LOW Severity CVEs

A vulnerability in Brocade Fabric OS before 9.2.1 could allow an authenticated attacker with admin privileges using the

The DDNS function uses an insecure HTTP connection or fails to validate the SSL/TLS certificate when querying an externa

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Rest/Handl

IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 through FW950.F0 may expos

A vulnerability has been discovered in GitLab CE/EE affecting all versions starting with 16.8 before 18.5.0 that could h

A flaw was found in Keycloak Admin API. This vulnerability allows an administrator with limited privileges to retrieve s

A vulnerability was found in D-Link DSL-6641K N8.TR069.20131126. Affected by this issue is the function doSubmitPPP of t

A vulnerability has been found in DJI Mavic Mini, Air, Spark and Mini SE up to 01.00.0500. Affected by this vulnerabilit

A vulnerability was detected in D-Link DSL-6641K N8.TR069.20131126. Affected by this issue is the function ad_virtual_se

A weakness has been identified in projectworlds House Rental and Property Listing 1.0. This vulnerability affects unknow

A vulnerability was identified in D-Link DIR-823X 250416. This vulnerability affects the function sub_40AC74 of the comp

Llama Stack (aka llama-stack) before 0.4.0rc3 does not censor the pgvector password in the initialization log.

Kimi Agent SDK is a set of libraries that expose the Kimi Code (Kimi CLI) agent runtime in applications. The vsix-publis

Tanium addressed an improper access controls vulnerability in Interact.

A vulnerability was found in Bdtask Bhojon All-In-One Restaurant Management System up to 20260116. Impacted is an unknow

A vulnerability was found in jishenghua jshERP up to 3.6. The impacted element is the function install of the file /jshE

Multiple MFPs provided by Brother Industries, Ltd. does not properly validate server certificates, which may allow a man

A vulnerability was identified in D-Link DCS-700L 1.03.09. The affected element is the function uploadmusic of the file

In the context switch logic Xen attempts to skip an IBPB in the case of a vCPU returning to a CPU on which it was the pr

A vulnerability was identified in rethinkdb up to 2.4.3. Affected by this issue is some unknown functionality of the com

In GnuPG before 2.5.17, a long signature packet length causes parse_signature to return success with sig->data[] set to

Suricata is a network IDS, IPS and NSM engine. Prior to versions 8.0.3 and 7.0.14, various inefficiencies in xff handlin

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ixray-team ixray-1.6-stcop.This issue affect

A flaw was found in Glib's content type parsing logic. This buffer underflow vulnerability occurs because the length of

A vulnerability has been found in iJason-Liu Books_Manager up to 298ba736387ca37810466349af13a0fdf828e99c. This affects

A flaw was found in Keycloak's SAML brokering functionality. When Keycloak is configured as a client in a Security Asser

A flaw was found in NetworkManager. The NetworkManager package allows access to files that may belong to other users. Ne

Tanium addressed an improper input validation vulnerability in Discover.

Tomahawk auth timing attack due to usage of `strcmp` has been identified in Hiawatha webserver version 11.7 which allows

Deserialization of Untrusted Data vulnerability in Apache Karaf Decanter. The Decanter log socket collector exposes th

A vulnerability has been found in code-projects Online Examination System 1.0. Affected is an unknown function of the co

A weakness has been identified in GPAC up to 2.4.0. Affected by this issue is the function dump_isom_rtp of the file app

A security flaw has been discovered in GPAC up to 2.4.0. Affected by this vulnerability is the function DumpMovieInfo of

A vulnerability was identified in GPAC up to 2.4.0. Affected is the function gf_media_export_webvtt_metadata of the file

A security vulnerability has been detected in Beetel 777VR1 up to 01.00.09/01.00.09_55. This issue affects some unknown

A weakness has been identified in Beetel 777VR1 up to 01.00.09/01.00.09_55. This vulnerability affects unknown code of t

A security flaw has been discovered in Beetel 777VR1 up to 01.00.09/01.00.09_55. This affects an unknown part of the com

A vulnerability was determined in lcg0124 BootDo up to 5ccd963c74058036b466e038cff37de4056c1600. Affected by this vulner

The MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor plugin for WordPress is vulnerable to Sens

MyTube is a self-hosted downloader and player for several video websites. Versions 1.7.78 and below have a Mass Assignme

In the Linux kernel, the following vulnerability has been resolved: wifi: avoid kernel-infoleak from struct iw_point s

In the Linux kernel, the following vulnerability has been resolved: net/handshake: restore destructor on submit failure

In libexpat before 2.7.4, XML_ExternalEntityParserCreate does not copy unknown encoding handler user data.

Gitea may send release notification emails for private repositories to users whose access has been revoked. When a repos

Dell PowerScale OneFS, versions 9.5.0.0 through 9.5.1.5, versions 9.6.0.0 through 9.7.1.10, versions 9.8.0.0 through 9.1

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Dolcino dolcino allows Exploiting Incorr

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Justicia justicia allows Exploiting Inco

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Roam roam allows Exploiting Incorrectly

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Overton overton allows Exploiting Incorr

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Innovio innovio allows Exploiting Incorr