LOW Severity CVEs

cups-filters contains backends, filters, and other software required to get the cups printing service working on operati

A security vulnerability has been detected in Public Knowledge Project omp and ojs 3.3.0/3.4.0/3.5.0. Impacted is an unk

A vulnerability was determined in SourceCodester Online Shop Project 1.0. Impacted is an unknown function of the file /s

A vulnerability was identified in icret EasyImages up to 2.8.6. This affects an unknown part of the file /app/upload.php

A vulnerability was determined in Campcodes Retro Basketball Shoes Online Store 1.0. Affected by this issue is some unkn

Astro is a web framework. Prior to version 5.14.3, a vulnerability has been identified in the Astro framework's developm

A security vulnerability has been detected in mrubyc up to 3.4. This impacts the function mrbc_raw_realloc of the file s

LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.11.0, a weak password

HCL Connections is vulnerable to a sensitive information disclosure vulnerability which could allow a user to obtain sen

An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Drupal core allows Exploiting Incorrec

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Simple mult

Mattermost versions 10.11.x <= 10.11.3, 10.5.x <= 10.5.11 fail to enforce access permissions on the Agents plugin which

A vulnerability has been found in SourceCodester Student Grades Management System 1.0. This issue affects some unknown p

A security flaw has been discovered in SourceCodester Interview Management System 1.0. Affected is an unknown function o

Missing Release of Resource after Effective Lifetime (CWE-772) in the T21 Reader allows an attacker with physical access

The Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without Hardened Runtime. A loc

Freebox v5 HD (firmware = 1.7.20), Freebox v5 Crystal (firmware = 1.7.20), Freebox v6 Révolution r1–r3 (firmware = 4.7.x

GoSign Desktop through 2.4.1 disables TLS certificate validation when configured to use a proxy server. This can be prob

A vulnerability was identified in code-projects Student Information System 2.0. The impacted element is an unknown funct

A flaw has been found in projectsend up to r1720. Impacted is an unknown function of the component File Editor/Custom Do

A security flaw has been discovered in code-projects Simple Cafe Ordering System 1.0. This affects an unknown part of th

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.9 before 18.3.6, 18.4 before 18.4.4, and 1

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.9 before 18.3.6, 18.4 before 18.4.4, and 1

GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 18.3.6, 18.4 before 18.4.4, and 18.5

GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.4, and 18.5 before 18.5.2 that

A weakness has been identified in Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution up to 4.0. This

A vulnerability was identified in pojoin h3blog 1.0. The impacted element is an unknown function of the file /admin/cms/

A vulnerability was determined in pojoin h3blog 1.0. The affected element is an unknown function of the file /admin/cms/

A vulnerability was found in Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System up to 2025032

A flaw has been found in Bdtask/CodeCanyon SalesERP up to 20250728. This vulnerability affects unknown code of the file

A Server-side Request Forgery vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0

An issue was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows remote

A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. There is Exp

Mattermost versions <11.0 fail to properly enforce the "Allow users to view archived channels" setting which allows regu

Astro is a web framework. Starting in version 5.2.0 and prior to version 5.15.6, a Reflected Cross-Site Scripting (XSS)

OpenObserve is a cloud-native observability platform. In versions up to and including 0.16.1, when creating or renaming

Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain a Process Control vulnerability. A low pr

Mattermost versions 10.11.x <= 10.11.3, 10.5.x <= 10.5.11 fail to properly validate team membership permissions in the A

Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against

PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Starting in version 1.7.7 and prior

Wasmtime is a runtime for WebAssembly. Prior to version 38.0.4, 37.0.3, 36.0.3, and 24.0.5, Wasmtime's Rust embedder API

sudo-rs is a memory safe implementation of sudo and su written in Rust. Starting in version 0.2.7 and prior to version 0

An issue was discovered in PyTorch v2.5 and v2.7.1. Omission of profiler.stop() can cause torch.profiler.profile (Python

A security flaw has been discovered in soerennb eXtplorer up to 2.1.15. The affected element is an unknown function of t

CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the for

In Splunk Enterprise versions below 10.0.1, 9.4.5, 9.3.7, and 9.2.9 and Splunk Cloud Platform versions below 9.3.2411.11

In Splunk Enterprise versions below 10.0.1, 9.4.5, 9.3.7, 9.2.9, and Splunk Cloud Platform versions below 10.0.2503.5, 9

Improper conditions check for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications

Improper access control for some Intel(R) PresentMon before version 2.3.1 within Ring 3: User Applications may allow a d