2025

A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been rated as problematic

A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been declared as cri

On affected platforms running Arista EOS with BGP Link State configured, BGP peer flap can cause the BGP agent to leak m

On affected platforms running Arista EOS with 802.1X configured, certain conditions may occur where a dynamic ACL is rec

Maharashtra State Electricity Distribution Company Limited Mahavitran IOS Application 16.1 application till version 16.1

Wondershare filmora 9.2.11 is affected by Trojan Dll hijacking leading to privilege escalation.

A vulnerability has been found in vLLM AIBrix 0.2.0 and classified as problematic. Affected by this vulnerability is an

On affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been

On affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been

LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An addit

Cross-Site Scripting (XSS) vulnerability exists in the WPA/WAPI Passphrase field of the Wireless Security settings (2.4G

Improper request input validation in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center allows a us

A vulnerability, which was classified as critical, was found in PHPGurukul Restaurant Table Booking System 1.0. Affected

A vulnerability, which was classified as problematic, has been found in ZZCMS 2025. This issue affects some unknown proc

A vulnerability classified as critical has been found in hzmanyun Education and Training System 2.1.3. This affects the

A vulnerability was found in hzmanyun Education and Training System 2.1. It has been rated as critical. Affected by this

A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Content Security Management Appliance (

A security vulnerability was discovered in the local status page functionality of Cisco Meraki’s MX67 and MX68 security

An out-of-bounds write vulnerability exists in the ma_dr_flac__decode_samples__lpc functionality of Miniaudio miniaudio

An Uncontrolled Search Path Element vulnerability exists which could allow a malicious actor to perform DLL hijacking an

The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. ZI

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap is missing CSRF

Tuleap is an Open Source Suite to improve management of software developments and collaboration. In a standard usages of

Tuleap is an Open Source Suite to improve management of software developments and collaboration. The mass emailing featu

Pinecone is an experimental overlay routing protocol suite which is the foundation of the current P2P Matrix demos. The

Tuleap is an Open Source Suite to improve management of software developments and collaboration. The password to connect

An issue in xxyopen novel plus v.4.4.0 and before allows a remote attacker to execute arbitrary code via the PageControl

A Cross Site Scripting (XSS) vulnerability exists in TeamPasswordManager v12.162.284 and before that could allow a remot

Rack is a modular Ruby web server interface. The Rack::Sendfile middleware logs unsanitised header values from the X-Sen

t0mer BroadlinkManager v5.9.1 was discovered to contain an OS command injection vulnerability via the IP Address paramet

A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multipl

A Sudo privilege misconfiguration vulnerability in PocketBook InkPad Color 3 on Linux, ARM allows attackers to read file

A privilege escalation vulnerability in PocketBook InkPad Color 3 allows attackers to escalate to root privileges if the

Unauthenticated remote code execution vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to exec

Unauthenticated remote code execution vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to exec

Improper verification of the digital signature in ksojscore.dll in Kingsoft WPS Office in versions equal or less than 12

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wind Media E-Comme

Unauthenticated SQL injection vulnerability in Uniguest Tripleplay version 23.1+ allows remote attackers to execute arbi

Unauthenticated reflected cross-site scripting (XSS) vulnerability in Uniguest Tripleplay before 24.2.1 allows remote at

Malicious websites utilizing a server-side redirect to an internal error page could result in a spoofed website URL. Thi

Scanning certain QR codes that included text with a website URL could allow the URL to be opened without presenting the

Websites redirecting to a non-HTTP scheme URL could allow a website address to be spoofed for a malicious page. This vul

Memory safety bugs present in Firefox 135 and Thunderbird 135. Some of these bugs showed evidence of memory corruption a

When String.toUpperCase() caused a string to get longer it was possible for uninitialized memory to be incorporated into

Under certain circumstances, a user opt-in setting that Focus should require authentication before use could have been b

A select option could partially obscure the confirmation prompt shown before launching external apps. This could be used

Android apps can load web pages using the Custom Tabs feature. This feature supports a transition animation that could h

Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7. Some of these bugs

Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, and Thunderbird 128.7

jar: URLs retrieve local file content packaged in a ZIP archive. The null and everything after it was ignored when retri