2025

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Crestron Automate VX allows Functionality Mi

passport-wsfed-saml2 provides passport strategy for both WS-fed and SAML2 protocol. A vulnerability present starting in

passport-wsfed-saml2 provides passport strategy for both WS-fed and SAML2 protocol. A vulnerability present starting in

There is a stack overflow vulnerability in Tenda RX3 V1.0br_V16.03.13.11 In the fromSetWifiGusetBasic function of the we

SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admin_comment_news.php.

Incorrect JSON input stringification in Google's Tensorflow serving versions up to 2.18.0 allows for potentially unbound

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Crestron Automate VX allows Functionality Mi

Libxmp through 4.6.2 has a stack-based buffer overflow in depack_pha in loaders/prowizard/pha.c via a malformed Pha form

A vulnerability was found in Quarkus in the quarkus-security-webauthn module. The Quarkus WebAuthn module publishes defa

phpgt/Dom provides access to modern DOM APIs. Versions of phpgt/Dom prior to 4.1.8 expose the GITHUB_TOKEN in the Dom wo

goshs is a SimpleHTTPServer written in Go. Starting in version 0.3.4 and prior to version 1.0.5, running goshs without a

A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024

The identity infrastructure software ZITADEL offers developers the ability to manage user sessions using the Session API

In Tenda RX3 V1.0br_V16.03.13.11 in the GetParentControlInfo function of the web url /goform/GetParentControlInfo, the m

Improper certificate validation in Logstash's TCP output could lead to a man-in-the-middle (MitM) attack in “client” mod

A Prototype pollution vulnerability in Kibana leads to arbitrary code execution via crafted HTTP requests to machine lea

In Optigo Networks ONS NC600 versions 4.2.1-084 through 4.7.2-330, an attacker could connect with the device's ssh serve

Umbraco is a free and open source .NET content management system. Prior to versions 10.8.10 and 13.8.1, based on an anal

Terraform WinDNS Provider allows users to manage their Windows DNS server resources through Terraform. A security issue

MrDoc v0.95 and before is vulnerable to Server-Side Request Forgery (SSRF) in the validate_url function of the app_doc/u

Finit provides fast init for Linux systems. Finit's urandom plugin has a heap buffer overwrite vulnerability at boot whi

vLLM is an inference and serving engine for large language models. In a multi-node vLLM deployment using the V0 engine,

An issue in the component /internals/functions of R-fx Networks Linux Malware Detect v1.6.5 allows attackers to escalate

Dell Storage Center - Dell Storage Manager, version(s) 20.1.20, contain(s) an Improper Neutralization of Special Element

Real Estate Management System v1.0 was discovered to contain a SQL injection vulnerability via the message parameter at

The MQTT add-on of PcVue fails to verify that a remote device’s certificate has not already expired or has not yet becom

A vulnerability, which was classified as critical, was found in Tenda AC8 16.03.34.06. Affected is the function formGetR

A vulnerability, which was classified as critical, has been found in itsourcecode Gym Management System 1.0. This issue

Netgear EX8000 V1.0.0.126 is vulnerable to Command Injection via the Iface parameter in the action_wireless function.

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS fun

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS fun

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS fun

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS fun

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.InternetConnection fu

Dell Storage Center - Dell Storage Manager, version(s) 21.0.20, contain(s) an Improper Neutralization of Input During We

Dell Storage Center - Dell Storage Manager, version(s) 20.0.21, contain(s) an Improper Limitation of a Pathname to a Res

Dell Storage Center - Dell Storage Manager, version(s) 20.1.20, contain(s) an Improper Restriction of XML External Entit

Dell Storage Center - Dell Storage Manager, version(s) 20.1.20, contain(s) an Improper Authentication vulnerability. An

A flaw was found in Quay. When an organization acts as a proxy cache, and a user or robot pulls an image that hasn't bee

A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the

A vulnerability classified as critical was found in itsourcecode Gym Management System 1.0. This vulnerability affects u

A vulnerability classified as critical has been found in PHPGurukul Company Visitor Management System 2.0. This affects

A vulnerability, which was classified as critical, has been found in itsourcecode Gym Management System 1.0. Affected by

FastAPI Guard is a security library for FastAPI that provides middleware to control IPs, log requests, and detect penetr

IBM Maximo Application Suite 9.0 could allow an attacker with some level of access to elevate their privileges due to a

A vulnerability classified as critical was found in itsourcecode Gym Management System 1.0. Affected by this vulnerabili

A vulnerability classified as critical has been found in PHPGurukul Company Visitor Management System 2.0. Affected is a

A vulnerability was found in Tenda RX3 16.03.13.11_multi. It has been rated as critical. This issue affects some unknown

A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02. It has been declared as critical. This vulnerability affects

A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02. It has been classified as critical. This affects the functio