2025

tiny-secp256k1 is a tiny secp256k1 native/JS wrapper. Prior to version 1.1.7, a private key can be extracted on signing

Electron is an open source framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. In

A vulnerability was found in code-projects Simple Pizza Ordering System 1.0. It has been rated as critical. This issue a

Sunshine is a self-hosted game stream host for Moonlight. Prior to version 2025.628.4510, the web UI of Sunshine lacks p

Sunshine is a self-hosted game stream host for Moonlight. Prior to version 2025.628.4510, the web UI of Sunshine lacks p

The Janssen Project is an open-source identity and access management (IAM) platform. Prior to version 1.8.0, the Config

Electron is an open source framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Fro

A vulnerability was found in code-projects Simple Pizza Ordering System 1.0. It has been declared as critical. This vuln

DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.11, there is a bypas

IBM System Storage Virtualization Engine TS7700 3957 VED R5.4 8.54.2.17, R6.0 8.60.0.115, 3948 VED R5.4 8.54.2.17, R6.0

IBM System Storage Virtualization Engine TS7700 3957 VED R5.4 8.54.2.17, R6.0 8.60.0.115, 3948 VED R5.4 8.54.2.17, R6.0

A vulnerability was found in code-projects Simple Pizza Ordering System 1.0. It has been classified as critical. This af

A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this issue

A vulnerability, which was classified as problematic, was found in D-Link DCS-7517 up to 2.02.0. This affects the functi

A vulnerability classified as problematic was found in D-Link DCS-6517 and DCS-7517 up to 2.02.0. Affected by this vulne

A vulnerability classified as critical has been found in PHPGurukul Zoo Management System 2.1. Affected is an unknown fu

Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write v

A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been rated as critical. This issue affects som

DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.11, there is a bypas

A flaw was found in the EDA component of the Ansible Automation Platform, where user-supplied Git branch or refspec valu

A flaw was found in Ansible Automation Platform’s EDA component where user-supplied Git URLs are passed unsanitized to t

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allo

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, previ

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, previ

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, previ

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, previ

Akamai CloudTest before 60 2025.06.09 (12989) allows SSRF.

Akamai CloudTest before 60 2025.06.02 (12988) allows file inclusion via XML External Entity (XXE) injection.

Dell OpenManage Network Integration, versions prior to 3.8, contains an Authentication Bypass by Capture-replay vulnerab

A vulnerability has been found in Dromara RuoYi-Vue-Plus 5.4.0 and classified as critical. Affected by this vulnerabilit

A vulnerability has been found in code-projects Online Hotel Booking 1.0 and classified as critical. This vulnerability

Frappe is a full-stack web application framework. Prior to versions 14.94.3 and 15.58.0, a carefully crafted request cou

A vulnerability, which was classified as critical, was found in TOTOLINK T6 4.1.5cu.748_B20211015. This affects the func

A vulnerability, which was classified as critical, has been found in PHPGurukul Student Record System 3.2. Affected by t

Frappe is a full-stack web application framework. Prior to versions 14.94.2 and 15.57.0, authenticated users could uploa

Frappe is a full-stack web application framework. Prior to versions 14.94.3 and 15.58.0, SQL injection could be achieved

Mattermost versions 10.5.x <= 10.5.5, 9.11.x <= 9.11.15, 10.8.x <= 10.8.0, 10.7.x <= 10.7.2, 10.6.x <= 10.6.5 fail to pr

Mattermost versions 10.5.x <= 10.5.5, 9.11.x <= 9.11.15, 10.8.x <= 10.8.0, 10.7.x <= 10.7.2, 10.6.x <= 10.6.5 fail to pr

An issue D-Link DIR-816-A2 DIR-816A2_FWv1.10CNB05_R1B011D88210 allows a remote attacker to execute arbitrary code via sy

string-math v1.2.2 was discovered to contain a Regex Denial of Service (ReDoS) which is exploited via a crafted input.

Orkes Conductor v3.21.11 allows remote attackers to execute arbitrary OS commands through unrestricted access to Java cl

A vulnerability classified as critical was found in PHPGurukul Student Record System 3.2. Affected by this vulnerability

A vulnerability classified as critical has been found in PHPGurukul Student Record System 3.2. Affected is an unknown fu

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Devinim Sof

A vulnerability was found in PHPGurukul Student Record System 3.2. It has been rated as critical. This issue affects som

A vulnerability was found in PHPGurukul Student Record System 3.2. It has been declared as critical. This vulnerability

IBM Cloud Pak System 2.3.3.6, 2.3.36 iFix1, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, 2.3.4.1, and 2.3.4.1 iFix1 is vulnerable to

A buffer overflow in the formSetCfm() function of Tenda AC1206 1200M 11ac US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 allow

A misconfiguration in the default settings of MikroTik RouterOS 7 and fixed in v7.14 allows incoming IPv6 UDP traceroute