2025

The /WmAdmin/,/invoke/vm.server/login login page in the Integration Server in Software AG webMethods 10.15.0 before Core

Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with crafted valid or i

It is possible to construct a zone such that some queries to it will generate responses containing numerous records in t

kube-audit-rest is a simple logger of mutation/creation requests to the k8s api. If the "full-elastic-stack" example vec

The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflak

The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflak

The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflak

snowflake-connector-net is the Snowflake Connector for .NET. Snowflake discovered and remediated a vulnerability in the

A vulnerability has been found in Aridius XYZ up to 20240927 on OpenCart and classified as critical. This vulnerability

mySCADA myPRO does not properly neutralize POST requests sent to a specific port with email information. This vulnerabil

mySCADA myPRO does not properly neutralize POST requests sent to a specific port with version information. This vulnerab

A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects the function di

Insertion of Sensitive Information into Log File vulnerability observed in FLEXON. Some information may be improperly di

Missing Origin Validation in WebSockets vulnerability in FLXEON. Session management was not sufficient to prevent unauth

A Code Injection vulnerability was identified in GitHub Enterprise Server that allowed attackers to inject malicious cod

regclient is a Docker and OCI Registry Client in Go. A malicious registry could return a different digest for a pinned m

Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowf

Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowf

snowflake-connector-nodejs is a NodeJS driver for Snowflake. Snowflake discovered and remediated a vulnerability in the

An issue was discovered in Akamai Enterprise Application Access (EAA) before 2025-01-17. If an admin knows another tenan

IBM Aspera Faspex 5.0.0 through 5.0.10 could disclose sensitive username information due to an observable response discr

IBM Aspera Faspex 5.0.0 through 5.0.10 could allow a privileged user to make system changes without proper access contro

IBM Aspera Faspex 5.0.0 through 5.0.10 does not require that users should have strong passwords by default, which makes

IBM Aspera Faspex 5.0.0 through 5.0.10 does not require that users should have strong passwords by default, which makes

Snowflake PHP PDO Driver is a driver that uses the PHP Data Objects (PDO) extension to connect to the Snowflake database

Twig is a template language for PHP. When using the ?? operator, output escaping was missing for the expression on the l

An issue in the reset password interface of ruoyi v4.8.0 allows attackers with Admin privileges to cause a Denial of Ser

Insecure permissions in RuoYi v4.8.0 allows authenticated attackers to escalate privileges by assigning themselves highe

RuoYi v4.8.0 was discovered to contain a SQL injection vulnerability via the orderby parameter at /monitor/online/list.

RuoYi v4.8.0 was discovered to allow unauthorized attackers to view the session ID of the admin in the system monitoring

The Divi Torque Lite – Best Divi Addon, Extensions, Modules & Social Modules plugin for WordPress is vulnerable to Store

The file names constructed within image_picker are missing sanitization checks leaving them vulnerable to malicious docu

The file names constructed within file_selector are missing sanitization checks leaving them vulnerable to malicious doc

Zohocorp ManageEngine Applications Manager versions 174000 and prior are vulnerable to the incorrect authorization in th

The Target Video Easy Publish plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's brid_ov

Use after free in DevTools in Google Chrome prior to 132.0.6834.159 allowed a remote attacker to potentially exploit hea

An attacker with access to an HX 10.0.0 and previous versions, may send specially-crafted data to the HX console. The

When copying files with rsync, octorpki uses the "-a" flag 0, which forces rsync to copy binaries with the suid bit set

In axios before 1.7.8, lib/helpers/isURLSameOrigin.js does not use a URL object when determining an origin, and has a po

Multiple switches are affected by an out-of-bounds write vulnerability. This vulnerability is caused by insufficient inp

The Flexible Wishlist for WooCommerce – Ecommerce Wishlist & Save for later plugin for WordPress is vulnerable to Stored

The Competition Form WordPress plugin through 2.0 does not sanitise and escape a parameter before outputting it back in

The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is

A vulnerability was found in code-projects Job Recruitment 1.0. It has been rated as problematic. This issue affects som

The old versions of EXIF Viewer Classic contain a cross-site scripting vulnerability caused by improper handling of EXIF

A vulnerability, which was classified as critical, has been found in Codezips Gym Management System 1.0. Affected by thi

A vulnerability classified as critical was found in SourceCodester Best Employee Management System 1.0. Affected by this

A vulnerability classified as problematic has been found in SourceCodester Online Courseware 1.0. Affected is an unknown

A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been rated as critical. This issue affec

A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been declared as problematic. This vulne