LOW Severity CVEs

A vulnerability has been found in Smartstore up to 6.2.0. The affected element is an unknown function of the file /check

A vulnerability was detected in LionCoders SalePro POS up to 5.5.0. This issue affects some unknown processing of the co

A vulnerability has been found in Harness 3.3.0. Affected is an unknown function of the file /api/v1/login of the compon

A security vulnerability has been detected in htmly up to 3.1.0. The impacted element is an unknown function of the file

Mattermost versions 10.5.x <= 10.5.8, 9.11.x <= 9.11.17 fail to properly validate access controls which allows any authe

PureVPN client applications on Linux through September 2025 mishandle firewalling. They flush the system's existing ipta

PureVPN client applications on Linux through September 2025 allow IPv6 traffic to leak outside the VPN tunnel upon netwo

A vulnerability has been found in youth-is-as-pale-as-poetry e-learning 1.0. Impacted is the function encryptSecret of t

A security flaw has been discovered in Tor up to 0.4.7.16/0.4.8.17. Impacted is an unknown function of the component Oni

In some circumstances, when DNSdist is configured to use the nghttp2 library to process incoming DNS over HTTPS queries,

A vulnerability has been found in wangchenyi1996 chat_forum up to 80bdb92f5b460d36cab36e530a2c618acef5afd2. This impacts

A security flaw has been discovered in itsourcecode Online Petshop Management System 1.0. The affected element is an unk

A vulnerability was identified in itsourcecode Online Petshop Management System 1.0. Impacted is an unknown function of

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the code in the s

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, DragonFly2 uses t

Nuxt is an open-source web development framework for Vue.js. Prior to 3.19.0 and 4.1.0, A client-side path traversal vul

A weakness has been identified in Portabilis i-Educar up to 2.10. This affects an unknown function of the file /intranet

A vulnerability was identified in Portabilis i-Educar up to 2.10. Impacted is an unknown function of the file /intranet/

In Alludo MindManager before 25.0.208 on Windows, attackers could potentially execute code as other local users on the s

psPAS PowerShell module does not explicitly enforce TLS 1.2 within the 'Get-PASSAMLResponse' function during the SAML au

There is an an information disclosure vulnerability in ZTE T5400. Due to improper configuration of the access control me

Click Studios Passwordstate before 9.9 Build 9972 has a potential authentication bypass for Passwordstate emergency acce

The ip (aka node-ip) package through 2.0.1 (in NPM) might allow SSRF because the IP address value 0 is improperly catego

The ip (aka node-ip) package through 2.0.1 (in NPM) might allow SSRF because the IP address value 017700000001 is improp

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.7 and iPadOS 18

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.7 and iPadOS 18

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26 and iPadOS 26,

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. An app may be abl

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia

An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Tahoe 26. An app may be

libocpp before 0.28.0 allows a denial of service (EVerest crash) because a secondary exception is thrown during error me

The OCPP implementation in libocpp before 0.26.2 allows a denial of service (EVerest crash) via JSON input larger than 2

feiskyer mcp-kubernetes-server through 0.1.11 allows OS command injection, even in read-only mode, via /mcp/kubectl beca

feiskyer mcp-kubernetes-server through 0.1.11 does not consider chained commands in the implementation of --disable-writ

Mattermost versions 10.5.x <= 10.5.9 fail to properly validate redirect URLs which allows attackers to redirect users to

A vulnerability was identified in IbuyuCMS up to 2.6.3. Impacted is an unknown function of the file /admin/article.php?a

A vulnerability was found in newbee-mall 1.0. Impacted is the function mallKaptcha of the file /common/mall/kaptcha. The

IBM QRadar SIEM 7.5 through 7.5 Update Pack 13 Independent Fix 01 could allow a local privileged user to perform unautho

A vulnerability was identified in Selleo Mentingo 2025.08.27. This issue affects some unknown processing of the file /ap

A security vulnerability has been detected in Portabilis i-Educar up to 2.10. The affected element is an unknown functio

A weakness has been identified in Portabilis i-Educar up to 2.10. Impacted is an unknown function of the file /intranet/

A vulnerability was identified in MiczFlor RPi-Jukebox-RFID up to 2.8.0. This vulnerability affects unknown code of the

A vulnerability was determined in MiczFlor RPi-Jukebox-RFID up to 2.8.0. This affects an unknown part of the file /htdoc

A vulnerability was found in MiczFlor RPi-Jukebox-RFID up to 2.8.0. Affected by this issue is some unknown functionality

A vulnerability has been found in MiczFlor RPi-Jukebox-RFID up to 2.8.0. Affected by this vulnerability is an unknown fu

A flaw has been found in MiczFlor RPi-Jukebox-RFID up to 2.8.0. Affected is an unknown function of the file /htdocs/inc.

A vulnerability was determined in WhatCD Gazelle up to 63b337026d49b5cf63ce4be20fdabdc880112fa3. The affected element is

A vulnerability was found in cdevroe unmark up to 1.9.3. Impacted is an unknown function of the file application/views/m

A vulnerability has been found in cdevroe unmark up to 1.9.3. This issue affects some unknown processing of the file /ap