2025

A vulnerability classified as problematic was found in langhsu Mblog Blog System 3.5.0. Affected by this vulnerability i

A vulnerability classified as problematic has been found in langhsu Mblog Blog System 3.5.0. Affected is an unknown func

ActiveSupport::EncryptedFile writes contents that will be encrypted to a temporary file. The temporary file's permissi

The redirect_to method in Rails allows provided values to contain characters which are not legal in an HTTP header value

There is a vulnerability in ActiveSupport if the new bytesplice method is called on a SafeBuffer with untrusted user inp

There is a denial of service vulnerability in the header parsing component of Rack.

There is a deserialization of untrusted data vulnerability in the Kredis JSON deserialization code

There is a potential DOM based cross-site scripting issue in rails-ujs which leverages the Clipboard API to target HTML

A vulnerability was found in donglight bookstore电商书城系统说明 1.0.0. It has been rated as problematic. This issue affects the

A vulnerability was found in donglight bookstore电商书城系统说明 1.0.0. It has been declared as problematic. This vulnerability

A vulnerability was found in donglight bookstore电商书城系统说明 1.0.0. It has been classified as critical. This affects the fun

A vulnerability was found in Sucms 1.0 and classified as critical. Affected by this issue is some unknown functionality

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7

A vulnerability has been found in SEMCMS up to 4.8 and classified as critical. Affected by this vulnerability is an unkn

A vulnerability, which was classified as problematic, was found in ZeroWdd myblog 1.0. Affected is the function update o

A vulnerability, which was classified as critical, has been found in ZeroWdd myblog 1.0. This issue affects the function

Carbon is an international PHP extension for DateTime. Application passing unsanitized user input to Carbon::setLocale a

A vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches exists. It could allow an un

SickChill is an automatic video library manager for TV shows. A user-controlled `login` endpoint's `next_` parameter tak

Certain Teradata account-handling code through 2024-11-04, used with SUSE Enterprise Linux Server, mismanages groups. Sp

A vulnerability classified as critical was found in ZeroWdd myblog 1.0. This vulnerability affects unknown code of the f

An issue was discovered in GitLab CE/EE affecting all versions starting from 15.5 before 17.5.5, 17.6 before 17.6.3, and

WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified

An issue was discovered in GitLab CE/EE affecting all versions starting from 17.4 prior to 17.5.5, starting from 17.6 pr

A vulnerability classified as critical has been found in ZeroWdd myblog 1.0. This affects an unknown part of the file sr

WeGIA is a web manager for charitable institutions. A SQL Injection vulnerability was identified in the /dao/verificar_r

WeGIA is a web manager for charitable institutions. A SQL Injection vulnerability was identified in the /html/funcionari

WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified

Type Confusion in V8 in Google Chrome prior to 131.0.6778.264 allowed a remote attacker to execute arbitrary code inside

SourceCodester Computer Laboratory Management System 1.0 is vulnerable to Incorrect Access Control. via /php-lms/admin/?

composio >=0.5.40 is vulnerable to Command Execution in composio_openai, composio_claude, and composio_julep via the han

A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been rated as critical. Affected by this

Dell VxRail, versions 8.0.000 through 8.0.311, contain(s) a Plaintext Storage of a Password vulnerability. A high privil

A malformed 802.15.4 packet causes a buffer overflow to occur leading to an assert and a denial of service. A watchdog r

In the Linux kernel, the following vulnerability has been resolved: soc: imx8m: Probe the SoC driver as platform driver

In the Linux kernel, the following vulnerability has been resolved: MIPS: Loongson64: DTS: Really fix PCIe port nodes f

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Adding array index check to preven

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_socket: remove WARN_ON_ONCE on maxim

In the Linux kernel, the following vulnerability has been resolved: ACPI: x86: Add adev NULL check to acpi_quirk_skip_s

In the Linux kernel, the following vulnerability has been resolved: quota: flush quota_release_work upon quota writebac

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfs4_openowner leak when concurrent nfsd4

In the Linux kernel, the following vulnerability has been resolved: drm/sti: avoid potential dereference of error point

In the Linux kernel, the following vulnerability has been resolved: drm/sti: avoid potential dereference of error point

In the Linux kernel, the following vulnerability has been resolved: drm/sti: avoid potential dereference of error point

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix handling of plane refcount [W

In the Linux kernel, the following vulnerability has been resolved: btrfs: add a sanity check for btrfs root in btrfs_s

In the Linux kernel, the following vulnerability has been resolved: kunit: Fix potential null dereference in kunit_devi

In the Linux kernel, the following vulnerability has been resolved: kunit: string-stream: Fix a UAF bug in kunit_init_s

In the Linux kernel, the following vulnerability has been resolved: mtd: spinand: winbond: Fix 512GW, 01GW, 01JW and 02