A security vulnerability in the certificate management component of Ivanti Connect Secure (CVSS 6.3) that allows a remote authenticated admin with read-only rights. Remediation should follow standard vulnerability management procedures.
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. The wincred credential helper uses a static buffer (target) as a unique key for storing and comparing against internal storage. This credential helper does not properly bounds check the available space remaining in the buffer before appending to it with wcsncat(), leading to potential buffer overflows. This vulnerability is fixed in v2.43.7, v2.44.4, v2.45.4, v2.46.4, v2.47.3, v2.48.2, v2.49.1, and v2.50.1.
Exposure of sensitive information to an unauthorized actor in Windows Imaging Component allows an unauthorized attacker to disclose information locally.
ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. A high-privilege authenticated attacker can force the application to make arbitrary requests via injection of URLs. Exploitation of this issue does not require user interaction and scope is changed. The vulnerable component is restricted to internal IP addresses.
A security vulnerability in Bluetooth (CVSS 6.2) that allows local attackers. Remediation should follow standard vulnerability management procedures.
A security vulnerability in LeAudioService (CVSS 6.2) that allows local attackers. Remediation should follow standard vulnerability management procedures.
A security vulnerability in LeAudioService (CVSS 6.2) that allows local attackers. Remediation should follow standard vulnerability management procedures.
A security vulnerability in Framework for Galaxy Watch (CVSS 6.2) that allows local attackers. Remediation should follow standard vulnerability management procedures.
Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.
Improper verification of intent by broadcast receiver in System UI for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to power off the device.
A vulnerability has been identified in TIA Administrator (All versions < V3.0.6). The affected application improperly validates code signing certificates. This could allow an attacker to bypass the check and exceute arbitrary code during installations.
Command injection in D-Link DIR-645 router firmware allows remote attackers with low privileges to execute arbitrary commands via the ssdpcgi component. The vulnerability affects end-of-life firmware versions up to 1.05B01 and a public exploit is available. Active exploitation is not confirmed by CISA KEV and EPSS probability is low (0.19%).
SAP NetWeaver Application Server ABAP and ABAP Platform allows an unauthenticated attacker to create a malicious link which they can make publicly available. When an authenticated victim clicks on this malicious link, injected input data will be used by the web site page generation to create content which when executed in the victim's browser leading to low impact on Confidentiality and Integrity with no effect on Availability of the application.
SAP NetWeaver Application Server ABAP and ABAP Platform allows an unauthenticated attacker to inject a malicious script into a dynamically crafted URL. The victim, when tricked into clicking on this crafted URL unknowingly executes the malicious payload in their browser. On successful exploitation, the attacker can access or modify sensitive information within the scope of victim's web browser, with no impact on availability of the application.
Due to an open redirect vulnerability in SAP NetWeaver Application Server ABAP, an unauthenticated attacker could craft a URL link embedding a malicious script at a location not properly sanitized. When a victim clicks on this link, the script executes within the victim's browser, redirecting them to a site controlled by the attacker. This allows the attacker to access and/or modify restricted information related to the web client. While the vulnerability poses no impact on data availability, it presents a considerable risk to confidentiality and integrity.
Unrestricted file upload in Staff Audit System 1.0 allows remote attackers to upload arbitrary files via the /test.php endpoint, leading to potential remote code execution. Exploit code is publicly available, but no active exploitation or KEV listing has been confirmed. The vulnerability is critical as it may bypass authentication entirely.
Unrestricted file upload in Advanced Online Voting System 1.0's /admin/candidates_add.php endpoint allows remote authenticated attackers (low privileges) to upload arbitrary files via the photo parameter. Public exploit code is available, but EPSS indicates low exploitation probability (0.10%) and no active exploitation is confirmed. The vulnerability could lead to code execution if a malicious PHP file is uploaded.
Unrestricted file upload in code-projects E-Commerce Site 1.0 allows authenticated attackers to upload arbitrary PHP files via the photo parameter in /admin/users_photo.php, potentially leading to remote code execution on the server. Public exploit code is available, increasing immediate risk for instances where the admin panel is exposed.
Unrestricted file upload in Library Management System 2.0 allows authenticated remote attackers to upload arbitrary files via the photo parameter in /admin/student_edit_photo.php, potentially leading to remote code execution. The vulnerability is publicly disclosed with proof-of-concept exploits available. No active exploitation has been reported through CISA KEV.
SQL injection in Responsive Blog Site 1.0 allows remote attackers with low-level privileges to manipulate database queries via the 'ID' parameter in category.php, potentially leading to data leakage or modification. Public exploit code is available, though no active exploitation has been confirmed by CISA. The limited impact and low EPSS score (0.06%) reduce its real-world urgency.
SQL injection in code-projects Responsive Blog Site 1.0 allows authenticated remote attackers to manipulate the 'ID' parameter in /single.php to interfere with database queries, leading to data leakage or manipulation. A proof-of-concept exploit is publicly available, but no active exploitation has been reported (EPSS 0.06%).
SQL injection in PHPGurukul Zoo Management System 2.1 allows authenticated remote attackers to manipulate the 'cnum' parameter in /admin/add-animals.php, leading to unauthorized database access or data modification. Public exploit code exists but no active exploitation has been confirmed; EPSS score is low at 0.06%.
SQL injection in Zoo Management System 2.1 allows authenticated attackers to manipulate ticket pricing via the cprice parameter in /admin/add-foreigners-ticket.php, potentially altering data in the database. The exploit is publicly available and can be exploited over the network with low attack complexity, though no active exploitation has been confirmed by CISA KEV.
