2025

TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user in

TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user in

TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user in

TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user in

TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user in

TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user in

TYPO3 is a free and open source Content Management Framework. Applications that use `TYPO3\CMS\Core\Http\Uri` to parse e

TYPO3 is a free and open source Content Management Framework. It has been discovered that the install tool password has

Git LFS is a Git extension for versioning large files. When Git LFS requests credentials from Git for a remote host, it

Improper input validation in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated att

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - SocialProfi

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - GlobalBlock

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F

Gradio is an open-source Python package that allows quick building of demos and web application for machine learning mod

Umbraco.Forms is a web form framework written for the nuget ecosystem. Character limits configured by editors for short

Illustrator on iPad versions 3.0.7 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability t

Illustrator on iPad versions 3.0.7 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability t

Substance3D - Stager versions 3.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result i

Substance3D - Stager versions 3.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result i

Substance3D - Stager versions 3.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result i

Substance3D - Stager versions 3.0.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could re

Substance3D - Stager versions 3.0.4 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could r

Photoshop Desktop versions 25.12, 26.1 and earlier are affected by an Uncontrolled Search Path Element vulnerability tha

Photoshop Desktop versions 25.12, 26.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerabili

Invoice Ninja is vulnerable to authenticated Server-Side Request Forgery (SSRF) allowing for arbitrary file read and net

An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-

Git Credential Manager (GCM) is a secure Git credential helper built on .NET that runs on Windows, macOS, and Linux. The

Open source machine learning framework. A vulnerability has been identified in Rasa that enables an attacker who has the

NULL pointer dereference in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated atta

Out-of-bounds write in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker

Out-of-bounds read in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker

Off-by-one error in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to

A flaw was found in the HAL Console in the Wildfly component, which does not neutralize or incorrectly neutralizes user-

Authenticated command injection vulnerability in the command line interface of a network management service. Successful 

An authenticated parameter injection vulnerability exists in the web-based management interface of the AOS-8 and AOS-10 

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. NOTE: The Realt

Vyper is a Pythonic Smart Contract Language for the EVM. When the Vyper Compiler uses the precompiles EcRecover (0x1) an

Windows Telephony Service Remote Code Execution Vulnerability

Windows Telephony Service Remote Code Execution Vulnerability

Windows Telephony Service Remote Code Execution Vulnerability

Windows Telephony Service Remote Code Execution Vulnerability

Visual Studio Elevation of Privilege Vulnerability

On-Premises Data Gateway Information Disclosure Vulnerability

Microsoft Office OneNote Remote Code Execution Vulnerability

Microsoft Access Remote Code Execution Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Uncontrolled resource consumption in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker

Windows Graphics Component Elevation of Privilege Vulnerability