2025

A vulnerability was detected in MuFen-mker PHP-Usermm up to 37f2d24e51b04346dfc565b93fc2fc6b37bdaea9. This affects an un

An issue was discovered in Stormshield Network Security (SNS) before 5.0.1. TPM authentication information could, in som

Nagios XI < 2026R1 is vulnerable to an authenticated command injection vulnerability within the MongoDB Database, MySQL

All versions of Dingtian DT-R002 are vulnerable to an Insufficiently Protected Credentials vulnerability that could allo

An issue in O-RAN Near Realtime RIC ric-plt-submgr in the J-Release environment, allows remote attackers to cause a deni

An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse

An issue was discovered TensorFlow v2.18.0. A Denial of Service (DoS) occurs when padding is set to 'valid' in tf.keras.

A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshr

A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is compiled by Inductor, leading

A syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service (DoS).

pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randn_like are us

A security vulnerability has been detected in UTT 1200GW and 1250GW up to 3.0.0-170831/3.2.2-200710. This vulnerability

Dell BSAFE Micro Edition Suite, versions prior to 5.0.2.3 contain an Out-of-bounds Write vulnerability. An unauthenticat

Rack is a modular Ruby web server interface. Prior to version 2.2.18, Rack::QueryParser enforces its params_limit only f

An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when per

Ericsson Indoor Connect 8855 contains a vulnerability where server-side security can be bypassed in the client which if

Ericsson Indoor Connect 8855 contains a missing authorization vulnerability which if exploited can allow access to the s

Ericsson Indoor Connect 8855 contains a command injection vulnerability which if exploited can result in an escalation o

A vulnerability was identified in geyang ml-logger up to acf255bade5be6ad88d90735c8367b28cbe3a743. Affected by this vuln

iMonitor EAM 9.6394 installs a system service (eamusbsrv64.exe) that runs with NT AUTHORITY\SYSTEM privileges. This serv

The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev and various parser tags for em

git-commiters is a Node.js function module providing committers stats for their git repository. Prior to version 0.1.2,

apidoc-core is the core parser library to generate apidoc result following the apidoc-spec. A Prototype Pollution vulner

A prototype pollution in the lib.set function of dref v0.1.2 allows attackers to cause a Denial of Service (DoS) via sup

A vulnerability has been found in MikroTik RouterOS 7. This affects the function parse_json_element of the file /rest/ip

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PROLIZ Comp

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Saysis Computer Systems

A vulnerability was identified in H3C Magic B3 up to 100R002. This affects the function AddMacList/EditMacList of the fi

A vulnerability was determined in Topaz SERVCore Teller 2.14.0-RC2/2.14.1. Affected by this issue is some unknown functi

Path Traversal: 'dir/../../filename' vulnerability in Yordam Information Technology Consulting Education and Electrical

Flag Forge is a Capture The Flag (CTF) platform. In versions from 2.1.0 to before 2.3.0, the API endpoint GET /api/probl

fast-redact is a package that provides do very fast object redaction. A Prototype Pollution vulnerability in the nestedR

A Prototype Pollution vulnerability in the toCsv function of csvjson versions thru 5.1.0 allows attackers to inject prop

web3-core-method is a package designed to creates the methods on the web3 modules. A Prototype Pollution vulnerability i

toggle-array is a package designed to enables a property on the object at the specified index, while disabling the prope

spmrc is a package that provides the rc manager for spm. A Prototype Pollution vulnerability in the set and config funct

A Prototype Pollution vulnerability in the byGroupAndType function of sassdoc-extras v2.5.1 and before allows attackers

rollbar is a package designed to effortlessly track and debug errors in JavaScript applications. This package includes a

mpregular is a package that provides a small program development framework based on RegularJS. A Prototype Pollution vul

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

The messageformat package, an implementation of the Unicode MessageFormat 2 specification for JavaScript, is vulnerable

The web3-core-subscriptions is a package designed to manages web3 subscriptions. A Prototype Pollution vulnerability in

Binding to an unrestricted ip address in GitHub allows an unauthorized attacker to execute code over a network.

Improper authorization in the background migration endpoints of Langfuse 3.1 before d67b317 allows any authenticated use

The csvtojson package, a tool for converting CSV data to JSON with customizable parsing capabilities, contains a prototy

Aztech DSL5005EN firmware 1.00.AZ_2013-05-10 and possibly other versions allows unauthenticated attackers to change the

Improper Input Validation vulnerability in TOTOLINK X6000R allows Command Injection, File Manipulation.This issue affect

Horilla is a free and open source Human Resource Management System (HRMS). Unauthenticated users can access uploaded res

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Softwa

A vulnerability in the web UI of Cisco IOS Software could allow an authenticated, remote attacker with low privileges to