2025

LibreNMS is a community-based GPL-licensed network monitoring system. The alert rule name in the Alerts > Alert Rules p

PrestaShop Checkout is the PrestaShop official payment module in partnership with PayPal. In versions prior to 4.4.1 and

A vulnerability has been found in Apeman ID71 EN75.8.53.20. The affected element is an unknown function of the file /set

A weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. E

A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file prdbg.c. Perf

Mattermost versions 10.5.x <= 10.5.10, 10.11.x <= 10.11.2 fail to use constant-time comparison for sensitive string comp

Mattermost versions 10.5.x <= 10.5.10, 10.11.x <= 10.11.2 fail to properly validate guest user permissions when adding c

Reflex is a library to build full-stack web apps in pure Python. In versions 0.5.4 through 0.8.14, the /auth-codespace e

Applications using affected versions of Ehcache 3.x can experience degraded cache-write performance if the application u

An improper certificate validation vulnerability was reported in the Lenovo Universal Device Client (UDC) that could all

Creativeitem Academy LMS up to and including 5.13 does not regenerate session IDs upon successful authentication, enabli

Exposure of sensitive information to an unauthorized actor in Windows Taskbar Live allows an unauthorized attacker to di

Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform sp

Improper authentication in Windows SMB Client allows an unauthorized attacker to perform tampering over a network.

An Unchecked Return Value vulnerability [CWE-252] in Fortinet FortiOS version 7.6.0 through 7.6.3 and before 7.4.8 API a

An URL Redirection to Untrusted Site vulnerabilities [CWE-601] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, Fo

A insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4 al

A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications contains a

The Pz-LinkCard WordPress plugin before 2.5.7 does not validate a parameter before making a request to it, which could a

A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT <func:result> elements during sty

SAP Cloud Appliance Library Appliances allows an attacker with high privileges to leverage an insecure S/4HANA default p

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.1, a Reflec

Mastodon is a free, open-source social network server based on ActivityPub. In Mastodon before 4.4.6, 4.3.14, and 4.2.2

Mattermost Desktop App versions <= 5.13.0 fail to validate URLs external to the configured Mattermost servers, allowing

HCL Unica MaxAI Workbench is vulnerable to improper input validation. This allows attackers to exploit vulnerabilities

A vulnerability was determined in Tomofun Furbo 360 and Furbo Mini. The impacted element is an unknown function of the f

A flaw has been found in Tomofun Furbo 360 and Furbo Mini. This issue affects some unknown processing of the component G

A security vulnerability has been detected in Tomofun Furbo Mobile App up to 7.57.0a on Android. This affects an unknown

A weakness has been identified in Tomofun Furbo 360 and Furbo Mini. Affected by this issue is some unknown functionality

A security flaw has been discovered in Tomofun Furbo 360 and Furbo Mini. Affected by this vulnerability is an unknown fu

A vulnerability was determined in Tomofun Furbo 360 and Furbo Mini. This impacts an unknown function of the component Tr

A vulnerability was found in Tomofun Furbo 360 and Furbo Mini. This affects an unknown function of the component Bluetoo

A vulnerability has been found in Tomofun Furbo 360 and Furbo Mini. The impacted element is an unknown function of the f

IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the networ

IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the netw

A security flaw has been discovered in Tomofun Furbo 360 and Furbo Mini. This affects an unknown part of the component U

A vulnerability was identified in Tomofun Furbo 360 and Furbo Mini. Affected by this issue is the function upload_file_t

HCL Unica Platform is impacted by misconfigured security related HTTP headers. This can lead to less secure browser def

HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability. A malicious agent may be able to in

HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information.

HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery (SSRF). An attacker can

A flaw has been found in code-projects Hospital Management System 1.0. Affected is the function session of the component

The GSheetConnector For Gravity Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions less

Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect av

Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect av

Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect av

Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect av

Permission control vulnerability in the camera module. Successful exploitation of this vulnerability may affect service

A rusted types in scripts not enforced in CSP vulnerability has been identified in HCL AION.This issue affects AION:

A vulnerability  Cacheable SSL Page Found vulnerability has been identified in HCL AION.  Cached data may expose cre