2025

`zip` is a zip library for rust which supports reading and writing of simple ZIP files. In the archive extraction routin

Expr is an expression language and expression evaluation for Go. Prior to version 1.17.0, if the Expr expression parser

Agate is central authentication server software for OBiBa epidemiology applications. Prior to version 3.3.0, when regist

A stored Cross-site Scripting (XSS) vulnerability affecting Route Management in ENOVIA Collaborative Industry Innovator

A stored Cross-site Scripting (XSS) vulnerability affecting Project Gantt in ENOVIA Collaborative Industry Innovator fro

A stored Cross-site Scripting (XSS) vulnerability affecting Meeting Management in ENOVIA Change Manager from Release 3DE

A stored Cross-site Scripting (XSS) vulnerability affecting 3D Markup in ENOVIA Collaborative Industry Innovator from Re

A stored Cross-site Scripting (XSS) vulnerability affecting Engineering Release in ENOVIA Product Engineering Specialist

A stored Cross-site Scripting (XSS) vulnerability affecting 3DPlay in 3DSwymer from Release 3DEXPERIENCE R2022x through

A stored Cross-site Scripting (XSS) vulnerability affecting 3D Navigate in ENOVIA Collaborative Industry Innovator from

A stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator

A stored Cross-site Scripting (XSS) vulnerability affecting Product Explorer in ENOVIA Collaborative Industry Innovator

A stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovat

A stored Cross-site Scripting (XSS) vulnerability affecting Relations in ENOVIA Collaborative Industry Innovator from Re

A stored Cross-site Scripting (XSS) vulnerability affecting Bookmark Editor in ENOVIA Collaborative Industry Innovator o

A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2022x thr

The DPA countermeasures on Silicon Labs' Series 2 devices are not reseeded periodically as they should be. This may allo

A Use of Hard-coded Cryptographic Key vulnerability [CWE-321] in FortiSandbox version 4.4.6 and below, version 4.2.7 and

An improper access control (CWE-284) vulnerability in FortiWLC version 8.6.0, version 8.5.3 and below, version 8.4.8 and

An improper neutralization of input during web page generation in FortiWLC version 8.6.0, version 8.5.3 and below, versi

A use of hard-coded password vulnerability in FortiWLC version 8.5.2 and below, version 8.4.8 and below, version 8.3.3 t

FortiOS 6.2 running AV engine version 6.00142 and below, FortiOS 6.4 running AV engine version 6.00144 and below and For

An exposure of sensitive information to an unauthorized actor vulnerability in FortiOS version 6.2.4 and below, version

An Improper Neutralization of Input vulnerability affecting FortiGate version 6.2.0 through 6.2.1, 6.0.0 through 6.0.6 i

A use of hard-coded cryptographic key vulnerability in FortiSIEM version 5.2.6 may allow a remote unauthenticated attack

An improper neutralization of input during web page generation in the SSL VPN portal of FortiProxy version 2.0.0, versio

Buffer overflow vulnerability in Immunity Debugger affecting version 1.85, its exploitation could allow a local attacker

A vulnerability was found in PHPGurukul Medical Card Generation System 1.0. It has been classified as critical. This aff

A vulnerability was found in SourceCodester Vehicle Management System 1.0 and classified as problematic. Affected by thi

A vulnerability has been found in viames Pair Framework up to 1.9.11 and classified as critical. Affected by this vulner

A vulnerability, which was classified as problematic, was found in PHPGurukul Human Metapneumovirus Testing Management S

A vulnerability, which was classified as critical, has been found in PHPGurukul Human Metapneumovirus Testing Management

A vulnerability classified as critical was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. This

Broken access control vulnerability in the Innovación y Cualificación local administration plugin ajax.php. This vulnera

A vulnerability classified as critical has been found in PHPGurukul Human Metapneumovirus Testing Management System 1.0.

A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been rated as proble

Broken access control vulnerability in the IcProgress Innovación y Cualificación plugin. This vulnerability allows an at

SQL injection vulnerability in the IcProgreso Innovación y Cualificación plugin. This vulnerability allows an attacker t

SQL injection vulnerability in the Innovación y Cualificación local administration plugin ajax.php. This vulnerability a

Improper Neutralization of Special Elements used in a Command vulnerability allows OS Command Injection via RCE. This

Improper Neutralization of Special Elements used in a Command vulnerability allows OS Command Injection.This issue affec

A vulnerability was found in TOTOLINK EX1800T up to 9.1.0cu.2112_B20220316. It has been declared as critical. Affected b

A vulnerability was found in TOTOLINK EX1800T up to 9.1.0cu.2112_B20220316. It has been classified as critical. Affected

A vulnerability was found in WebAssembly wabt 1.0.36 and classified as critical. This issue affects the function wabt::i

A vulnerability has been found in Oiwtech OIW-2431APGN-HP 2.5.3-B20131128 and classified as critical. This vulnerability

A vulnerability, which was classified as problematic, was found in gougucms 4.08.18. This affects the function add of th

A vulnerability, which was classified as problematic, has been found in crmeb_java up to 1.3.4. Affected by this issue i

Zohocorp's ManageEngine Analytics Plus and Zoho Analytics on-premise versions older than 6130 are vulnerable to an AD on

The U-Office Force from e-Excellence has an Arbitrary File Upload vulnerability, allowing remote attackers with regular

The U-Office Force from e-Excellence has an Improper Authentication vulnerability, allowing unauthenticated remote attac