2025

The Automation Scripting functionality can be exploited by attackers to run arbitrary system commands on the underlying

Saved search functionality contains a blind SQL injection that can be exploited by authenticated attackers. Using a time

Document history functionality contains a blind SQL injection that can be exploited by authenticated attackers. Using a

Login functionality contains a blind SQL injection that can be exploited by unauthenticated attackers. Using a time-base

File Upload vulnerability in nestjs nest v.10.3.2 allows a remote attacker to execute arbitrary code via the Content-Typ

Logout functionality contains a blind SQL injection that can be exploited by unauthenticated attackers. Using a time-bas

There is a reflected cross-site scripting (XSS) within JSP files used to control application appearance. An unauthentica

The API used to interact with documents in the application contains a flaw that allows an authenticated attacker to read

xml-crypto is an XML digital signature and encryption library for Node.js. An attacker may be able to exploit a vulnerab

In Tenda AC9 v1.0 V15.03.05.14_multi, the wanSpeed parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerabili

In Tenda AC9 v1.0 V15.03.05.14_multi, the mac parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, w

In Tenda AC9 v1.0 V15.03.05.14_multi, the cloneType parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerabil

In Tenda AC9 v1.0 V15.03.05.14_multi, the wanMTU parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability

Element Android is an Android Matrix Client provided by Element. Element Android up to version 1.6.32 can, under certain

The Leica Web Viewer within the Aperio Eslide Manager Application is vulnerable to reflected cross-site scripting (XSS).

An improper handling of syntactically invalid structure in Fortinet FortiWeb at least vesrions 7.4.0 through 7.4.6 and 7

Cross Site Request Forgery vulnerability in Open Panel OpenAdmin v.0.3.4 allows a remote attacker to escalate privileges

An issue in Open Panel v.0.3.4 allows a remote attacker to escalate privileges via the Fix Permissions function

An issue in Open Panel v.0.3.4 allows a remote attacker to escalate privileges via the Fix Permissions function

An insertion of sensitive information into log file vulnerabilities [CWE-532] in FortiManager version 7.4.0, version 7.2

An improper certificate validation vulnerability [CWE-295] in FortiNAC-F version 7.2.4 and below may allow a remote and

An external control of file name or path vulnerability [CWE-73] in FortiClientMac version 7.2.3 and below, version 7.0.

A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiNAC 7.2.1 and ear

An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] in FortiW

An improper validation of integrity check value vulnerability [CWE-354] in FortiNDR version 7.4.2 and below, version 7.2

A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiManager versions

IBM Security QRadar 3.12 EDR uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt

IBM Security QRadar 3.12 EDR stores user credentials in plain text which can be read by a local privileged user.

An improper certificate validation vulnerability [CWE-295] in FortiPortal version 7.4.0, version 7.2.4 and below, versio

In the Linux kernel, the following vulnerability has been resolved: netfilter: allow exp not to be removed in nf_ct_fin

The HP LaserJet MFP M232-M237 Printer Series may be vulnerable to a denial of service attack when a specially crafted re

Azle is a WebAssembly runtime for TypeScript and JavaScript on ICP. Calling `setTimer` in Azle versions `0.27.0`, `0.28.

Tenda AC9 v15.03.05.19(6318) was discovered to contain a buffer overflow via the formWifiWpsOOB function.

Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the fromAddressNat function.

Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formWifiWpsOOB function.

Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formSetSpeedWan function.

A Privilege Escalation through a Mass Assignment exists in Camaleon CMS When a user wishes to change his password, the

A maliciously crafted QPY file can potential execute arbitrary-code embedded in the payload without privilege escalation

The device uses a weak hashing alghorithm to create the password hash. Hence, a matching password can be easily calculat

The device uses an unencrypted, proprietary protocol for communication. Through this protocol, configuration data is tra

The product can be used to distribute malicious code using SDD Device Drivers due to missing download verification check

The GLPI Inventory Plugin handles various types of tasks for GLPI agents for the GLPI asset and IT management software p

The Realteo - Real Estate Plugin by Purethemes plugin for WordPress, used by the Findeo Theme, is vulnerable to authenti

The Civi - Job Board & Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to Sensitive Information

The Civi - Job Board & Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to authentication bypass

The Civi - Job Board & Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to authentication bypass

The JobCareer | Job Board Responsive WordPress Theme theme for WordPress is vulnerable to unauthorized access, modificat

An improper neutralization of input during web page Generation vulnerability [CWE-79] in FortiOS version 7.4.3 and below

The ShareThis Dashboard for Google Analytics plugin for WordPress is vulnerable to unauthorized modification of data due

A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XM