SQL injection in PHPGurukul Zoo Management System 2.1 allows authenticated remote attackers to manipulate database queries via the cprice parameter in /admin/add-normal-ticket.php. This could lead to unauthorized data access or modification. A public proof-of-concept exploit is available, though no active exploitation has been reported.
SQL injection in PHPGurukul Zoo Management System 2.1 allows authenticated remote attackers with low privileges to execute arbitrary SQL commands via the ID parameter in /admin/manage-animals.php. Exploit code is publicly available, though no active exploitation is confirmed and the CVSS 4.0 base score is low (2.1) due to limited impact.
SQL injection in PHPGurukul Zoo Management System 2.1's admin ticket management page (/admin/manage-normal-ticket.php) allows authenticated attackers with low privileges to manipulate the ID parameter, potentially leading to unauthorized data access or modification. Exploit code is publicly available, though no active exploitation has been reported.
Cross-site scripting vulnerability in itsourcecode Student Transcript Processing System 1.0 allows remote attackers to inject arbitrary web script into the 'pre' parameter of the /admin/modules/subject/edit.php endpoint. An attacker can craft a malicious URL that, when visited by an authenticated administrator, executes attacker-controlled JavaScript in the admin's browser. The exploit is publicly available, though no active exploitation has been confirmed.
SQL injection in Pharmacy Management System's quantity_upd.php allows low-privileged authenticated attackers to extract or modify limited data via unsanitized med_name, med_cat, or ex_date parameters. Public exploit code exists, but a low EPSS score and CVSS 4.0 base score of 2.1 indicate negligible real-world exploitation probability. No versioned patch is available due to the project's rolling release model.
SQL injection in Chat System 1.0 allows remote attackers to manipulate database queries via the 'msg' parameter of /user/send_message.php. Publicly available exploit code exists, but no active exploitation has been confirmed. The application is a low-footprint, unsupported project, limiting real-world exposure.
SQL injection in code-projects Chat System 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter in /user/addmember.php. Public exploit code is available, but EPSS indicates low exploitation probability and no active exploitation has been confirmed.
SQL injection in Chat System 1.0 through the ID parameter of /user/fetch_member.php allows remote authenticated attackers with low privileges to extract or manipulate limited data from the application's database. Public exploit code is available, but no active exploitation has been reported and the EPSS probability is very low.
SQL injection in code-projects Chat System 1.0 allows authenticated remote attackers to manipulate backend database queries via the ID parameter of /user/fetch_chat.php. Public exploit code is available, and the vulnerability is rated critically by the reporter, but the CVSS 4.0 base impact is limited (low confidentiality, integrity, and availability) and EP
Due to insufficient sanitization in the SAP BusinessObjects Content Administrator Workbench, attackers could craft malicious URLs and execute scripts in a victim�s browser. This could potentially lead to the exposure or modification of web client data, resulting in low impact on confidentiality and integrity, with no impact on application availability.
Reflected Cross-site Scripting (XSS) vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending a malicious URL trhough the campo parameter in /<Client>FacturaE/VerFacturaPDF.
Reflected Cross-site Scripting (XSS) vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending a malicious URL trhough the id_concesion parameter in /<Client>FacturaE/VerFacturaPDF.
SAP Business Warehouse (Business Explorer Web) allows an attacker to create a malicious link. If an authenticated user clicks on this link, the injected script gets executed within the scope of victim�s browser. This potentially leads to an impact on confidentiality and integrity. Availability is not impacted.
IBM OpenPages with Watson 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session
SQL injection in PHPGurukul Car Washing Management System 1.0 allows an authenticated administrator to execute arbitrary SQL commands via the wpid parameter in /admin/editcar-washpoint.php. The vulnerability requires high privileges but can be exploited remotely, leading to low-impact data leakage, modification, or service disruption. Exploit code is publicly available, though EPSS scores remain low and no active exploitation has been reported by CISA.
Improper link resolution before file access ('link following') in Service Fabric allows an authorized attacker to elevate privileges locally.
Stored cross-site scripting in CodeAstro Simple Hospital Management System 1.0 allows authenticated remote attackers to inject JavaScript via First Name, Last name, or Address fields in the doctor.html POST handler. The script executes in a victim's browser when the page is viewed, potentially enabling session hijacking or data theft. Publicly available exploit code exists, but no active exploitation has been confirmed and EPSS estimates very low exploitation probability (0.05%).
A security vulnerability in A vulnerability (CVSS 5.3). Remediation should follow standard vulnerability management procedures.
Cryptographic issues in Windows Cryptographic Services allows an unauthorized attacker to disclose information over a network.
SAPCAR improperly sanitizes the file paths while extracting SAPCAR archives. Due to this, an attacker could craft a malicious SAPCAR archive containing directory traversal sequences. When a high privileged victim extracts this malicious archive, it is then processed by SAPCAR on their system, causing files to be extracted outside the intended directory and overwriting files in arbitrary locations. This vulnerability has a high impact on the integrity and availability of the application with no impact on confidentiality.
Uncontrolled resource consumption in Windows Print Spooler Components allows an authorized attacker to deny service over an adjacent network.
Integer overflow or wraparound in Windows Hyper-V allows an authorized attacker to disclose information over an adjacent network.
SSRF in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated attacker with admin rights to access internal network services.
A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries.
A security vulnerability in some AMD processors may allow an attacker to infer data from previous stores (CVSS 5.6) that allows an attacker. Remediation should follow standard vulnerability management procedures. Vendor patch is available.
CVE-2025-42979 is a security vulnerability (CVSS 5.6). Remediation should follow standard vulnerability management procedures.
Exposure of sensitive information to an unauthorized actor in Windows User-Mode Driver Framework Host allows an authorized attacker to disclose information locally.