2025

In the Linux kernel, the following vulnerability has been resolved: mailbox: th1520: Fix a NULL vs IS_ERR() bug The de

Nagios XI 2024R1.2.2 is vulnerable to an open redirect flaw on the Tools page, exploitable by users with read-only permi

An issue was discovered on Tuoshi/Dionlink LT15D 4G Wi-Fi devices through M7628NNxlSPv2xUI_v1.0.1802.10.08_P4 and LT21B

AVE System Web Client v2.1.131.13992 was discovered to contain a cross-site scripting (XSS) vulnerability.

FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry and Carousel 2.4.29 was found to be vulnerable.

WP Activity Log 5.3.2 was found to be vulnerable. Unvalidated user input is used directly in an unserialize function in

Mastodon is a self-hosted, federated microblogging platform. In versions prior to 4.1.23, 4.2.16, and 4.3.4, when the vi

A vulnerability has been found in LinZhaoguan pb-cms 2.0 and classified as problematic. This vulnerability affects unkno

A vulnerability, which was classified as critical, was found in zyx0814 Pichome 2.1.0. This affects an unknown part of t

Mastodon is a self-hosted, federated microblogging platform. Starting in version 4.2.0 and prior to versions 4.2.16 and

An issue in Tencent Technology (Beijing) Company Limited Tencent MicroVision iOS 8.137.0 allows attackers to access sens

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in simonhunter Woo St

A vulnerability, which was classified as problematic, has been found in pihome-shc PiHome 2.0. Affected by this issue is

A vulnerability was found in Tu Yafeng Via Browser up to 5.9.0 on Android. It has been rated as problematic. This issue

An issue in Suning Commerce Group Suning EMall iOS 9.5.198 allows attackers to access sensitive user information via sup

An issue in IKEA CN iOS 4.13.0 allows attackers to access sensitive user information via supplying a crafted link.

An issue in Beitatong Technology LianJia iOS 9.83.50 allows attackers to access sensitive user information via supplying

An issue in Boohee Technology Boohee Health iOS 13.0.13 allows attackers to access sensitive user information via supply

An issue in Merchants Union Consumer Finance Company Limited Merchants Union Finance iOS 6.19.0 allows attackers to acce

An issue in Yibin Fengguan Network Technology Co., Ltd YuPao DirectHire iOS 8.8.0 allows attackers to access sensitive u

An issue in Shandong Provincial Big Data Center AiShanDong iOS 5.0.0 allows attackers to access sensitive user informati

An issue in Qianjin Network Information Technology (Shanghai) Co., Ltd 51Job iOS 14.22.0 allows attackers to access sens

mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized acti

MongoDB Compass may be susceptible to local privilege escalation under certain conditions potentially enabling unauthori

A vulnerability classified as problematic was found in b1gMail up to 7.4.1-pl1. Affected by this vulnerability is an unk

An improper access control issue in the VQL shell feature in Velociraptor Versions < 0.73.4 allowed authenticated users

HkCms v2.3.2.240702 was discovered to contain an arbitrary file write vulnerability in the component Appcenter.php.

A Server-Side Request Forgery (SSRF) in the component admin_webgather.php of SUCMS v1.0 allows attackers to access inter

An issue in the component admin_template.php of SUCMS v1.0 allows attackers to execute a directory traversal and arbitra

IBM EntireX 11.1 could allow a local user to unintentionally modify data timestamp integrity due to improper shared reso

IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is ret

IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is ret

IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is ret

IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is ret

IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is ret

IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is ret

IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is ret

IBM EntireX 11.1 could allow a local user to cause a denial of service due to use of a regular expression with an ineffi

IBM EntireX 11.1 could allow an authenticated attacker to traverse directories on the system. An attacker could send a s

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yukseloglu Filter

Spotipy is a lightweight Python library for the Spotify Web API. The `CacheHandler` class creates a cache file to store

Missing Authorization vulnerability in revmakx DefendWP Firewall defend-wp-firewall allows Exploiting Incorrectly Config

Use of Hard-coded Credentials, Storage of Sensitive Data in a Mechanism without Access Control vulnerability in E-Kent P

An Authentication Bypass vulnerability has been found in Trivision Camera NC227WF v5.8.0 from TrivisionSecurity. This vu

A Password Transmitted over Query String vulnerability has been found in Trivision Camera NC227WF v5.8.0 from TrivisionS

The MongoDB Shell may be susceptible to control character injection where an attacker with control over the database clu

The MongoDB Shell may be susceptible to control character injection where an attacker with control of the user’s clipboa

The MongoDB Shell may be susceptible to control character injection where an attacker with control of the mongosh autoco

The Buddyboss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link_title’ parameter

A SQL Injection vulnerability has been found in Ciges 2.15.5 from ATISoluciones. This vulnerability allows an attacker t