2025

Free5gc 4.0.1 is vulnerable to Buffer Overflow. The AMF incorrectly validates the 5GS mobile identity, resulting in slic

A null pointer dereference occurs in the function break_word_for_overflow_wrap() in MuPDF 1.26.4 when rendering a malfor

Improper Input Validation vulnerability in TOTOLINK X6000R allows Flooding.This issue affects X6000R: through V9.4.0cu.1

Buffer Over-read, Off-by-one Error vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation,

A flaw was found in Libtiff. This vulnerability is a "write-what-where" condition, triggered when the library processes

Uncontrolled Search Path Element vulnerability in Salesforce Salesforce CLI on Windows allows Replace Trusted Executable

A maliciously crafted RFA file, when parsed through Autodesk Revit, can force a Type Confusion vulnerability. A maliciou

The huggingface/transformers library, versions prior to 4.53.0, is vulnerable to Regular Expression Denial of Service (R

A maliciously crafted HTML payload, when rendered by the Autodesk Fusion desktop application, can trigger a Stored Cross

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Netcad Soft

A security flaw has been discovered in Campcodes Point of Sale System POS 1.0. Affected by this issue is some unknown fu

A security flaw has been discovered in Campcodes Gym Management System 1.0. Impacted is an unknown function of the file

In the Linux kernel, the following vulnerability has been resolved: fuse: Block access to folio overlimit syz reported

In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: fix potential OF node use-after-free

In the Linux kernel, the following vulnerability has been resolved: kernfs: Fix UAF in polling when open file is releas

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix use-after-free in state_show()

In the Linux kernel, the following vulnerability has been resolved: can: xilinx_can: xcan_write_frame(): fix use-after-

In the Linux kernel, the following vulnerability has been resolved: hsr: hold rcu and dev lock for hsr_get_port_ndev h

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Remove improper idxd_free The cal

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix double free in idxd_setup_wqs(

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: edma: Fix memory allocation size for

In the Linux kernel, the following vulnerability has been resolved: erofs: fix runtime warning on truncate_folio_batch_

A flaw has been found in Reservation Online Hotel Reservation System 1.0. Affected by this vulnerability is an unknown f

A vulnerability was detected in code-projects Online Bidding System 1.0. Affected is an unknown function of the file /ad

A security vulnerability has been detected in code-projects Online Bidding System 1.0. This impacts an unknown function

A local privilege escalation vulnerability exists in the safe_asterisk script included with the Asterisk toolkit package

A vulnerability was identified in Tenda AC21 16.03.08.16. The affected element is the function sub_45BB10 of the file /g

A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function o

The Advanced Views – Display Posts, Custom Fields, and More plugin for WordPress is vulnerable to Server-Side Template I

A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. This affects an unknown function of the file

A vulnerability was determined in 1000projects Bookstore Management System 1.0. The impacted element is an unknown funct

A vulnerability was found in SourceCodester Pet Grooming Management Software 1.0. The affected element is an unknown fun

A vulnerability has been found in Campcodes Computer Sales and Inventory System 1.0. Impacted is an unknown function of

A flaw has been found in Campcodes Computer Sales and Inventory System 1.0. This issue affects some unknown processing o

A vulnerability was detected in Campcodes Computer Sales and Inventory System 1.0. This vulnerability affects unknown co

A weakness has been identified in Campcodes Online Learning Management System 1.0. This vulnerability affects unknown co

A security flaw has been discovered in Jinher OA 2.0. This affects an unknown part of the file /c6/Jhsoft.Web.module/Too

A vulnerability was identified in Tenda AC20 up to 16.03.08.12. Affected by this issue is the function strcpy of the fil

Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, a Server-Side

A vulnerability was found in code-projects Hostel Management System 1.0. Affected is an unknown function of the file /ju

A vulnerability has been found in code-projects Hostel Management System 1.0. This impacts an unknown function of the fi

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerabili

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Cross-Site Request Forgery (CSRF) vulnerability in purethemes WorkScout-Core workscout-core allows Cross Site Request Fo

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFunnels Mail Min

Mesh Connect JS SDK contains JS libraries for integrating with Mesh Connect. Prior to version 3.3.2, the lack of sanitiz

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Cross-Site Request Forgery (CSRF) vulnerability in loopus WP Attractive Donations System wp-attractive-donations-system-

Cross-Site Request Forgery (CSRF) vulnerability in ptibogxiv Doliconnect doliconnect allows Stored XSS.This issue affect