2025

A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnera

A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A

A maliciously crafted 3DM file, when parsed through Autodesk AutoCAD, can force a Use-After-Free vulnerability. A malici

A maliciously crafted SLDPRT file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability.

A maliciously crafted SLDPRT file, when parsed through Autodesk AutoCAD, can force a Memory Corruption vulnerability. A

A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A

A maliciously crafted CATPART file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability.

A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnera

This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the aff

Espressif Esp idf v5.3.0 is vulnerable to Insecure Permissions resulting in Authentication bypass. In the reconnection p

A HTML Injection vulnerability was found in loginsystem/edit-profile.php of the PHPGurukul User Registration & Login and

A cross-site scripting (XSS) vulnerability has been identified in MODX prior to 3.1.0. The vulnerability allows authenti

An issue in SoundCloud IOS application v.7.65.2 allows a local attacker to escalate privileges and obtain sensitive info

A stored cross-site scripting vulnerability exists in FS model S3150-8T2F switches running firmware s3150-8t2f-switch-fs

User Enumeration via Discrepancies in Error Messages in the Celk Sistemas Celk Saude v.3.1.252.1 password recovery funct

Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to buffer overflow via the schedStartTime and schedEndTime

Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the list parameter at /goform/setPp

Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the list parameter at /goform/SetVi

Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the time and timeZone parameters at

Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the deviceId parameter at /goform/s

Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the firewallEn parameter at /goform

Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the startIp and endIp parameters at

Cross Site Scripting vulnerability in PecanProject pecan through v.1.8.0 allows a remote attacker to execute arbitrary c

Cross-site scripting (XSS) vulnerability in Italtel S.p.A. i-MCS NFV v.12.1.0-20211215 allows unauthenticated remote att

Cross Site Scripting vulnerability in Zadarma Zadarma extension v.1.0.11 allows a remote attacker to execute a arbitrary

Improper access control in web extension restriction feature in Devolutions Server 2024.3.4.0 and earlier allows an au

Improper access control in temporary access requests and checkout requests endpoints in Devolutions Server 2024.3.13 and

Exposure of password in web-based SSH authentication component in Devolutions Server 2024.3.13 and earlier allows a user

Exposure of sensitive information in My Personal Credentials password history component in Devolutions Remote Desktop Ma

Exposure of sensitive information in hub data source export feature in Devolutions Remote Desktop Manager 2024.3.29 and

The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to PHP Object Injection in all versions up to,

This vulnerability exists in the CAP back office application due to missing rate limiting on OTP requests in an API endp

This vulnerability exists in the CAP back office application due to improper authorization checks on certain API endpoin

This vulnerability exists in the CAP back office application due to improper implementation of OTP verification mechanis

This vulnerability exists in the CAP back office application due to a weak password-reset mechanism implemented at API e

This vulnerability exists in the CAP back office application due to improper authentication check at the API endpoint. A

Dell NetWorker, versions prior to 19.11.0.4 and version 19.12, contains an URL Redirection to Untrusted Site ('Open Redi

A vulnerability has been identified in Simcenter Femap V2401 (All versions < V2401.0003), Simcenter Femap V2406 (All ver

The Download Manager plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.3

A vulnerability exists in Issuetrak v17.2.2 and prior that allows a low-privileged user to access audit results of other

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to arb

The WoWPth WordPress plugin through 2.0 does not sanitise and escape a parameter before outputting it back in the page,

The WoWPth WordPress plugin through 2.0 does not sanitise and escape a parameter before outputting it back in the page,

The Limit Bio WordPress plugin through 1.0 does not have CSRF check when updating its settings, and is missing sanitisat

The WP Click Info WordPress plugin through 2.7.4 does not sanitise and escape a parameter before outputting it back in t

An issue was discovered in GitLab EE affecting all versions starting with 12.3 before 17.7.7, 17.8 prior to 17.8.5, and

An issue has been discovered in GitLab EE/CE affecting all versions starting from 16.9 before 17.7.7, all versions start

An issue was discovered in GitLab EE affecting all versions starting from 17.2 before 17.7.7, all versions starting from

An issue was discovered in GitLab EE affecting all versions from 16.5 prior to 17.7.7, 17.8 prior to 17.8.5, and 17.9 pr

The Schedule WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back in the pa