2025

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Inje

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Inje

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Iocharger firmware

Authenticated command injection in the filename of a <redacted>.exe request leads to remote code execution as the root u

Command injection in the <redacted> parameter of a <redacted>.exe request leads to remote code execution as the root use

An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions

A post-authentication absolute path traversal vulnerability in SonicOS management allows a remote attacker to read an ar

A post-authentication format string vulnerability in SonicOS management allows a remote attacker to crash a firewall and

A post-authentication stack-based buffer overflow vulnerability in SonicOS management allows a remote attacker to crash

A vulnerability was found in pgadmin. Users logging into pgAdmin running in server mode using LDAP authentication may be

Mattermost versions 9.11.x <= 9.11.5 fail to enforce invite permissions, which allows team admins, with no permission to

Mattermost versions 10.x <= 10.2 fail to accurately reflect missing settings, which allows confusion for admins regardin

Mattermost versions 10.2.0, 9.11.x <= 9.11.5, 10.0.x <= 10.0.3, 10.1.x <= 10.1.3 fail to properly validate post types, w

A vulnerability classified as critical was found in code-projects Cinema Seat Reservation System 1.0. Affected by this v

A vulnerability classified as problematic has been found in code-projects Online Bike Rental 1.0. Affected is an unknown

A vulnerability was found in Codezips Project Management System 1.0. It has been classified as critical. This affects an

A vulnerability in the Gen7 SonicOS Cloud platform NSv, allows a remote authenticated local low-privileged attacker to e

A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a remote attacker to establis

An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authe

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in the SonicOS SSLVPN authentication token generator

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.5.5, starting from 17.6 pr

A vulnerability was found in code-projects Online Bike Rental System 1.0 and classified as critical. Affected by this is

A vulnerability has been found in leiyuxi cy-fast 1.0 and classified as critical. Affected by this vulnerability is the

An issue was discovered in GitLab CE/EE affecting all versions starting from 15.7 prior to 17.5.5, starting from 17.6 pr

The BU Section Editing WordPress plugin through 0.9.9 does not sanitise and escape a parameter before outputting it back

The Aklamator INfeed WordPress plugin through 2.0.0 does not sanitise and escape a parameter before outputting it back i

The Aklamator INfeed WordPress plugin through 2.0.0 does not sanitise and escape some of its settings, which could allow

The Asgard Security Scanner WordPress plugin through 0.7 does not sanitise and escape a parameter before outputting it b

The Backlink Monitoring Manager WordPress plugin through 0.1.3 does not sanitise and escape a parameter before outputtin

The PostLists WordPress plugin through 2.0.2 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it

A vulnerability, which was classified as critical, was found in leiyuxi cy-fast 1.0. Affected is the function listData o

A vulnerability, which was classified as critical, has been found in YunzMall up to 2.4.2. This issue affects the functi

A vulnerability, which was classified as critical, has been found in KaiYuanTong ECT Platform up to 2.0.0. Affected by t

A vulnerability was found in Ruby. The Ruby interpreter is vulnerable to the Marvin Attack. This attack allows the attac

A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are spe

A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are spe

A vulnerability classified as problematic was found in SingMR HouseRent 1.0. This vulnerability affects unknown code of

A vulnerability classified as critical has been found in SingMR HouseRent 1.0. This affects the function singleUpload/up

A vulnerability was found in SingMR HouseRent 1.0. It has been rated as critical. Affected by this issue is some unknown

A vulnerability was found in donglight bookstore电商书城系统说明 1.0. It has been declared as critical. Affected by this vulnera

A vulnerability was found in Redaxo CMS 5.18.1. It has been classified as problematic. Affected is an unknown function o

A vulnerability classified as critical has been found in REVE Antivirus 1.0.0.0 on Linux. This affects an unknown part o

A vulnerability was found in kurniaramadhan E-Commerce-PHP 1.0. It has been rated as problematic. Affected by this issue

A vulnerability was found in kurniaramadhan E-Commerce-PHP 1.0. It has been declared as critical. Affected by this vulne

A vulnerability was found in kurniaramadhan E-Commerce-PHP 1.0. It has been classified as problematic. Affected is an un

A vulnerability was found in wander-chu SpringBoot-Blog 1.0 and classified as problematic. This issue affects the functi

A vulnerability has been found in wander-chu SpringBoot-Blog 1.0 and classified as critical. This vulnerability affects

A vulnerability, which was classified as critical, was found in wander-chu SpringBoot-Blog 1.0. This affects the functio

The Permission Model assumes that any path starting with two backslashes \ has a four-character prefix that can be ignor

Due to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a malicious command line a