LOW Severity CVEs

A security vulnerability has been detected in Qualitor up to 8.24.73. The impacted element is an unknown function of the

Malwarebytes 1.0.14 for Linux doesn't properly compute signatures in some scenarios. This allows a bypass of detection.

SolarEdge SE3680H has unauthenticated disclosure of sensitive information during the bootloader loop. While the device r

The WP Fastest Cache Premium plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, an

AzuraCast is a self-hosted, all-in-one web radio management suite. Versions 0.23.1 mistakenly include an API endpoint th

When a user configures the NAS to retrieve UPS status or control the UPS, a non-enforced TLS certificate verification ca

A security vulnerability has been detected in yangshare warehouseManager 仓库管理系统 1.1.0. This affects the function addCust

In JetBrains TeamCity before 2025.11 path traversal was possible via file upload

In JetBrains TeamCity before 2025.11 improper access control could expose GitHub App token's metadata

In JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to local paths disclosure

An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2. Opening a malicious PDF

A security flaw has been discovered in baowzh hfly up to 638ff9abe9078bc977c132b37acbe1900b63491c. This issue affects so

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.6 before 18.4.6, 18.5 before 18.5.4, and 1

TableProgressTracking is a MediaWiki extension to track progress against specific criterion. Versions 1.2.0 and below do

It was discovered that process_crash() in data/apport in Canonical's Apport crash reporting tool may create crash files

A cross-site request forgery (CSRF) vulnerability in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in TAC Informa

A flaw was found in Keycloak Admin REST (Representational State Transfer) API. This vulnerability allows information dis

Mastodon is a free, open-source social network server based on ActivityPub. Versions 4.2.27 and prior, 4.3.0-beta.1 thro

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by

Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier are affected by

An improper access control vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all

A direct request ('forced browsing') vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticato

An improper input validation vulnerability in the NETGEAR Nighthawk R7000P (end of service) routers lets an authenticate

Android App "Brother iPrint&Scan" versions 6.13.7 and earlier improperly uses an external cache directory. If exploited,

Missing Authorization vulnerability in Bowo Admin and Site Enhancements (ASE) admin-site-enhancements allows Exploiting

Missing Authorization vulnerability in Ronald Huereca Photo Block photo-block allows Exploiting Incorrectly Configured A

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4). Affected applications con

IBM QRadar SIEM 7.5 - 7.5.0 UP14 IF01 is affected by an information disclosure vulnerability involving exposure of direc

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow a privileged user t

A stored cross-site scripting vulnerability exists in the web management interface of the R.V.R. Elettronica TLK302T tel

phpIPAM v1.7.3 contains a Cross-Site Request Forgery (CSRF) vulnerability in the database export functionality. The gene

A flaw has been found in GreenCMS 2.3.0603. Affected by this issue is some unknown functionality of the file /Admin/Cont

A weakness has been identified in Yealink SIP-T21P E2 52.84.0.15. Impacted is an unknown function of the component Local

Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may a

Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may a

Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may a

Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may a

A vulnerability was detected in SourceCodester Online Banking System 1.0. This impacts an unknown function of the file /

A vulnerability was found in code-projects Chamber of Commerce Membership Management System 1.0. Impacted is an unknown

A vulnerability was found in alokjaiswal Hotel-Management-services-using-MYSQL-and-php up to 5f8b60a7aa6c06a5632de569d4e

A vulnerability has been found in alokjaiswal Hotel-Management-services-using-MYSQL-and-php up to 5f8b60a7aa6c06a5632de5

A vulnerability was identified in code-projects Employee Profile Management System 1.0. This issue affects some unknown

A security flaw has been discovered in Grandstream GXP1625 1.0.7.4. The impacted element is an unknown function of the f

HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to 1.10.4, some of HedgeDoc's OA

Nextcloud Twofactor WebAuthn is the WebAuthn Two-Factor Provider for Nextcloud. Prior to 1.4.2 and 2.4.1, a missing owne

Nextcloud talk is a video & audio conferencing app for Nextcloud. Prior to 20.1.8 and 21.1.2, a participant with chat pe

Contacts app for Nextcloud easily syncs contacts from various devices with your Nextcloud and allows editing. Prior to 5

Nextcloud Desktop is the desktop sync client for Nextcloud. Prior to 3.16.5, when trying to manually lock a file inside

Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integra