2025

Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0

A vulnerability, which was classified as problematic, was found in Webkul QloApps 1.6.1. This affects an unknown part of

A vulnerability, which was classified as critical, has been found in xxyopen Novel up to 3.4.1. Affected by this issue i

An SQL injection vulnerability exists in Stock-Forecaster <=01-04-2020. By sending a specially crafted 'stock-symbol' pa

A host header injection vulnerability exists in the NPM package of perfood/couch-auth <= 0.21.2. By sending a specially

An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4

A vulnerability classified as problematic was found in GNU Binutils 2.43/2.44. Affected by this vulnerability is the fun

A Local File Inclusion (LFI) vulnerability exists in the /load-workflow endpoint of modelscope/agentscope version v0.0.4

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, mac

A sensitive information disclosure vulnerability in the Tenda W18E V16.01.0.8(1625) web management portal allows an unau

Hardcoded credentials in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to gain root access to the

A stack overflow vulnerability in the Tenda W18E V16.01.0.8(1625) web management portal allows an authenticated remote a

Tenda W18E V16.01.0.8(1625) suffers from authentication bypass in the web management portal allowing an unauthorized rem

A default credentials vulnerability in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to access the

Tenda W18E V16.01.0.8(1625) is vulnerable to Incorrect Access Control. An attacker can send a specially crafted HTTP POS

Tenda W18E V16.01.0.8(1625) is vulnerable to Buffer Overflow. An attacker with access to the web management portal can e

Tenda W18E V16.01.0.8(1625) is vulnerable to Incorrect Access Control. Unauthorized password change via the web manageme

A hardcoded credentials vulnerability in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to access t

Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application

Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.

A vulnerability in mintplex-labs/anything-llm prior to version 1.3.1 allows for path traversal due to improper handling

The WP Foodbakery plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation

The WP Foodbakery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including,

wandb/openui latest commit c945bb859979659add5f490a874140ad17c56a5d contains a vulnerability where unauthenticated endpo

Hickory DNS is a Rust based DNS client, server, and resolver. A vulnerability present starting in version 0.8.0 and prio

A vulnerability classified as problematic has been found in GNU Binutils 2.43. Affected is the function xstrdup of the f

A stored cross-site scripting (XSS) vulnerability in the Parameter List module of cool-admin-java v1.0 allows attackers

An arbitrary file upload vulnerability in the component /comm/upload of cool-admin-java v1.0 allows attackers to execute

An arbitrary file upload vulnerability in the component /userPicture of Timo v2.0.3 allows attackers to execute arbitrar

OneBlog v2.3.6 was discovered to contain a template injection vulnerability via the template management department.

PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via a crafted payload injected into the name in the

A vulnerability was found in GNU Binutils 2.43. It has been rated as problematic. This issue affects the function xmemdu

A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. This vulnerability affects the func

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Starting in version 0.3.2 and

OpenProject is open-source, web-based project management software. In versions prior to 15.2.1, the application fails to

PAM-PKCS#11 is a Linux-PAM login module that allows a X.509 certificate based user login. Prior to version 0.6.13, if ce

PAM-PKCS#11 is a Linux-PAM login module that allows a X.509 certificate based user login. In versions 0.6.12 and prior,

In the Linux kernel, the following vulnerability has been resolved: mm: zswap: properly synchronize freeing resources d

In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ets qdisc OOB Indexing Haowei Yan

In the Linux kernel, the following vulnerability has been resolved: cachestat: fix page cache statistics permission che

In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Ratelimit warning logs to prevent VM

In the Linux kernel, the following vulnerability has been resolved: USB: serial: quatech2: fix null-ptr-deref in qt2_pr

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Assign job pointer to NULL before signalin

In the Linux kernel, the following vulnerability has been resolved: vfio/platform: check the bounds of read/write sysca

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Initialize denominator defaults to

A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libta

A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements

A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not

A vulnerability was found in GNU Binutils 2.43. It has been classified as problematic. This affects the function xstrdup