2025

A malicious actor can access camera configuration information, including account credentials, without authenticating whe

Jenkins Redpen - Pipeline Reporter for Jira Plugin 1.054.v7b_9517b_6b_202 and earlier does not correctly perform path va

Jenkins HashiCorp Vault Plugin 371.v884a_4dd60fb_6 and earlier does not set the appropriate context for Vault credential

Jenkins Coverage Plugin 2.3054.ve1ff7b_a_a_123b_ and earlier does not validate the configured coverage results ID when c

Jenkins Git client Plugin 6.4.0 and earlier does not not correctly escape the path to the workspace directory as part of

A cross-site request forgery (CSRF) vulnerability in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers

Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not mask build authorization tokens displayed on the job configu

Jenkins 2.540 and earlier, LTS 2.528.2 and earlier stores build authorization tokens unencrypted in job config.xml files

A missing permission check in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers with View/Read permiss

Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the connectio

A lack of security checks in the file import process of AB TECHNOLOGY Document Reader: PDF, DOC, PPT v65.0 allows attack

A lack of security checks in the file import process of RHOPHI Analytics LLP Office App-Edit Word v6.4.1 allows attacker

DataGear v5.5.0 is vulnerable to Arbitrary File Deletion.

PagerDuty Runbook through 2025-06-12 exposes stored secrets directly in the webpage DOM at the configuration page. Altho

An issue in sd command v1.0.0 and before allows attackers to escalate privileges to root via a crafted command.

An integer overflow in the psdParser::ReadImageData function of FreeImage v3.18.0 and before allows attackers to cause a

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code exe

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code exe

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code exe

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code exe

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code exe

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code exe

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code exe

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code exe

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code exe

1Panel versions 1.10.33 - 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the Change Username functi

Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting ser

Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting ser

Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not correctly verify t

Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not verify the URL def

An improper permissions vulnerability was reported in Lenovo Baiying Client that could allow a local authenticated user

A potential DLL hijacking vulnerability was reported in Lenovo One Client during an internal security assessment that co

Authorization Bypass Through User-Controlled Key vulnerability in Im Park Information Technology, Electronics, Press, Pu

A DLL hijacking vulnerability was reported in the Lenovo App Store and Lenovo Browser applications that could allow a lo

Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code.

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in TAC Informa

Unauthenticated Telnet enablement via cstecgi.cgi (auth bypass) leading to unauthenticated root login with a blank passw

An unauthorised attacker within bluetooth range may use an improper validation during the BLE connection request to dead

Due to improper BLE security configurations on the device's GATT server, an adjacent unauthenticated attacker can read a

Direct Object Reference Vulnerability (IDOR) in i2A's CronosWeb, in versions prior to 25.00.00.12, inclusive. This vulne

Bypass vulnerability in the authentication method in the GTT Tax Information System application, related to the Active D

An unauthenticated remote attacker can abuse unsafe sscanf calls within the check_cookie() function to write arbitrary d

An unauthenticated remote attacker can abuse unsafe sscanf calls within the check_account() function to write arbitrary

A local privilege escalation vulnerability in Bitdefender Total Security versions prior to 27.0.47.241 allows low-privil

Denial of Service vulnerability in Apache Struts, file leak in multipart request processing causes disk exhaustion. Thi

The Video Merchant plugin for WordPress is vulnerable to Cross-Site Request Forgery in version <= 5.0.4. This is due to

An unauthenticated device registration vulnerability, caused by Improperly Controlled Modification of Dynamically-Determ

A Path Traversal vulnerability in usbmuxd allows local users to escalate to the service user.This issue affects usbmuxd:

Incorrect Use of Privileged APIs vulnerability in NomySoft Information Technology Training and Consulting Inc. Nomysem a

A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a