2025

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HCL AION This issue affects HCL AION: 2.0.

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HCL AION.This issue affects AION: 2.0.

Inclusion of Functionality from Untrusted Control Sphere vulnerability in HCL MyXalytics. v6.6 allows Loading third-part

Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1 allows physical attackers to tem

An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to

A vulnerability was determined in GNU Binutils 2.45. The affected element is the function elf_x86_64_relocate_section of

A vulnerability was found in GNU Binutils 2.45. Impacted is the function _bfd_x86_elf_late_size_sections of the file bfd

A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function add_user

A weakness has been identified in JhumanJ OpnForm up to 1.9.3. This affects an unknown function of the file /api/passwor

A vulnerability was identified in JhumanJ OpnForm up to 1.9.3. The affected element is an unknown function of the compon

A flaw has been found in JhumanJ OpnForm up to 1.9.3. This affects an unknown part of the file /api/open/forms/ of the c

A security flaw has been discovered in itsourcecode Leave Management System 1.0. This impacts the function redirect of t

A vulnerability was identified in projectworlds Advanced Library Management System 1.0. Affected is an unknown function

A flaw has been found in code-projects Voting System 1.0. The affected element is an unknown function of the file /admin

Deno is a JavaScript, TypeScript, and WebAssembly runtime. In versions prior to 2.5.3 and 2.2.15, `Deno.FsFile.prototype

Deno is a JavaScript, TypeScript, and WebAssembly runtime. In versions prior to 2.5.3 and 2.2.15, `Deno.FsFile.prototype

A vulnerability was determined in GNU Binutils 2.45. Affected by this vulnerability is the function get_link_hash_entry

A vulnerability was found in GNU Binutils 2.45. Affected is the function elf_link_add_object_symbols of the file bfd/elf

A vulnerability has been found in GNU Binutils 2.45. This impacts the function bfd_elf_gc_record_vtentry of the file bfd

In Ankitects Anki before 25.02.6, crafted sound file references could cause files to be written to arbitrary locations o

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.

Wasmtime is a runtime for WebAssembly. Wasmtime 37.0.0 and 37.0.1 have memory leaks in the C/C++ API when using bindings

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.

In the Linux kernel, the following vulnerability has been resolved: mcb: mcb-parse: fix error handing in chameleon_pars

The YoSmart YoLink application through 2025-10-02 has session tokens with unexpectedly long lifetimes.

The YoSmart YoLink Smart Hub device 0382 exposes a UART debug interface. An attacker with direct physical access can lev

ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a Prox

ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources

A vulnerability was identified in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. This

A vulnerability was determined in CmsEasy up to 7.7.7. This affects an unknown function in the library lib/inc/view.php

When an error occurs in the application a full stacktrace is provided to the user. The stacktrace lists class and method

A user with the appropriate authorization can create any number of user accounts via an API endpoint using a POST r

A flaw has been found in Mangati NovoSGA up to 2.2.12. The impacted element is an unknown function of the file /novosga.

A vulnerability was identified in Vanderlande Baggage 360 7.0.0. This issue affects some unknown processing of the file

A vulnerability was determined in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. The impacted elemen

A vulnerability was determined in Frappe LMS 2.35.0. This affects an unknown function of the component Course Handler. E

A vulnerability was found in Frappe LMS 2.34.x/2.35.0. The impacted element is an unknown function of the component Inco

A flaw has been found in Frappe LMS 2.35.0. Impacted is an unknown function of the file /files/ of the component Assignm

A security flaw has been discovered in Rebuild up to 4.1.3. Affected by this issue is some unknown functionality of the

A vulnerability was determined in Open Asset Import Library Assimp 6.0.2. Affected is the function Q3DImporter::InternRe

DataChain is a Python-based AI-data warehouse for transforming and analyzing unstructured data. Versions 0.34.1 and belo

HCL MyXalytics is affected by the use of vulnerable/outdated versions which can expose the application to known security

The Backup Bolt plugin for WordPress is vulnerable to arbitrary file downloads and backup location writes in all version

CVE-2025-54089 is a cross-site scripting vulnerability in versions of secure access prior to 14.10. Attackers with admin

CVE-2025-54087 is a server-side request forgery vulnerability in Secure Access prior to version 14.10. Attackers with ad

CVE-2025-54086 is an excess permissions vulnerability in the Warehouse component of Absolute Secure Access prior to vers

auth0-PHP is an SDK for Auth0 Authentication and Management APIs. In versions 3.3.0 through 8.16.0, the Bulk User Import

An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. The django.utils.archive.e

Discourse is an open-source community discussion platform. Versions 3.5.0 and below are vulnerable to XSS attacks throug

Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply nested structures within t