2025

Improper link resolution before file access in the Nomad module of the 1E Client, in versions prior to 25.3, enables an

Unquoted Search Path or Element vulnerability in OpenText™ Service Manager.  The vulnerability could allow a user to ga

Improper Neutralization of Script in an Error Message Web Page vulnerability in OpenText™ Service Manager.  The vulnera

CWE-287: Improper Authentication vulnerability exists that could cause an Authentication Bypass when an unauthorized use

A flaw was found in Smallrye, where smallrye-fault-tolerance is vulnerable to an out-of-memory (OOM) issue. This vulnera

Bypass/Injection vulnerability in Apache Camel. This issue affects Apache Camel: from 4.10.0 before 4.10.2, from 4.8.0

An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1. A stored cross-site scripting (XSS) vulnera

An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1. A Reflected Cross-Site Scripting (XSS) vuln

GetLateOrMissingIssues in C4/Serials.pm in Koha before 24.11.02 allows SQL Injection in /serials/lateissues-export.pl vi

XPixelGroup BasicSR through 1.4.2 might locally allow code execution in contrived situations where "scontrol show hostna

Flarum is open-source forum software. A session hijacking vulnerability exists in versions prior to 1.8.10 when an attac

JSON is a JSON implementation for Ruby. Starting in version 2.10.0 and prior to version 2.10.2, a specially crafted docu

An issue in dtp.ae tNexus Airport View v.2.8 allows a remote attacker to escalate privileges via the addUser and updateU

An Improper Isolation or Compartmentalization vulnerability in the kernel of Juniper Networks Junos OS allows a local at

IBM App Connect Enterprise Certified Container 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11

In JetBrains Ktor before 3.1.1 an HTTP Request Smuggling was possible

In JetBrains Runtime before 21.0.6b872.80 arbitrary dynamic library execution due to insecure macOS flags was possible

An integer underflow during deserialization may allow any unauthenticated user to read out of bounds heap memory. This m

The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) pl

Bitdefender Box, versions 1.3.11.490 through 1.3.11.505, uses the insecure HTTP protocol to download assets over the Int

A command injection vulnerability exists in the /check_image_and_trigger_recovery API endpoint of Bitdefender Box 1 (fir

An improper access control vulnerability exists in Bitdefender Box 1 (firmware version 1.3.52.928 and below) that allows

Generation of Error Message Containing Sensitive Information vulnerability in Hillstone Networks Hillstone Next Generati

In the Linux kernel, the following vulnerability has been resolved: powerpc/code-patching: Fix KASAN hit by not flaggin

In the Linux kernel, the following vulnerability has been resolved: gtp: Suppress list corruption splat in gtp_net_exit

In the Linux kernel, the following vulnerability has been resolved: tcp: drop secpath at the same time as we currently

In the Linux kernel, the following vulnerability has been resolved: io_uring: prevent opcode speculation sqe->opcode i

In the Linux kernel, the following vulnerability has been resolved: drop_monitor: fix incorrect initialization order S

In the Linux kernel, the following vulnerability has been resolved: mm/migrate_device: don't add folio to be freed to L

In the Linux kernel, the following vulnerability has been resolved: mm/zswap: fix inconsistency when zswap_store_page()

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: f_midi: f_midi_complete to call queue_

In the Linux kernel, the following vulnerability has been resolved: geneve: Fix use-after-free in geneve_find_dev(). s

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: fix error handling causing NULL

In the Linux kernel, the following vulnerability has been resolved: s390/ism: add release function for struct device A

In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Don't reference skb after sending to VIOS

In the Linux kernel, the following vulnerability has been resolved: sockmap, vsock: For connectible sockets allow only

In the Linux kernel, the following vulnerability has been resolved: bpf: avoid holding freeze_mutex during mmap operati

In the Linux kernel, the following vulnerability has been resolved: net: Add rx_skb of kfree_skb to raw_tp_null_args[].

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix softlockup in arena_map_free on 64k page k

In the Linux kernel, the following vulnerability has been resolved: nvmet: Fix crash when a namespace is disabled The

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Use spin_lock_irqsave() in interruptib

In the Linux kernel, the following vulnerability has been resolved: nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() A

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: stream-ipc: Check for cstream nullity in

In the Linux kernel, the following vulnerability has been resolved: acct: perform last write from workqueue In [1] it

In the Linux kernel, the following vulnerability has been resolved: mtd: spi-nor: sst: Fix SST write failure 'commit 1

In the Linux kernel, the following vulnerability has been resolved: smb: client: Add check for next_buffer in receive_e

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double accounting race when btrfs_run_de

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix deadlock when freeing cgroup storage The

The Workreap plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and

The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Information Exposure i