2025

IBM Aspera Faspex 5.0.0 through 5.0.10 could allow a privileged user to make system changes without proper access contro

IBM Aspera Faspex 5.0.0 through 5.0.10 does not require that users should have strong passwords by default, which makes

IBM Aspera Faspex 5.0.0 through 5.0.10 does not require that users should have strong passwords by default, which makes

Snowflake PHP PDO Driver is a driver that uses the PHP Data Objects (PDO) extension to connect to the Snowflake database

Twig is a template language for PHP. When using the ?? operator, output escaping was missing for the expression on the l

An issue in the reset password interface of ruoyi v4.8.0 allows attackers with Admin privileges to cause a Denial of Ser

Insecure permissions in RuoYi v4.8.0 allows authenticated attackers to escalate privileges by assigning themselves highe

RuoYi v4.8.0 was discovered to contain a SQL injection vulnerability via the orderby parameter at /monitor/online/list.

The Divi Torque Lite – Best Divi Addon, Extensions, Modules & Social Modules plugin for WordPress is vulnerable to Store

The Target Video Easy Publish plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's brid_ov

An attacker with access to an HX 10.0.0 and previous versions, may send specially-crafted data to the HX console. The

The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is

A vulnerability was found in code-projects Job Recruitment 1.0. It has been rated as problematic. This issue affects som

The old versions of EXIF Viewer Classic contain a cross-site scripting vulnerability caused by improper handling of EXIF

IBM Security Verify Governance 10.0.2 Identity Manager uses a one-way cryptographic hash against an input that should

A vulnerability has been found in ESAFENET CDG V5 and classified as critical. Affected by this vulnerability is an unkno

A vulnerability, which was classified as critical, was found in ESAFENET CDG V5. Affected is an unknown function of the

A vulnerability, which was classified as critical, has been found in ESAFENET CDG V5. This issue affects some unknown pr

IBM Security Verify Governance 10.0.2 Identity Manager can transmit user credentials in clear text that could be obtaine

A vulnerability classified as critical has been found in ESAFENET CDG V5. This affects an unknown part of the file /done

A vulnerability was found in ESAFENET CDG V5. It has been rated as critical. Affected by this issue is some unknown func

A reflected cross-site scripting (XSS) vulnerability in Audemium ERP <=0.9.0 allows remote attackers to execute an arbit

A vulnerability was found in ESAFENET CDG V5. It has been classified as critical. Affected is an unknown function of the

The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting (XSS) due to improper handling of directory listi

Hive creates a credentials file to a temporary directory in the file system with permissions 644 by default when the fil

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Snap Deploy

In validateSsid of WifiConfigurationUtil.java, there is a possible way to overflow a system configuration file due to a

In Source of ZipFile.java, there is a possible way for an attacker to execute arbitrary code by manipulating Dynamic Cod

A vulnerability, which was classified as problematic, was found in pankajindevops scale up to 20241113. This affects an

A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated rem

A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated rem

A vulnerability in the web management interface of HPE Aruba Networking Fabric Composer could allow an authenticated rem

A vulnerability in the web-based management interface of HPE Aruba Networking Fabric Composer could allow an authenticat

A privilege escalation vulnerability exists in the web-based management interface of HPE Aruba Networking Fabric Compose

CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability exists when a

In BnAudioPolicyService::onTransact of IAudioPolicyService.cpp, there is a possible information disclosure due to uninit

In HeifDataSource::readAt of HeifDecoderImpl.cpp, there is a possible out of bounds read due to an integer overflow. Thi

In HeifDecoderImpl::getScanline of HeifDecoderImpl.cpp, there is a possible out of bounds read due to improper input val

EWON Flexy 202 transmits user credentials in clear text with no encryption when a user is added, or user credentials are

An unprivileged context can trigger a data memory-dependent prefetch engine to fetch the contents of a privileged locati

A malformed packet can cause a buffer overflow in the NWK/APS layer of the Ember ZNet stack and lead to an assert

A vulnerability, which was classified as critical, has been found in Pimcore customer-data-framework up to 4.2.0. Affect

The vulnerability was found in OpenShift Service Mesh 2.6.3 and 2.5.6. This issue occurs due to improper sanitization of

A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkConta

A flaw was found in Infinispan, when using JGroups with JDBC_PING. This issue occurs when an application inadvertently e

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 prior to 17.5.5, from 17.6 prior

Use of Arrays.equals() in LlapSignerImpl in Apache Hive to compare message signatures allows attacker to forge a valid s

The Philantro – Donations and Donor Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

The ElementsKit Pro plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the ‘url’ parameter

The MailUp Auto Subscription plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and