LOW Severity CVEs

Improper input validation for some Intel(R) oneAPI Math Kernel Library before version 2025.2 within Ring 3: User Applica

Improper input validation for some Intel QuickAssist Technology software before version 2.6.0 within Ring 3: User Applic

Improper input validation in some firmware for some Intel(R) Graphics Drivers and Intel LTS kernels within Ring 1: Devic

Unrestricted upload of file with dangerous type for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within

Improper access control for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applicatio

Improper privilege management for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Appl

Sensitive information uncleared in resource before release for reuse for some Intel(R) NPU Drivers for Windows before ve

In JetBrains YouTrack before 2025.3.104432 a race condition allowed bypass of helpdesk Agent limit

Spoofing issue in Firefox. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, and Firefox ESR 115.30.

It was possible to upload files with a specific name to a temporary directory, which may result in process crashes and i

Migration Workbench (DX Workbench) in SAP NetWeaver Application Server for ABAP fails to trigger a malware scan when an

changedetection.io is a free open source web page change detection tool. A Stored Cross Site Scripting is present in cha

In JetBrains Hub before 2025.3.104432 a race condition allowed bypass of the Agent-user limit

In JetBrains Hub before 2025.3.104992 a race condition allowed bypass of the user limit via invitations

A vulnerability was determined in liweiyi ChestnutCMS up to 1.5.8. This vulnerability affects the function resourceDownl

A flaw has been found in qianfox FoxCMS up to 1.2.16. Affected by this vulnerability is the function add/edit of the fil

A vulnerability was detected in EverShop up to 2.0.1. Affected is an unknown function of the file /src/modules/oms/graph

A security flaw has been discovered in yungifez Skuul School Management System up to 2.6.5. The impacted element is an u

A vulnerability was identified in newbee-mall-plus up to 2.4.1. This vulnerability affects the function executeSeckill o

A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta. This issue may have

Use after free in V8 in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform out of bou

Weblate is a web based localization tool. In versions 5.14 and below, Weblate leaks the IP address of the project membe

Improper input validation in Samsung Email prior to version 6.2.06.0 allows local attackers to launch arbitrary activity

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.

This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sequoia 15.7.2,

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 1

A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 18.7.2 and iPadOS 18.

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.1 and iPadOS 26.1. An atta

A logic issue was addressed with improved checks. This issue is fixed in iOS 26 and iPadOS 26. An attacker with physical

A vulnerability was identified in fushengqian fuint up to 41e26be8a2c609413a0feaa69bdad33a71ae8032. Affected by this iss

A vulnerability was detected in PHPGurukul News Portal 1.0. The impacted element is an unknown function of the file /onp

A vulnerability was identified in LogicalDOC Community Edition up to 9.2.1. This vulnerability affects unknown code of t

A vulnerability was determined in LogicalDOC Community Edition up to 9.2.1. This affects an unknown part of the componen

IBM Jazz for Service Management 1.1.3.0 through 1.1.3.25 does not set the secure attribute on authorization tokens or se

Missing Authorization vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite al

Missing Authorization vulnerability in Rank Math SEO Rank Math SEO seo-by-rank-math allows Exploiting Incorrectly Config

QLowEnergyController in Qt before 6.8.2 mishandles malformed Bluetooth ATT commands, leading to an out-of-bounds read (o

The NS Maintenance Mode for WP WordPress plugin through 1.3.1 does not sanitise and escape some of its settings, which c

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Umami Analy

LiteLLM Information health API_KEY Information Disclosure Vulnerability. This vulnerability allows remote attackers to d

The Dyson MQTT server (2022 and possibly later) allows publications and subscriptions by a client that has the correct v

GitHub Workflow Updater is a VS Code extension that automatically pins GitHub Actions to specific commits for enhanced s

A flaw was found in Keycloak. The Keycloak guides recommend to not expose /admin path to the outside in case the install

A flaw has been found in SourceCodester Student Grades Management System 1.0. This affects the function delete_user of t

A security flaw has been discovered in Willow CMS up to 1.4.0. This issue affects some unknown processing of the file /a

A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0. Impacted is an unknown function of the file vie

A vulnerability was detected in PHPGurukul Curfew e-Pass Management System 1.0. This issue affects some unknown processi

A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0. The impacted element is an unknown function of

A vulnerability was identified in code-projects Client Details System 1.0. The affected element is an unknown function o