2025

A vulnerability was found in yanyutao0402 ChanCMS up to 3.3.2. This vulnerability affects the function getArticle of the

radare2 v5.9.8 and before contains a memory leak in the function bochs_open.

In NextX Duo before 6.4.4, in the HTTP client module, the network support code for Eclipse Foundation ThreadX, the parsi

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jason C. Memberlit

A vulnerability has been found in yanyutao0402 ChanCMS up to 3.3.2. This affects the function hasUse of the file /cms/mo

radare2 v5.9.8 and before contains a memory leak in the function r2r_subprocess_init.

radare2 v5.9.8 and before contains a memory leak in the function r_bin_object_new.

Incorrect Authorization vulnerability in ash-project ash allows Authentication Bypass. This vulnerability is associated

A flaw has been found in yanyutao0402 ChanCMS up to 3.3.2. Affected by this issue is the function update of the file /cm

A vulnerability was detected in yanyutao0402 ChanCMS up to 3.3.2. Affected by this vulnerability is the function findFie

Some versions of Hikvision's iSecure Center Product contain insufficient parameter validation, resulting in a command in

Some versions of Hikvision's iSecure Center Product have an improper file upload control vulnerability. Due to the impro

The Binary MLM Plan plugin for WordPress is vulnerable to insecure direct object reference in versions up to, and includ

In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read iss

In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read iss

In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read iss

In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read iss

In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read iss

In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bou

In NextX Duo's snmp addon versions before 6.4.4, a part of the Eclipse Foundation ThreadX, an attacker could cause an ou

In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bou

In Eclipse Foundation NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a p

Versions of the package mammoth from 0.3.25 and before 1.11.0; versions of the package mammoth from 0.3.25 and before 1.

An Use of Hard-coded Credentials vulnerability has been identified in Moxa’s network security appliances and routers. Th

An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and rou

The iSherlock developed by HGiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to

Agentflow developed by Flowring has an Use of Hard-coded Cryptographic Key vulnerability, allowing unauthenticated remot

Agentflow developed by Flowring has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers t

An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and rou

An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and rou

An Incorrect Authorization vulnerability has been identified in Moxa’s network security appliances and routers. A flaw i

MinIO is a high-performance object storage system. In all versions prior to RELEASE.2025-10-15T17-29-55Z, a privilege es

Envoy is an open source edge and service proxy. Envoy versions earlier than 1.36.2, 1.35.6, 1.34.10, and 1.33.12 contain

In Xpdf 4.05 (and earlier), a PDF object loop in a CMap, via the "UseCMap" entry, leads to infinite recursion and a stac

A vulnerability was identified in NucleoidAI Nucleoid up to 0.7.10. The impacted element is the function extension.apply

HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a credential leakage which could allow an attacker to access

A divide-by-zero in VirtIO network device emulation in BitVisor from commit 108df6 (2020-05-20) to commit 480907 (2025-0

radare2 v.5.9.8 and before contains a memory leak in the function _load_relocations.

Drawing-Captcha APP provides interactive, engaging verification for Web-Based Applications. The vulnerability is a Host

The Angular SSR is a server-rise rendering tool for Angular applications. The vulnerability is a Server-Side Request For

MAS (Matrix Authentication Service) is a user management and authentication service for Matrix homeservers, written and

ClipBucket V5 provides open source video hosting with PHP. In version5.5.2 - #140 and earlier, a Blind SQL injection vul

Bagisto is an open source laravel eCommerce platform. In Bagisto v2.3.7, the TinyMCE image upload functionality allows a

Bagisto is an open source laravel eCommerce platform. When product data that begins with a spreadsheet formula character

Bagisto is an open source laravel eCommerce platform. Bagisto v2.3.7 is vulnerable to Server-Side Template Injection (SS

Bagisto is an open source laravel eCommerce platform. In Bagisto v2.3.7, the TinyMCE image upload functionality allows a

Bagisto is an open source laravel eCommerce platform. In Bagisto v2.3.7, the “Create New Customer” feature (in the admin

An out-of-bounds write in VirtIO network device emulation in BitVisor from commit 108df6 (2020-05-20) to commit 480907 (

An arbitrary file upload vulnerability in SageMath, Inc CoCalc before commit 0d2ff58 allows attackers to execute arbitra

Reolink Video Doorbell WiFi DB_566128M5MP_W performs insufficient validation of firmware update signatures. This allows