2025

Memory corruption while processing a malformed license file during reboot.

Memory corruption during PlayReady APP usecase while processing TA commands.

Memory corruption while processing camera platform driver IOCTL calls.

A security flaw has been discovered in ChurchCRM up to 5.18.0. This impacts the function AuthMiddleware of the file src/

A vulnerability was identified in Tenda AC7 15.03.06.44. This affects an unknown function of the file /goform/saveAutoQo

A vulnerability was determined in Tenda AC7 15.03.06.44. The impacted element is an unknown function of the file /goform

A vulnerability was found in Tenda AC7 15.03.06.44. The affected element is an unknown function of the file /goform/Wifi

A vulnerability has been found in Tenda AC7 15.03.06.44. Impacted is an unknown function of the file /goform/SetUpnpCfg.

A flaw has been found in Tenda AC7 15.03.06.44. This issue affects some unknown processing of the file /goform/SetDDNSCf

The Cookie Notice & Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the uuid parameter in

A vulnerability was determined in code-projects E-Commerce Website 1.0. This affects an unknown part of the file /pages/

A weakness has been identified in PHPGurukul Beauty Parlour Management System 1.1. The impacted element is an unknown fu

A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. The affected element is an unkno

A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1. Impacted is an unknown function of th

ProjectWorlds Gym Management System1.0 is vulnerable to SQL Injection via the "id" parameter in the profile/edit.php pag

A vulnerability was determined in PHPGurukul Beauty Parlour Management System 1.1. This issue affects some unknown proce

An issue in the permission verification module and organization/application editing interface in Casdoor v2.26.0 and bef

An OS Command Injection vulnerability in the Admin panel in Curo UC300 5.42.1.7.1.63R1 allows local attackers to inject

A weakness has been identified in D-Link DIR-852 up to 20251002. This affects an unknown part of the file /HNAP1/. Execu

Cleartext Storage of Sensitive Information in Memory vulnerability in ABB MConfig.This issue affects MConfig: through 1.

Framelink Figma MCP Server before 0.6.3 allows an unauthenticated remote attacker to execute arbitrary operating system

A vulnerability was detected in SourceCodester Simple E-Commerce Bookstore 1.0. The affected element is an unknown funct

A security vulnerability has been detected in SourceCodester Wedding Reservation Management System 1.0. Impacted is the

A security flaw has been discovered in SourceCodester Wedding Reservation Management System 1.0. This vulnerability affe

A vulnerability was identified in SourceCodester Simple E-Commerce Bookstore 1.0. This affects an unknown part of the fi

A vulnerability was determined in projectworlds Advanced Library Management System 1.0. Affected by this issue is some u

A vulnerability has been found in SourceCodester Hotel and Lodge Management System 1.0. Affected is an unknown function

A flaw has been found in SourceCodester Hotel and Lodge Management System 1.0. This impacts an unknown function of the f

A vulnerability was detected in SourceCodester Hotel and Lodge Management System 1.0. This affects an unknown function o

A security vulnerability has been detected in TOTOLINK N600R up to 4.3.0cu.7866_B20220506. This impacts the function set

The Find Me On WordPress plugin through 2.0.9.1 does not sanitize and escape a parameter before using it in a SQL statem

A weakness has been identified in itsourcecode Student Transcript Processing System 1.0. Affected is an unknown function

A vulnerability was identified in itsourcecode Leave Management System 1.0. This affects an unknown function of the file

The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vu

A vulnerability was found in SourceCodester Simple E-Commerce Bookstore 1.0. The affected element is an unknown function

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to arbitrary file deletion d

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Versions prior to 2.5.3 and 2.2.15 are vulnerable to Command

A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0. This impacts an unknown function

A vulnerability has been found in Campcodes Advanced Online Voting Management System 1.0. The impacted element is an unk

An insecure implementation of the proprietary protocol DNET in Product CGM MEDICO allows attackers within the intranet t

A vulnerability was detected in code-projects E-Commerce Website 1.0. Impacted is an unknown function of the file /pages

A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown part of

A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1. Affected by this issue is some unknow

A security vulnerability has been detected in D-Link DI-7001 MINI 24.04.18B1. The affected element is an unknown functio

A Server-Side Request Forgery (SSRF) vulnerability exists in the MediaConnector class within the vLLM project's multimod

The NASA’s Interplanetary Overlay Network (ION) is an implementation of Delay/Disruption Tolerant Networking (DTN). A BP

Nagios Log Server before 2024R1.3.2 allows authenticated users (with read-only API access) to stop the Elasticsearch ser

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.

Improper Link Resolution Before File Access in the AWS VPN Client for macOS versions 1.3.2- 5.2.0 allows a local user to

LLaMA-Factory is a tuning library for large language models. Prior to version 0.9.4, a Server-Side Request Forgery (SSRF