2025

A vulnerability was found in ESAFENET CDG V5. It has been classified as problematic. This affects an unknown part of the

IBM Security Verify Governance 10.0.2 Identity Manager uses a one-way cryptographic hash against an input that should

A vulnerability was found in ESAFENET CDG V5 and classified as problematic. Affected by this issue is some unknown funct

A vulnerability has been found in ESAFENET CDG V5 and classified as critical. Affected by this vulnerability is an unkno

A vulnerability, which was classified as critical, was found in ESAFENET CDG V5. Affected is an unknown function of the

A vulnerability, which was classified as critical, has been found in ESAFENET CDG V5. This issue affects some unknown pr

A vulnerability classified as problematic was found in ESAFENET CDG V5. This vulnerability affects unknown code of the f

IBM Security Verify Governance 10.0.2 Identity Manager can transmit user credentials in clear text that could be obtaine

A vulnerability classified as critical has been found in ESAFENET CDG V5. This affects an unknown part of the file /done

A vulnerability was found in ESAFENET CDG V5. It has been rated as critical. Affected by this issue is some unknown func

An issue in Open5GS v.2.7.2 allows a remote attacker to cause a denial of service via the ogs_dbi_auth_info function in

Mailcow through 2024-11b has a session fixation vulnerability in the web panel. It allows remote attackers to set a sess

AutoLib Software Systems OPAC v20.10 was discovered to have multiple API keys exposed within the source code. Attackers

A reflected cross-site scripting (XSS) vulnerability in Audemium ERP <=0.9.0 allows remote attackers to execute an arbit

A vulnerability was found in ESAFENET CDG V5. It has been declared as problematic. Affected by this vulnerability is an

A vulnerability was found in ESAFENET CDG V5. It has been classified as critical. Affected is an unknown function of the

A vulnerability was found in ESAFENET CDG V5 and classified as problematic. This issue affects some unknown processing o

The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting (XSS) due to improper handling of directory listi

Buffer Overflow vulnerability in D-Link DSR-150, DSR-150N, DSR-250, DSR-250N, DSR-500N, DSR-1000N from 3.13 to 3.17B901C

An issue was discovered in DTEX DEC-M (DTEX Forwarder) 6.1.1. The com.dtexsystems.helper service, responsible for handli

Hive creates a credentials file to a temporary directory in the file system with permissions 644 by default when the fil

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Snap Deploy

A Local Code Injection Vulnerability exists in the product and version listed above. The vulnerability is due to incorre

An Incorrect Permission Assignment Vulnerability exists in the product and version listed above. The vulnerability is du

A vulnerability has been found in Intelbras InControl up to 2.21.58 and classified as problematic. This vulnerability af

In shouldSkipForInitialSUW of AdvancedPowerUsageDetail.java, there is a possible way to bypass factory reset protections

In checkKeyIntent of AccountManagerService.java, there is a possible way to bypass intent security check and install an

In parseUriInternal of Intent.java, there is a possible infinite loop due to improper input validation. This could lead

In validateSsid of WifiConfigurationUtil.java, there is a possible way to overflow a system configuration file due to a

In Source of ZipFile.java, there is a possible way for an attacker to execute arbitrary code by manipulating Dynamic Cod

In onCreate of ChooserActivity.java, there is a possible way to bypass factory reset protections due to a missing permis

In TBD of TBD, there is a possible use after free due to a race condition. This could lead to local escalation of privil

In TBD of TBD, there is a possible use after free due to a race condition. This could lead to local escalation of privil

In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation

In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation

In _DevmemXReservationPageAddress of devicemem_server.c, there is a possible use-after-free due to improper casting. Thi

In DevmemXIntMapPages of devicemem_server.c, there is a possible arbitrary code execution due to an integer overflow. Th

In RGXMMUCacheInvalidate of rgxmem.c, there is a possible arbitrary code execution due to a race condition. This could l

A Remote Code Execution Vulnerability exists in the product and version listed above. The vulnerability is due to lack o

A Local Code Execution Vulnerability exists in the product and version listed above. The vulnerability is due to a defau

A denial-of-service vulnerability exists in the affected products. The vulnerability could allow a remote, non-privilege

Avi Load Balancer contains an unauthenticated blind SQL Injection vulnerability which was privately reported to VMware.

A vulnerability, which was classified as problematic, was found in pankajindevops scale up to 20241113. This affects an

A Credential Exposure Vulnerability exists in the above-mentioned product and version. The vulnerability is due to using

A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated rem

A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated rem

A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated rem

A vulnerability in the web-based management interface of HPE Aruba Networking Fabric Composer could allow an authenticat

A privilege escalation vulnerability exists in the web-based management interface of HPE Aruba Networking Fabric Compose

A flaw was found in openshift-gitops-operator-container. The openshift.io/cluster-monitoring label is applied to all nam