2025

A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014.

A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014.

A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014 a

A vulnerability has been found in H3C Magic NX30 Pro and Magic NX400 up to V100R014 and classified as critical. This vul

A vulnerability, which was classified as critical, was found in H3C Magic NX30 Pro up to V100R007. This affects an unkno

A vulnerability, which was classified as critical, has been found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic

A vulnerability classified as critical was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic B

A vulnerability, which was classified as critical, has been found in D-Link DIR-823X 240126/240802. This issue affects t

A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-url` Ingr

A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where attacker-provided d

A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to

A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `mirror-target`

A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-tls-match

A vulnerability classified as problematic was found in China Mobile P22g-CIac 1.0.00.488. This vulnerability affects unk

A vulnerability classified as problematic has been found in timschofield webERP up to 5.0.0.rc+13. This affects an unkno

A vulnerability was found in JoomlaUX JUX Real Estate 3.4.0. It has been rated as problematic. Affected by this issue is

A vulnerability was found in Yonyou UFIDA ERP-NC 5.0. It has been declared as problematic. Affected by this vulnerabilit

SnapCenter versions prior to 6.0.1P1 and 6.1P1 are susceptible to a vulnerability which may allow an authenticated Sna

A vulnerability was found in Yonyou UFIDA ERP-NC 5.0. It has been classified as problematic. Affected is an unknown func

A vulnerability was found in Yonyou UFIDA ERP-NC 5.0 and classified as problematic. This issue affects some unknown proc

An issue in the Shiro-based RBAC (Role-based Access Control) mechanism of OpenDaylight Service Function Chaining (SFC) S

Insecure Shiro cookie configurations in OpenDaylight Service Function Chaining (SFC) Subproject SFC Sodium-SR4 and below

Use of incorrectly resolved name or reference in OpenDaylight Service Function Chaining (SFC) Subproject SFC Sodium-SR4

An issue in onos v2.7.0 allows attackers to trigger unexpected behavior within a device connected to a legacy switch via

Limited secret space in LLDP packets used in onos v2.7.0 allows attackers to obtain the private key via a bruteforce att

An issue in onos v2.7.0 allows attackers to trigger a packet deserialization problem when supplying a crafted LLDP packe

A stack-based buffer overflow vulnerability in Tenda AC7 V15.03.06.44 allows a remote attacker to execute arbitrary code

Tenda AC8 V16.03.34.06 is vulnerable to Buffer Overflow in the fromSetRouteStatic function via the parameter list.

A vulnerability has been found in Yonyou UFIDA ERP-NC 5.0 and classified as problematic. This vulnerability affects unkn

A vulnerability, which was classified as critical, was found in zhijiantianya ruoyi-vue-pro 2.4.1. This affects an unkno

PDF-XChange Editor RTF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows re

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Node based network policies (

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. For Cilium users who use Gate

An authenticated remote code execution in Kentico Xperience allows authenticated users Staging Sync Server to upload arb

The Kentico Xperience application does not fully validate or filter files uploaded via the multiple-file upload function

An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server com

An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server pas

A vulnerability, which was classified as critical, has been found in zhijiantianya ruoyi-vue-pro 2.4.1. Affected by this

A vulnerability classified as critical was found in Digiwin ERP 5.0.1. Affected by this vulnerability is an unknown func

Spring Security 6.4.0 - 6.4.3 may not correctly locate method security annotations on parameterized types or methods. Th

Vite, a provider of frontend development tooling, has a vulnerability in versions prior to 6.2.3, 6.1.2, 6.0.12, 5.4.15,

kanidim-provision is a helper utility that uses kanidm's API to provision users, groups and oauth2 systems. Prior to ver

On 70mai Dash Cam 1S devices, by connecting directly to the dashcam's network and accessing the API on port 80 and RTSP

Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to version 1.14.0-alpha.1, Kyvern

HCL DevOps Deploy / HCL Launch could allow a remote privileged authenticated attacker to execute arbitrary commands on t

A vulnerability classified as critical has been found in Digiwin ERP 5.1. Affected is the function DoUpload/DoWebUpload

API Platform Core is a system to create hypermedia-driven REST and GraphQL APIs. Starting in version 3.3.8, a security c

HCL DevOps Deploy / HCL Launch could allow an authenticated user to obtain sensitive information about other users on th

Improper Neutralization of Script in Attributes in a Web Page vulnerability in Forcepoint Email Security (Blocked Messag

A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0