2025

In Akka through 2.10.6, akka-cluster-metrics uses Java serialization for cluster metrics.

In Netgate pfSense CE 2.8.0, the "WebCfg - Diagnostics: Command" privilege allows reading arbitrary files via diag_comma

A vulnerability, which was classified as critical, was found in code-projects Inventory Management System 1.0. This affe

The Debian zuluPolkit/CMakeLists.txt file for zuluCrypt through the zulucrypt_6.2.0-1 package has insecure PolicyKit all

A vulnerability, which was classified as critical, has been found in code-projects Payroll Management System 1.0. Affect

A vulnerability classified as critical was found in TOTOLINK A702R up to 4.0.0-B20230721.1521. Affected by this vulnerab

A vulnerability classified as critical has been found in TOTOLINK X15 up to 1.0.0-B20230714.1105. Affected is an unknown

A vulnerability was found in code-projects Inventory Management System 1.0. It has been rated as critical. This issue af

A vulnerability was found in code-projects Inventory Management System 1.0. It has been declared as critical. This vulne

Deserialization of Untrusted Data vulnerability in Apache Seata (incubating). This security vulnerability is the same a

A vulnerability was found in code-projects Inventory Management System 1.0. It has been classified as critical. This aff

A vulnerability was found in code-projects Inventory Management System 1.0 and classified as critical. Affected by this

A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. Affected by

A vulnerability, which was classified as problematic, was found in HDF5 1.14.6. Affected is the function H5O__chunk_prot

The MIB3 infotainment unit used in Skoda and Volkswagen vehicles does not incorporate any privilege separation for the p

The MIB3 unit stores the synchronized phone contact book in clear-text, allowing an attacker with either code execution

A specific flaw exists within the Bluetooth stack of the MIB3 infotainment. The issue results from the lack of proper va

A specific flaw exists within the Bluetooth stack of the MIB3 infotainment system. The issue results from the disabled a

A specific flaw exists within the Bluetooth stack of the MIB3 unit. The issue results from the lack of proper validation

A specific flaw exists within the Bluetooth stack of the MIB3 infotainment. The issue results from the lack of proper va

There is no memory isolation between CPU cores of the MIB3 infotainment. This fact allows an attacker with access to the

A command injection in the networking service of the MIB3 infotainment allows an attacker already presenting in the syst

A heap buffer overflow in the image processing binary of the MIB3 infotainment unit allows an attacker to execute arbitr

A logic flaw leading to a RAM buffer overflow in the bootloader component of the MIB3 infotainment unit allows an attack

An integer overflow in the image processing binary of the MIB3 infotainment unit allows an attacker with local access to

An integer underflow in the image processing binary of the MIB3 infotainment unit allows an attacker with local access t

IBM Informix Dynamic Server 12.10,14.10, and15.0 could allow a remote attacker to cause a denial of service due to an in

A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6. This issue affects the function H5C

A vulnerability classified as problematic was found in HDF5 1.14.6. This vulnerability affects the function H5O__fsinfo_

The MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet plugin for WordPress is vulnerable

In the Linux kernel, the following vulnerability has been resolved: net: ch9200: fix uninitialised access during mii_nw

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: unshare page tables during VMA split, n

The Game Users Share Buttons plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path

The PT Project Notebooks plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization in the

The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in

The BeeTeam368 Extensions plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including

The BeeTeam368 Extensions Pro plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and inclu

The WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress plugin for WordPress is vulnerable to Stored Cross-

IBM Datacap 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to hijack the clicking action of the victim. By pe

IBM Datacap 9.1.7, 9.1.8, and 9.1.9 does not set the secure attribute on authorization tokens or session cookies. Atta

IBM Cognos Analytics 11.2.0 through 12.2.4 Fix Pack 5 and 12.0.0 through 12.0.4 is vulnerable to stored cross-site scrip

IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to hijack the clicking action of the victim.

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator pri

Roo Code is an AI-powered autonomous coding agent. The project-specific MCP configuration for the Roo Code agent is stor

Roo Code is an AI-powered autonomous coding agent. Prior to version 3.20.3, there was an issue where the Roo Code agent'

A vulnerability, which was classified as problematic, was found in code-projects Food Distributor Site 1.0. Affected is

A vulnerability, which was classified as critical, has been found in code-projects Food Distributor Site 1.0. This issue

A vulnerability classified as critical was found in xiaoyunjie openvpn-cms-flask up to 1.2.7. This vulnerability affects

A vulnerability classified as critical has been found in xiaoyunjie openvpn-cms-flask up to 1.2.7. This affects the func