2025

A vulnerability has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0 and classified as cri

A vulnerability, which was classified as critical, was found in SourceCodester Kortex Lite Advocate Office Management Sy

Improper Restriction of XML External Entity Reference vulnerability in Jalios JPlatform allows XML Injection.This issue

Improper Neutralization of Input During Web Page Generation Cross-site Scripting vulnerability in Jalios JPlatform 10 al

Horde IMP through 6.2.27, as used with Horde Application Framework through 5.2.23, allows XSS that leads to account take

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.emailReg function. Th

In Linksys E5600 V1.1.0.26, the \usr\share\lua\runtime.lua file contains a command injection vulnerability in the runtim

In Linksys E5600 V1.1.0.26, the \usr\share\lua\runtime.lua file contains a command injection vulnerability in the runtim

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the pt parameter in the traceRou

Insecure permissions in pipecd v0.49 allow attackers to gain access to the service account's token, leading to escalatio

Insecure permissions in kubeslice v1.3.1 allow attackers to gain access to the service account's token, leading to escal

Insecure permissions in kuadrant v0.11.3 allow attackers to gain access to the service account's token, leading to escal

LoxiLB v.0.9.7 and before is vulnerable to Incorrect Access Control which allows attackers to obtain sensitive informati

IBM Storage Virtualize vSphere Remote Plug-in 1.0 and 1.1 could allow a remote user to obtain sensitive credential infor

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS 6.4.1 and below, 6.2.9

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 7.5.2 a

Envoy is a cloud-native high-performance edge/middle/service proxy. Prior to 1.33.1, 1.32.4, 1.31.6, and 1.30.10, Envoy'

When the AWS Cloud Development Kit (AWS CDK) Command Line Interface (AWS CDK CLI) is used with a credential plugin which

A vulnerability has been found in FastCMS up to 0.1.5 and classified as critical. Affected by this vulnerability is an u

Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior to versions

Phpgurukul Vehicle Record Management System v1.0 is vulnerable to SQL Injection in /index.php via the 'searchinputdata'

Phpgurukul Human Metapneumovirus (HMPV) – Testing Management System v1.0 is vulnerable to SQL Injection in /patient-repo

libcontainer is a library for container control. Prior to libcontainer 0.5.3, while creating a tenant container, the ten

When installing Nessus Agent to a non-default location on a Windows host, Nessus Agent versions prior to 10.8.3 did not

An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to self sign an ODF document, with

A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. This issue

A vulnerability classified as problematic was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affect

Guangzhou Hongfan Technology Co., LTD. iOffice20 has any user login vulnerability. An attacker can log in to any system

A vulnerability was found in code-projects Human Resource Management System 1.0.1. It has been classified as problematic

A vulnerability was found in code-projects Human Resource Management System 1.0.1 and classified as critical. This issue

Reflected Cross-Site Scripting (XSS) in ITIUM 6050 version 5.5.5.2-b3526 from Impact Technologies. This vulnerability co

A vulnerability has been found in Hercules Augeas 1.14.1 and classified as problematic. This vulnerability affects the f

A vulnerability, which was classified as critical, was found in Jinher OA C6 1.0. This affects an unknown part of the fi

Mattermost versions 10.4.x <= 10.4.2, 10.3.x <= 10.3.3, 9.11.x <= 9.11.8 fail to enforce MFA on certain search APIs, whi

Mattermost versions 10.4.x <= 10.4.2, 10.3.x <= 10.3.3, 9.11.x <= 9.11.8 fail to fail to enforce channel conversion rest

Mattermost versions 9.11.x <= 9.11.8 fail to prompt for explicit approval before adding a team admin to a private channe

Mattermost versions 10.4.x <= 10.4.2, 10.3.x <= 10.3.3, 9.11.x <= 9.11.8 fail to restrict command execution in archived

Mattermost versions 10.4.x <= 10.4.2, 10.3.x <= 10.3.3, 9.11.x <= 9.11.8, 10.5.x <= 10.5.0 fail to enforce MFA on plugin

Mattermost versions 10.4.x <= 10.4.2, 10.3.x <= 10.3.3, 9.11.x <= 9.11.8, 10.5.x <= 10.5.0 fail to restrict bookmark cre

A vulnerability was found in WebAssembly wabt 1.0.36. It has been declared as critical. This vulnerability affects the f

encodeText in QDom in Qt before 6.8.0 has a complex algorithm involving XML string copy and inline replacement of parts

Varnish Enterprise before 6.0.13r13 allows remote attackers to obtain sensitive information via an out-of-bounds read fo

Varnish Cache before 7.6.2 and Varnish Enterprise before 6.0.13r10 allow client-side desync via HTTP/1 requests.

A vulnerability was found in SimpleMachines SMF 2.1.4. It has been classified as problematic. This affects an unknown pa

A vulnerability was found in SimpleMachines SMF 2.1.4 and classified as problematic. Affected by this issue is some unkn

A vulnerability was found in quickjs-ng QuickJS up to 0.8.0. It has been declared as problematic. Affected by this vulne

An issue was discovered in OpenSlides before 4.2.5. When creating new chats via the chat_group.create action, the user i

An issue was discovered in OpenSlides before 4.2.5. During login at the /system/auth/login/ endpoint, the system's respo

A directory traversal issue was discovered in OpenSlides before 4.2.5. Files can be uploaded to OpenSlides meetings and

An XSS issue was discovered in OpenSlides before 4.2.5. When submitting descriptions such as Moderator Notes or Agenda T