2025

2nd Order SQL injection vulnerabilities in ASPECT allow unintended access and manipulation of database repositories if a

Predictable filename vulnerabilities in ASPECT may expose sensitive information to a potential attacker if administrator

One way hash with predictable salt vulnerabilities in ASPECT may expose sensitive information to a potential attackerThi

Windows permissions for ASPECT configuration toolsets are not fully secured allow-ing exposure of configuration informat

Fiber is an Express-inspired web framework written in Go. Starting in version 2.52.6 and prior to version 2.52.7, `fiber

Remote Code Execution vulnerabilities are present in ASPECT if session administrator credentials become compromised This

Remote Code Execution vulnerabilities are present in ASPECT if session administra-tor credentials become compromised. Th

In Infoblox NETMRI before 7.6.1, authenticated users can perform SQL injection attacks.

Relative Path Traversal vulnerabilities in ASPECT allow access to file resources if session administrator credentials be

Servlet injection vulnerabilities in ASPECT allow remote code execution if session administrator credentials become comp

SQL injection vulnerabilities in ASPECT allow unintended access and manipulation of database repositories if session adm

Asterisk is an open-source private branch exchange (PBX). Prior to versions 18.26.2, 20.14.1, 21.9.1, and 22.4.1 of Aste

Asterisk is an open-source private branch exchange (PBX). Prior to versions 18.26.2, 20.14.1, 21.9.1, and 22.4.1 of Aste

Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. Starting in ve

Insecure permissions in autodeploy-layer v1.2.0 allows attackers to escalate privileges and compromise the customer clou

An insecure file system permissions vulnerability in MSP360 Backup 8.0 allows a low privileged user to execute commands

IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform unau

IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform unau

Absolute File Traversal vulnerabilities in ASPECT allows access and modification of unintended resources. This issue aff

A vulnerability classified as critical was found in Campcodes Cybercafe Management System 1.0. Affected by this vulnerab

Insecure permissions in fc-stable-diffusion-plus v1.0.18 allows attackers to escalate privileges and compromise the cust

A vulnerability classified as critical has been found in Tenda FH451 1.0.0.9. Affected is the function webExcptypemanFil

A flaw has been found in PHPGurukul/Campcodes Online Shopping Portal 1.0. Affected by this vulnerability is an unknown f

A flaw was found in gnome-remote-desktop. Once gnome-remote-desktop listens for RDP connections, an unauthenticated atta

Insecure permissions in measure-cold-start v1.4.1 allows attackers to escalate privileges and compromise the customer cl

An issue was discovered in Infoblox NETMRI before 7.6.1. Remote Unauthenticated Command Injection can occur.

An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 befor

A vulnerability was detected in PHPGurukul/Campcodes Online Shopping Portal 1.0. Affected is an unknown function of the

A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been classified as critical. This affects an u

A vulnerability was found in FreeFloat FTP Server 1.0 and classified as critical. Affected by this issue is some unknown

A vulnerability has been found in FreeFloat FTP Server 1.0 and classified as critical. Affected by this vulnerability is

Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. Starting in ve

Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. Starting in ve

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Tridium Niagara Fram

Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on QNX, Tridium Niagara

Use of Password Hash With Insufficient Computational Effort vulnerability in Tridium Niagara Framework on Windows, Linux

Uncontrolled Search Path Element vulnerability in Forcepoint FIE Endpoint allows Privilege Escalation, Code Injection, H

A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. Affected is an unknown functio

A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0. This issue affects some u

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection while fetching

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the logon ev

Ericsson RAN Compute and Site Controller 6610 contains in certain configurations a high severity vulnerability where imp

A cross-site scripting (XSS) vulnerability exists in Grafana caused by combining a client path traversal and open redire

GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows

Cloudera Hue Ace Editor Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attac

eCharge Hardy Barth cPH2 index.php Command Injection Remote Code Execution Vulnerability. This vulnerability allows netw

eCharge Hardy Barth cPH2 nwcheckexec.php dest Command Injection Remote Code Execution Vulnerability. This vulnerability

eCharge Hardy Barth cPH2 check_req.php ntp Command Injection Remote Code Execution Vulnerability. This vulnerability all

Allegra isZipEntryValide Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attac

MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerabil