2025

An code execution vulnerability exists in the Xiaomi smarthome application product. The vulnerability is caused by impro

Synapse is an open source Matrix homeserver implementation. A malicious server can craft events which, when received, pr

In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and 9.1.8, and versions below 3.8.38 and 3.7.23 of the Splunk S

Local privilege escalation due to a binary hijacking vulnerability. The following products are affected: Acronis Cyber P

Silicon Labs Gecko OS DNS Response Processing Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows n

Silicon Labs Gecko OS HTTP Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulner

In the Splunk App for Lookup File Editing versions below 4.0.5, a script in the app used the `chmod` and `makedirs` Pyth

In Splunk Enterprise versions below 9.3.3, 9.2.5, and 9.1.8 and Splunk Cloud Platform versions below 9.3.2408.103, 9.2.2

In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and 9.1.8, and versions below 3.8.38 and 3.7.23 of the Splunk S

In Splunk Enterprise versions below 9.3.3, 9.2.5, and 9.1.8, and Splunk Cloud Platform versions below 9.3.2408.104, 9.2

In Splunk Enterprise versions below 9.3.3, 9.2.5, and 9.1.8 and Splunk Cloud Platform versions below 9.2.2403.108, and 9

In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and 9.1.8, and Splunk Cloud Platform versions below 9.3.2408.10

In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and 9.1.8 and Splunk Cloud Platform versions below 9.3.2408.107

atop through 2.11.0 allows local users to cause a denial of service (e.g., assertion failure and application exit) or po

KNIME Business Hub is affected by the Ingress-nginx CVE-2025-1974 ( a.k.a IngressNightmare ) vulnerability which affects

An issue was discovered in Appsmith before 1.51. Users invited as "App Viewer" incorrectly have access to development in

An issue was discovered in OPC cardsystems Webapp Aufwertung 2.1.0. The reference assigned to transactions can be reused

Unauthorized stack overflow vulnerability in Telesquare TLR-2005KSH v.1.1.4 allows a remote attacker to obtain sensitive

Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability when requesting the admin.cgi parameter wi

Telesquare TLR-2005KSH 1.1.4 allows unauthorized password modification when requesting the admin.cgi parameter with setU

Telesquare TLR-2005KSH 1.1.4 has an Information Disclosure vulnerability when requesting systemutilit.cgi.

In Telesquare TLR-2005KSH 1.1.4, an unauthorized stack overflow vulnerability exists when requesting admin.cgi parameter

Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability in the login interface when requesting sys

Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability when requesting the admin.cgi parameter wi

Telesquare TLR-2005KSH 1.1.4 is vulnerable to unauthorized stack overflow vulnerability when requesting admin.cgi parame

An issue was discovered in Appsmith before 1.52. An incorrectly configured PostgreSQL instance in the Appsmith image lea

An issue was discovered in Appsmith before 1.51. A user on Appsmith that doesn't have admin permissions can trigger the

A cross-site scripting (XSS) vulnerability in ScriptCase before v1.0.003 - Build 3 allows attackers to execute arbitrary

Telesquare TLR-2005KSH 1.1.4 is vulnerable to unauthorized stack buffer overflow vulnerability when requesting admin.cgi

Telesquare TLR-2005KSH 1.1.4 is affected by an unauthorized command execution vulnerability when requesting the admin.cg

Telesquare TLR-2005KSH 1.1.4 is affected by an unauthorized stack overflow vulnerability when requesting the admin.cgi p

Telesquare TLR-2005KSH 1.1.4 is vulnerable to Information Disclosure via the parameter getUserNamePassword.

HTTP Response Manipulation in SCRIPT CASE v.1.0.002 Build7 allows a remote attacker to escalate privileges via a crafted

Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.12.0 and prior to

Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.0.0-alpha.4 and p

Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 10.10.0 and prior t

Improper authorization in the variable component in Devolutions Remote Desktop Manager on Windows allows an authenticate

Insufficient logging in the autotyping feature in Devolutions Remote Desktop Manager on Windows allows an authenticated

Improper authorization in application password policy in Devolutions Remote Desktop Manager on Windows allows an authent

Client side access control bypass in the permission component in Devolutions Remote Desktop Manager on Windows. An auth

An issue in Arris NVG443B 9.3.0h3d36 allows a physically proximate attacker to execute arbitrary code via the cshell log

Directus is a real-time API and App dashboard for managing SQL database content. The `@directus/storage-driver-s3` packa

Directus is a real-time API and App dashboard for managing SQL database content. The `@directus/storage-driver-s3` packa

Frappe is a full-stack web application framework. Prior to versions 14.93.2 and 15.55.0, a SQL Injection vulnerability h

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versio

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versio

Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allow

Fast CAD Reader application on MacOS was found to be installed with incorrect file permissions (rwxrwxrwx). This is inco

Icinga Reporting is the central component for reporting related functionality in the monitoring web frontend and framewo

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versio