2025

PMD is an extensible multilanguage static code analyzer. The passphrase for the PMD and PMD Designer release signing key

O2OA 9.1.3 is vulnerable to Cross Site Scripting (XSS) in Meetings - Settings.

An issue found in the Copy and View functions in the File Manager component of OpenPanel v0.3.4 allows attackers to exec

An issue in OpenPanel v0.3.4 to v0.2.1 allows attackers to execute a directory traversal in File Actions of File Manager

Qualisys C++ SDK commit a32a21a was discovered to contain multiple stack buffer overflows via the GetCurrentFrame, SaveC

A heap buffer overflow in the XML Text Escaping component of Qualisys C++ SDK commit a32a21a allows attackers to cause D

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to stored

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to cross-

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to cross-

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition EBICS server could allo

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to cross-

Grafana is an open-source platform for monitoring and observability. The Grafana Alerting VictorOps integration was not

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 is vulnerable to cross-site request forg

IBM Security Verify Directory 10.0 through 10.0.3 is vulnerable to a denial of service when sending an LDAP extended ope

Reflected Cross-Site Scripting (XSS) in TeamCal Neo, version 3.8.2. This allows an attacker to execute malicious JavaScr

SQL injection vulnerability in TeamCal Neo, version 3.8.2. This could allow an attacker to retrieve, update and delete a

Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protec

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protec

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protec

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protec

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix bpf_sk_select_reuseport() memory leak As

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: always recalculate features after XDP cl

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix lockup on tx to unregistering netd

In the Linux kernel, the following vulnerability has been resolved: pktgen: Avoid out-of-bounds access in get_imix_entr

In the Linux kernel, the following vulnerability has been resolved: btrfs: add the missing error handling inside get_ca

In the Linux kernel, the following vulnerability has been resolved: gtp: Destroy device along with udp socket's netns d

In the Linux kernel, the following vulnerability has been resolved: pfcp: Destroy device along with udp socket's netns

In the Linux kernel, the following vulnerability has been resolved: net: fec: handle page_pool_dev_alloc_pages error T

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Clear port select structure when fail to

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix inversion dependency warning while e

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double free of TCP_Server_Info::ho

In the Linux kernel, the following vulnerability has been resolved: afs: Fix merge preference rule failure condition s

In the Linux kernel, the following vulnerability has been resolved: zram: fix potential UAF of zram table If zram_meta

In the Linux kernel, the following vulnerability has been resolved: vsock/bpf: return early if transport is not assigne

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: discard packets if the transport chan

In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8mp-blk-ctrl: add missing loop break c

In the Linux kernel, the following vulnerability has been resolved: iomap: avoid avoid truncating 64-bit offset to 32 b

In the Linux kernel, the following vulnerability has been resolved: vsock: prevent null-ptr-deref in vsock_*[has_data|h

In the Linux kernel, the following vulnerability has been resolved: filemap: avoid truncating 64-bit offset to 32 bits

In the Linux kernel, the following vulnerability has been resolved: mac802154: check local interfaces before deleting s

The eHive Objects Image Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ehive_o

The The AI Infographic Maker plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to,

The Drag and Drop Multiple File Upload – Contact Form 7 plugin for WordPress is vulnerable to limited arbitrary file del

The Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) p

The The WooCommerce Product Table Lite plugin for WordPress is vulnerable to arbitrary shortcode execution in all versio

Cross-Site Request Forgery (CSRF) vulnerability in Overt Software Solutions LTD EZPZ SAML SP Single Sign On (SSO) allows

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in activity-log.com W

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marcel Pol Gwolle

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Metagauss Registra