2025

Sante PACS Server Web Portal DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability. This vulnerability

Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability. This vulnerability allo

Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability. This vulnerability allo

Sante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote a

Sante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote a

AutomationDirect C-More EA9 EAP9 File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability

AutomationDirect C-More EA9 EAP9 File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability

AutomationDirect C-More EA9 EAP9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vuln

Plonky2 is a SNARK implementation based on techniques from PLONK and FRI. Lookup tables, whose length is not divisible b

Type confusion in the Zoom Workplace App for Linux before 6.2.10 may allow an authorized user to conduct an escalation o

Symlink following in the installer for Zoom Workplace App for macOS before 6.2.10 may allow an authenticated user to con

Untrusted search path in the installer for some Zoom Workplace Apps for Windows may allow an authorized user to conduct

Out-of-bounds write in some Zoom Workplace Apps may allow an authorized user to conduct a loss of integrity via network

Out-of-bounds write in the Zoom Workplace App for Linux before version 6.2.5 may allow an unauthorized user to conduct a

Cleartext storage of sensitive information in the Zoom Jenkins Marketplace plugin before version 1.4 may allow an authen

Vulnerabilities in the algorithms used by Fuchsia to populate network protocol header fields, specifically the TCP ISN,

Weaknesses in the generation of TCP/UDP source ports and some other header values in Google's gVisor allowed them to be

A weak hashing algorithm and small sizes of seeds/secrets in Google's gVisor allowed for a remote attacker to calculate

This vulnerability allows appliance compromise at boot time.

A specific authentication strategy allows to learn ids of PAM users associated with certain authentication types.

This vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected P

An improper input validation the CSRF filter results in unsanitized user input written to the application logs.

A malicious actor can fix the session of a PAM user by tricking the user to click on a specially crafted link to the PAM

An improper session validation allows an unauthenticated attacker to cause certain request notifications to be executed

An improper input validation allows an unauthenticated attacker to alter PAM logs by sending a specially crafted HTTP re

The vulnerability allows an unauthenticated attacker to access information in PAM database.

In its default configuration, Contec Health CMS8000 Patient Monitor transmits plain-text patient data to a hard-coded p

The Cloud MQTT service of the affected products supports wildcard topic subscription which could allow an attacker to o

Affected products contain a vulnerability in the device cloud rpc command handling process that could allow remote attac

The "monitor" binary in the firmware of the affected product attempts to mount to a hard-coded, routable IP address, byp

The issue was addressed with improved bounds checks. This issue is fixed in GarageBand 10.4.12. Processing a maliciously

Contec Health CMS8000 Patient Monitor is vulnerable to an out-of-bounds write, which could allow an attacker to send spe

A vulnerability, which was classified as critical, has been found in code-projects Simple Plugins Car Rental Management

A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre

A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre

An encryption vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre.

Potential privilege escalation vulnerability in Revenera InstallShield versions 2022 R2 and 2021 R2 due to adding Instal

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Vent

A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. Affected by this vulne

In versions 3.1.0 and lower of the Splunk Supporting Add-on for Active Directory, also known as SA-ldapsearch, a vulnera

A misconfiguration in lmadmin.exe of FlexNet Publisher versions prior to 2024 R1 (11.19.6.0) allows the OpenSSL configur

go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A vulnerable node can be forced

kubewarden-controller is a Kubernetes controller that allows you to dynamically register Kubewarden admission policies.

kubewarden-controller is a Kubernetes controller that allows you to dynamically register Kubewarden admission policies.

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. A vulnerability was discovered in Argo CD that

VMware Aria Operations contains an information disclosure vulnerability. A malicious user with non-administrative privil

VMware Aria Operation for Logs contains a stored cross-site scripting vulnerability. A malicious actor with admin privil

VMware Aria Operations for Logs contains a privilege escalation vulnerability. A malicious actor with non-administrative

VMware Aria Operations for Logs contains a stored cross-site scripting vulnerability. A malicious actor with non-adminis

A vulnerability classified as critical has been found in itsourcecode Tailoring Management System 1.0. Affected is an un