2025

The Sound4 IMPACT web-based management interface is vulnerable to Remote Code Execution (RCE) via a malicious firmware u

A mongoc_bulk_operation_t may read invalid memory if large options are passed.

The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unauthenticated file upload vu

The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unrestricted file upload vulne

The Sencore SMP100 SMP Media Platform (firmware versions V4.2.160, V60.1.4, V60.1.29) is vulnerable to session hijacking

A vulnerability in the command line interface of affected devices could allow an authenticated remote attacker to conduc

A vulnerability in the web-based management interface of affected products could allow an unauthenticated remote attacke

A Cross-Site Request Forgery (CSRF) vulnerability in the manage-students.php component of PHPGurukul Student Record Syst

pnetlab 5.3.11 is vulnerable to Command Injection via the qemu_options parameter.

The comment editing template (dzz/comment/template/edit_form.htm) in DzzOffice 2.3.x lacks adequate security escaping fo

The Eurolab ELTS100_UBX device (firmware version ELTS100v1.UBX) is vulnerable to Broken Access Control due to missing au

A vulnerability in the GRUB2 bootloader has been identified in the normal module. This flaw, a memory Use After Free iss

A vulnerability has been identified in the GRUB2 bootloader's normal command that poses an immediate Denial of Service (

A Use-After-Free vulnerability has been discovered in GRUB's gettext module. This flaw stems from a programming error wh

A vulnerability has been identified in the GRUB (Grand Unified Bootloader) component. This flaw occurs because the bootl

Unsafe Deserialization vulnerability in Modular Max Serve before 25.6, specifically when the "--experimental-enable-kvca

Incorrect access control in mihomo v1.19.11 allows authenticated attackers with low-level privileges to read arbitrary f

A use-after-free vulnerability has been identified in the GNU GRUB (Grand Unified Bootloader). The flaw occurs because t

A vulnerability has been identified in the GRUB2 bootloader's network module that poses an immediate Denial of Service (

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an ema

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email

HCL Connections is vulnerable to a sensitive information disclosure vulnerability which could allow a user to obtain sen

A command injection vulnerability has been identified in the command line interface of the HPE Aruba Networking Airwave

A broken access control (BAC) vulnerability in the web-based management interface could allow an authenticated remote at

A vulnerability in the web management interface of the AOS-CX OS user authentication service could allow an authenticate

A command injection vulnerability exists in the AOS-CX Operating System. Successful exploitation could allow an authenti

A command injection vulnerability exists in the AOS-CX Operating System. Successful exploitation could allow an authenti

A platform-level denial-of-service (DoS) vulnerability exists in ArubaOS-CX software. Successful exploitation of this vu

A vulnerability in the SSH restricted shell interface of the network management services allows improper access control

Multiple vulnerabilities exist in cbor2 through version 5.7.0 in the decode_definite_long_string() function of the C ext

Host Header Injection vulnerability in Backdrop CMS 1.32.1 allows attackers to manipulate the Host header in password re

DzzOffice v2.3.7 and before is vulnerable to Arbitrary File Upload in /dzz/system/ueditor/php/controller.php.

DzzOffice v2.3.7 and before is vulnerable to SQL Injection in explorer/groupmanage.

kishan0725 Hospital Management System has a Cross-Site Scripting (XSS) vulnerability in appsearch.php via the email para

Requarks Wiki.js 2.5.307 does not properly revoke or invalidate active JWT tokens when a user logs out. As a result, pre

eProsima Fast-DDS v3.3 and before has an infinite loop vulnerability caused by integer overflow in the Time_t:: fraction

kishan0725 Hospital Management System v4 has an Insecure Direct Object Reference (IDOR) vulnerability in the appointment

kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection in admin-panel1.php, specifically in the deleti

A remote command execution (RCE) vulnerability was discovered in all H3C ERG3/ERG5 series routers and XiaoBei series rou

A Cleartext Storage of Sensitive Information in Memory vulnerability [CWE-316] in Fortinet FortiPAM 1.6.0, FortiPAM 1.5

A use of hard-coded credentials vulnerability in Fortinet FortiWeb 7.6.0, FortiWeb 7.4 all versions, FortiWeb 7.2 all ve

An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] vulnerabi

A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiO

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vul

Plaintext password storage in Kotaemon 0.11.0 in the client's localStorage.

Cross site scripting (XSS) vulnerability in Kotaemon 0.11.0 allowing attackers to execute arbitrary code via a crafted P

The openml/openml.org web application version v2.0.20241110 uses predictable MD5-based tokens for critical user workflow

An improper neutralization of crlf sequences ('crlf injection') vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3,

An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiADC 7.4.0, FortiADC 7.2 all

An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS