2025

There is a stored Cross-site Scripting vulnerability in ArcGIS Server for versions 11.3 and below that may allow a remot

There is a stored Cross-site Scripting vulnerability in ArcGIS Server for versions 11.3 and below that may allow a remot

There is an improper access control issue in ArcGIS Server versions 11.3 and below on Windows and Linux which, under uni

There is a stored Cross-site Scripting vulnerability in ArcGIS Server for versions 11.3 and below that may allow a remot

There is a stored Cross-site Scripting vulnerability in ArcGIS Server for versions 11.3 and below that may allow a remot

There is a stored Cross-site Scripting vulnerability in ArcGIS Server for versions 11.3 and below that may allow a remot

There is a stored Cross-site Scripting vulnerability in ArcGIS Server for versions 11.3 and below that may allow a remot

There is a stored Cross-site Scripting vulnerability in ArcGIS Server for versions 11.3 and below that may allow a remot

There is a stored Cross-site Scripting vulnerability in ArcGIS Server for versions 11.3 and below that may allow a remot

There is a stored Cross-site Scripting vulnerability in ArcGIS Server for versions 11.3 and below that may allow a remot

There is a stored Cross-site Scripting vulnerability in ArcGIS Server for versions 11.3 and below that may allow a remot

There is a stored Cross-site Scripting vulnerability in ArcGIS Server for versions 11.3 and below that may allow a remot

There is a stored Cross-site Scripting vulnerability in ArcGIS Server for versions 11.3 and below that may allow a remot

There is a stored Cross-site Scripting vulnerability in ArcGIS Server for versions 11.3 and below that may allow a remot

There is a stored Cross-site Scripting vulnerability in ArcGIS Server for versions 11.3 and below that may allow a remot

OpenZiti is a free and open source project focused on bringing zero trust to any application. An endpoint on the admin p

OpenZiti is a free and open source project focused on bringing zero trust to any application. An endpoint(/api/upload) o

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Stored Cross-Site Scri

Cross Site Request Forgery vulnerability in sell done storefront v.1.0 allows a remote attacker to escalate privileges v

Acora CMS version 10.1.1 is vulnerable to Cross-Site Request Forgery (CSRF). This flaw enables attackers to trick authen

Reprise License Manager 14.2 is vulnerable to reflected cross-site scripting in /goform/activate_process via the akey pa

picklescan before 0.0.22 only considers standard pickle file extensions in the scope for its vulnerability scan. An atta

A vulnerability has been found in i-Drive i11 and i12 up to 20250227 and classified as problematic. This vulnerability a

A vulnerability, which was classified as critical, was found in D-Link DAP-1562 1.10. This affects the function pure_aut

HCL SX is vulnerable to cross-site request forgery vulnerability which could allow an attacker to execute malicious and

In certain IETF OAuth 2.0-related specifications, when the JSON Web Token Profile for OAuth 2.0 Client Authentication me

OpenID Connect Core through 1.0 errata set 2 allows audience injection in certain situations. When the private_key_jwt a

A flaw was found in grub2. When performing a symlink lookup from a romfs filesystem, grub's romfs filesystem module uses

A flaw was found in grub2. When reading data from a jfs filesystem, grub's jfs filesystem module uses user-controlled pa

A flaw was found in grub2. When performing a symlink lookup from a reiserfs filesystem, grub's reiserfs fs module uses u

A DOM Clobbering vulnerability in tsup v8.3.4 allows attackers to execute arbitrary code via a crafted script in the imp

Cross Site Scripting vulnerability in seajs v.2.2.3 allows a remote attacker to execute arbitrary code via the seajs pac

Directory Traversal (Local File Inclusion) vulnerability in Tikit (now Advanced) eMarketing platform 6.8.3.0 allows a re

aes-gcm is a pure Rust implementation of the AES-GCM. In decrypt_in_place_detached, the decrypted ciphertext (which is t

Vim is an open source, command line text editor. Vim is distributed with the tar.vim plugin, that allows easy editing an

FACTION is a PenTesting Report Generation and Collaboration Framework. Authentication is bypassed when an attacker regis

Abacus is a highly scalable and stateless counting API. A critical goroutine leak vulnerability has been identified in t

The MouseTooltipTranslator Chrome extension allows mouseover translation of any language at once. The MouseTooltipTransl

Rembg is a tool to remove images background. In Rembg 2.0.57 and earlier, the CORS middleware is setup incorrectly. All

Rembg is a tool to remove images background. In Rembg 2.0.57 and earlier, the /api/remove endpoint takes a URL query par

A vulnerability, which was classified as critical, has been found in D-Link DAP-1562 1.10. Affected by this issue is the

A flaw was found in grub2. When reading data from a squash4 filesystem, grub's squash4 fs module uses user-controlled pa

Various Paragon Software products contain an insecure kernel resource access vulnerability facilitated by the driver not

Various Paragon Software products contain an arbitrary kernel memory vulnerability within biontdrv.sys, facilitated by t

Various Paragon Software products contain a null pointer dereference vulnerability within biontdrv.sys that is caused by

Various Paragon Software products contain an arbitrary kernel memory write vulnerability within biontdrv.sys that is cau

Various Paragon Software products contain an arbitrary kernel memory mapping vulnerability within biontdrv.sys that is c

A Cross-Site Scripting (XSS) vulnerability in the Rendering Engine component in Apryse WebViewer v11.1 and earlier allow

A DOM Clobbering vulnerability in mavo v0.3.2 allows attackers to execute arbitrary code via supplying a crafted HTML el

A DOM Clobbering vulnerability in umeditor v1.2.3 allows attackers to execute arbitrary code via supplying a crafted HTM