2025

The authentication mechanism in Perfex CRM before 3.3.1 allows attackers to bypass login credentials due to insufficient

Redis Enterprise Elevation of Privilege Vulnerability

Azure PlayFab Elevation of Privilege Vulnerability

Newforma Info Exchange (NIX) '/UserWeb/Common/UploadBlueimp.ashx' allows an authenticated attacker to upload an arbitrar

A vulnerability was found in code-projects E-Commerce Website 1.0. Impacted is an unknown function of the file /pages/us

A vulnerability has been found in projectworlds Gate Pass Management System 1.0. This issue affects some unknown process

A flaw has been found in code-projects Simple Leave Manager 1.0. This vulnerability affects unknown code of the file /us

A vulnerability was detected in Campcodes Online Learning Management System 1.0. This affects an unknown part of the fil

New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. An authenticate

BigBlueButton is an open-source virtual classroom. In versions prior to 3.0.13, the "Shared Notes" feature contains a St

An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® softwar

An infinite loop issue in Amazon.IonDotnet library versions <v1.3.2 may allow a threat actor to cause a denial of servic

An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Ne

A vulnerability has been found in Tenda W12 3.0.0.6(3948). The affected element is the function wifiMacFilterSet of the

In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local Fil

D-Link DIR-816A2_FWv1.10CNB05 was discovered to contain a stack overflow via the statuscheckpppoeuser parameter in the d

An Uncontrolled Resource Consumption vulnerability in the HTTP daemon (httpd) of Juniper Networks Junos Space allows an

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Junos Space Sec

A Missing Authorization vulnerability in the Juniper Networks Junos Space Security Director allows an unauthenticated ne

A Use of Uninitialized Resource vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on SRX4

A Missing Authentication for Critical Function vulnerability in Juniper Networks Security Director Policy Enforcer allow

Lavasoft Web Companion (also known as Ad-Aware WebCompanion) versions 8.9.0.1091 through 12.1.3.1037 installs the DCISer

Use of an insecure temporary directory in the Windows License plugin for the Checkmk Windows Agent allows Privilege Esca

Apache Flink CDC version 3.4.0 was vulnerable to a SQL injection via maliciously crafted identifiers eg. crafted databas

A flaw was found in the integration of Active Directory and the System Security Services Daemon (SSSD) on Linux systems.

In the Linux kernel, the following vulnerability has been resolved: io_uring: fix incorrect io_kiocb reference in io_li

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix untrusted unsigned subtract Fix the fol

In the Linux kernel, the following vulnerability has been resolved: iommu/amd/pgtbl: Fix possible race while increase p

In the Linux kernel, the following vulnerability has been resolved: gpiolib: acpi: initialize acpi_gpio_info struct Si

A vulnerability exists in the Progress Flowmon web application prior to version 12.5.5, whereby a user who clicks a mali

In Flowmon versions prior to 12.5.5, a vulnerability has been identified that allows a user with administrator privilege

GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 to 18.3.4, 18.4 to 18.4.2 that, under certa

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.12 to 18.2.8, 18.3 to 18.3.4, and 18.4 to

In the Linux kernel, the following vulnerability has been resolved: iommu/s390: Make attach succeed when the device was

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: increase scan_ies_len for S1G Curr

In the Linux kernel, the following vulnerability has been resolved: igc: don't fail igc_probe() on LED setup error Whe

In the Linux kernel, the following vulnerability has been resolved: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconne

The Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers plugin for WordPr

The Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme plugin for WordPress is vulnerable

Memory corruption while invoking remote procedure IOCTL calls.

Memory corruption while allocating buffers in DSP service.

Memory corruption while processing user buffers.

Memory corruption while processing an escape call.

Memory corruption while processing control commands in the virtual memory management interface.

Transient DOS may occur when multi-profile concurrency arises with QHS enabled.

memory corruption while processing an image encoding completion event.

Memory corruption while processing IOCTL call to get the mapping.

Memory corruption while processing escape commands from userspace.

Memory corruption while performing SCM call with malformed inputs.

Memory corruption while performing SCM call.