2025

On IROAD V9 devices, Managing Settings and Obtaining Sensitive Data and Sabotaging the Car Battery can be performed by u

A vulnerability classified as problematic has been found in Dromara ujcms 9.7.5. This affects the function update of the

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the component /mapper/xml/AddressD

Incorrect access control in the component /config/WebSecurityConfig.java of yimioa before v2024.07.04 allows unauthorize

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the listNameBySql() method at /xml

IBM QRadar Advisor 1.0.0 through 2.6.5 is vulnerable to server-side request forgery (SSRF). This may allow an authentica

TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the Orders Management System, allowing unauthor

TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the invoice() function within Orders.php which

On IROAD v9 devices, the dashcam has hardcoded default credentials ("qwertyuiop") that cannot be changed by the user. Th

A vulnerability was found in Dromara ujcms 9.7.5. It has been rated as problematic. Affected by this issue is the functi

NI Vision Builder AI VBAI File Processing Missing Warning Remote Code Execution Vulnerability. This vulnerability allows

NI FlexLogger usiReg URI File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows

An issue in CosmWasm prior to v2.2.0 allows attackers to bypass capability restrictions in blockchains by exploiting a l

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Vestel EVC04 Confi

An improper control of generation of code ('Code Injection') vulnerability [CWE-94] in FortiSOAR Connector FortiSOAR 7.4

An improper access control vulnerability in FortiMail version 7.4.0 configured with RADIUS authentication and remote_wil

Stored Cross-Site Scripting (XSS) in Softdial Contact Center of Sytel Ltd. This vulnerability allows an attacker to uplo

Unrestricted file upload to Softdial Contact Center of Sytel Ltd. This vulnerability could allow an attacker to upload f

Path Traversal vulnerability in Softdial Contact Center of Sytel Ltd. This vulnerability allows an attacker to manipulat

Insecure information storage vulnerability in NTFS Tools version 3.5.1. Exploitation of this vulnerability could allow a

An unauthenticated remote attacker can gain access to sensitive information including authentication information when us

Insufficient path validation in CODESYS Control allows low privileged attackers with physical access to gain full filesy

An unauthenticated remote attacker can gain limited information of the PLC network but the user management of the PLCs p

An unauthenticated remote attacker can gain access to the cloud API due to a lack of authentication for a critical funct

A local user may find a configuration file on the client workstation with unencrypted sensitive data. This allows an att

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in +F FS010M ver

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in +F FS010M ver

The various bson_append functions in the MongoDB C driver library may be susceptible to buffer overflow when performing

The The Logo Slider – Logo Showcase, Logo Carousel, Logo Gallery and Client Logo Presentation plugin for WordPress is vu

A vulnerability was found in PHPGurukul Company Visitor Management System 2.0 and classified as critical. Affected by th

A vulnerability has been found in PHPGurukul Apartment Visitors Management System 1.0 and classified as critical. Affect

A vulnerability, which was classified as critical, was found in PHPGurukul Boat Booking System 1.0. Affected is an unkno

A vulnerability classified as problematic was found in 猫宁i Morning up to bc782730c74ff080494f145cc363a0b4f43f7d3e. Affec

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDL

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDL

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDL

A vulnerability classified as critical has been found in code-projects Real Estate Property Management System 1.0. Affec

A vulnerability was found in China Mobile P22g-CIac, ZXWT-MIG-P4G4V, ZXWT-MIG-P8G8V, GT3200-4G4P and GT3200-8G8P up to 2

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDL

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDL

The Bare Metal Operator (BMO) implements a Kubernetes API for managing bare metal hosts in Metal3. Baremetal Operator en

containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.

A vulnerability was found in China Mobile P22g-CIac, ZXWT-MIG-P4G4V, ZXWT-MIG-P8G8V, GT3200-4G4P and GT3200-8G8P up to 2

A vulnerability, which was classified as critical, was found in code-projects Online Class and Exam Scheduling System 1.

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting (XSS) in /pages/class.p

A vulnerability, which was classified as critical, has been found in code-projects Online Class and Exam Scheduling Syst

A vulnerability classified as critical was found in code-projects Blood Bank Management System 1.0. This vulnerability a

SolarWinds Service Desk is affected by a broken access control vulnerability. The issue allows authenticated users to es

SQL injection vulnerability in Online Exam Mastering System v.1.0 allows a remote attacker to execute arbitrary code via

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.3, ma