2025

A vulnerability, which was classified as problematic, was found in Tenda AC9 15.03.02.13. This affects an unknown part.

A vulnerability classified as critical was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. Affected by this

A vulnerability classified as critical has been found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. Affected is

Pion Interceptor is a framework for building RTP/RTCP communication software. Versions v0.1.36 through v0.1.38 contain a

CyberData 011209 Intercom could allow an unauthenticated user access to the Web Interface through an alternate path.

A vulnerability was found in vuejs vue-cli up to 5.0.8. It has been rated as problematic. This issue affects the functio

A vulnerability was found in tarojs taro up to 4.1.1. It has been declared as problematic. This vulnerability affects un

HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.3, the `gitImportS

HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.0, in the HAX site

HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.0, an authenticate

HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.0, the application

Caido is a web security auditing toolkit. Prior to version 0.48.0, due to the lack of protection for DNS rebinding, Caid

A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped in

A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when ha

A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be trigge

A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the

A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data

A vulnerability was found in Metabase 54.10. It has been classified as problematic. This affects the function parseDataU

A vulnerability, which was classified as problematic, has been found in RocketChat up to 7.6.1. This issue affects the f

A vulnerability classified as problematic was found in Unitech pm2 up to 6.0.6. This vulnerability affects unknown code

A vulnerability classified as problematic has been found in actions toolkit 0.5.0. This affects the function globEscape

A vulnerability was found in juliangruber brace-expansion up to 1.1.11/2.0.1/3.0.0/4.0.0. It has been rated as problemat

A vulnerability was found in jsnjfz WebStack-Guns 1.0. It has been declared as problematic. Affected by this vulnerabili

Exposure of sensitive data in active sessions in Lablup's BackendAI allows attackers to retrieve credentials for users o

Missing Authentication in the registration feature of Lablup's BackendAI allows arbitrary users to create user accounts

Missing Authorization in Lablup's BackendAI allows attackers to takeover all active sessions; Accessing, stealing, or al

Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to

A vulnerability was found in jsnjfz WebStack-Guns 1.0. It has been classified as problematic. Affected is an unknown fun

listmonk is a standalone, self-hosted, newsletter and mailing list manager. Starting in version 4.0.0 and prior to versi

A stored cross-site scripting (XSS) vulnerability in Anchor CMS v0.12.7 allows attackers to inject malicious JavaScript

Vigybag v1.0 and before is vulnerable to Cross Site Scripting (XSS) via the upload profile picture function under my pro

react-native-keys 0.7.11 is vulnerable to sensitive information disclosure (remote) as encryption cipher and Base64 chun

An issue in KeeperChat IOS Application v.5.8.8 allows a physically proximate attacker to escalate privileges via the Bio

A Host Header injection vulnerability in the password reset function of VigyBag Open Source Online Shop commit 3f0e21b a

A vulnerability was found in Emlog up to 2.5.7 and classified as problematic. This issue affects some unknown processing

Path Traversal: '.../...//' vulnerability in Mikado-Themes Grill and Chow grillandchow allows PHP Local File Inclusion.T

Path Traversal: '.../...//' vulnerability in Mikado-Themes GrandPrix grandprix allows PHP Local File Inclusion.This issu

Path Traversal: '.../...//' vulnerability in Mikado-Themes MediClinic mediclinic allows PHP Local File Inclusion.This is

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Missing Authorization vulnerability in WP Swings Membership For WooCommerce membership-for-woocommerce allows Accessing

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mystyleplatform My

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Richard Perdaan WC

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ThimPress WP Pipes allow