleap is an Open Source Suite to improve management of software developments and collaboration. An attacker can access

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap allows cross-sit

OpenEMR is a free and open source electronic health records and medical practice management application. A stored XSS vu

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap does not enforce

OpenEMR is a free and open source electronic health records and medical practice management application. OpenEMR allows

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap is missing CSRF

OpenEMR is a free and open source electronic health records and medical practice management application. The POST parame

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap has missing CSRF

Zulip server provides an open-source team chat that helps teams stay productive and focused. Prior to 10.0, the data exp

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.8.0 and 3.1

A vulnerability exists in the Rockwell Automation Verve Asset Manager due to insufficient variable sanitizing. A portion

A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function torch.jit.script. The

VyOS 1.3 through 1.5 (fixed in 1.4.2) or any Debian-based system using dropbear in combination with live-build has the s

A vulnerability was found in PyTorch 2.6.0. It has been rated as critical. Affected by this issue is the function torch.

A command injection vulnerability in the web interface of Adtran 411 ONT L80.00.0011.M2 allows attackers to escalate pri

Incorrect access control in Adtran 411 ONT L80.00.0011.M2 allows unauthorized attackers to arbitrarily set the admin pas

A command injection vulnerability in the telnet service of Adtran 411 ONT L80.00.0011.M2 allows attackers to escalate pr

Adtran 411 ONT L80.00.0011.M2 was discovered to contain weak default passwords.

An issue in Adtran 411 ONT vL80.00.0011.M2 allows attackers to escalate privileges via unspecified vectors.

A buffer copy without checking size of input ('classic buffer overflow') in Fortinet FortiMail webmail and administrati

A vulnerability was found in PyTorch 2.6.0. It has been declared as critical. Affected by this vulnerability is the func

A vulnerability was found in zhangyanbo2007 youkefu 4.2.0. It has been classified as critical. Affected is an unknown fu

Coverity versions prior to 2024.9.0 are vulnerable to stored cross-site scripting (XSS) in various administrative interf

Running DDoS on tcp port 22 will trigger a kernel crash. This issue is introduced by the backport of a commit regarding

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jacob Allred Infus

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Medi

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ramanparashar Usei