2025

In the Linux kernel, the following vulnerability has been resolved: tee: fix register_shm_helper() In register_shm_hel

In the Linux kernel, the following vulnerability has been resolved: pinctrl: check the return value of pinmux_ops::get_

In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: Check return value of platform_get_res

Multiple CSRF attack vectors in JDownloads component 1.0.0-4.0.47 for Joomla were discovered.

microCLAUDIA in v3.2.0 and prior has an improper access control vulnerability. This flaw allows an authenticated user t

In the Linux kernel, the following vulnerability has been resolved: binder: fix double-free in dbitmap A process might

In the Linux kernel, the following vulnerability has been resolved: net/9p: fix double req put in p9_fd_cancelled Syzk

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Don't (re)check L1 intercepts when comple

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on node footer for non

Improper locking vulnerability in Softing Industrial Automation GmbH gateways allows infected memory and/or resource lea

Webserver crash caused by scanning on TCP port 80 in Softing Industrial Automation GmbH gateways and switch.This issue a

A security flaw has been discovered in code-projects Simple Food Ordering System 1.0. This issue affects some unknown pr

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to blind SQL Injection via t

Use of Hard-Coded Credentials issue exists in MZK-DP300N version 1.07 and earlier, which may allow an attacker within th

A flaw was found in Keycloak. The Keycloak guides recommend to not expose /admin path to the outside in case the install

A flaw has been found in MaxSite CMS up to 109. This issue affects some unknown processing of the file application/maxsi

A vulnerability was detected in MaxSite CMS up to 109. This vulnerability affects unknown code of the file application/m

A vulnerability has been found in Yonyou U8 Cloud up to 5.1sp. The impacted element is an unknown function of the file /

A flaw has been found in Serdar Bayram Ghost Hot Spot up to 20251014. The affected element is an unknown function of the

A vulnerability was detected in ermig1979 AntiDupl up to 2.3.12. Impacted is an unknown function of the file AntiDupl.NE

A security vulnerability has been detected in Campcodes Retro Basketball Shoes Online Store 1.0. This issue affects some

A weakness has been identified in Campcodes Retro Basketball Shoes Online Store 1.0. This vulnerability affects unknown

A security flaw has been discovered in Campcodes Retro Basketball Shoes Online Store 1.0. This affects an unknown part o

A vulnerability was identified in Campcodes Retro Basketball Shoes Online Store 1.0. Affected by this issue is some unkn

A GUI dialog of an application allows to view what files are in the file system without proper authorization.

IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authen

IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authen

IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authen

IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, 5.1, 6.1.0.3, 5.1.0.1, 6.1.0.

A vulnerability was determined in code-projects E-Commerce Website 1.0. Affected by this vulnerability is an unknown fun

A flaw has been found in SourceCodester Student Grades Management System 1.0. This affects the function delete_user of t

Liferay Portal 7.4.0 through 7.4.3.109, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4

CSRF vulnerability in Headless API in Liferay Portal 7.4.0 through 7.4.3.107, and Liferay DXP 2023.Q3.1 through 2023.Q3.

A vulnerability was found in code-projects E-Commerce Website 1.0. Affected is an unknown function of the file /pages/pr

A vulnerability has been found in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pa

eLabFTW is an open source electronic lab notebook for research labs. The application served uploaded SVG files inline. B

PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton. Prior to 4.8.0, users with a loca

Frappe Learning is a learning system that helps users structure their content. In Frappe Learning 2.39.1 and earlier, us

Frappe Learning is a learning management system. A security issue was identified in Frappe Learning 2.39.1 and earlier,

Liferay Portal 7.4.0 through 7.4.3.99, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4

Liferay Portal 7.4.0 through 7.4.3.99, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA thr

A weakness has been identified in Willow CMS up to 1.4.0. Impacted is an unknown function of the file /admin/images/add.

A security flaw has been discovered in Willow CMS up to 1.4.0. This issue affects some unknown processing of the file /a

A security flaw has been discovered in shawon100 RUET OJ up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5. The affected el

A vulnerability was identified in shawon100 RUET OJ up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5. Impacted is an unkno

InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions before 1.6.5 contain a vulnerabili

InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions 1.6.1-SNAPSHOT and earlier contain

InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions 1.6.3-SNAPSHOT and earlier contain

Docker Compose trusts the path information embedded in remote OCI compose artifacts. When a layer includes the annotatio

PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton. PILOS before 4.8.0 exposes the PH