Latest Vulnerabilities

HDF5 Type Conversion Logic H5T__bit_copy heap-based overflow (CVE-2025-2309)

HDF5 Scale-Offset Filter H5Z__scaleoffset_decompress_one_byte heap-based overflow (CVE-2025-2308)

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, Exynos 990, Exynos 1080, Exynos 2100, Exynos 2200,... (CVE-2024-28818)

WeGIA Cross-Site Scripting (XSS) Stored in endpoint `adicionar_tipo_docs_atendido.php` parameter `tipo` (CVE-2025-29782)

Apache Druid: Padding oracle in druid-pac4j extension that allows an attacker to manipulate a pac4j session cookie via Padding Oracle Attack (CVE-2024-45384)

Jenkins 2.470 and earlier, LTS 2.452.3 and earlier allows agent processes to read arbitrary files from the Jenkins controller file system by using... (CVE-2024-43044)

HtmlSanitizer vulnerable to XSS when used with contentEditable (CVE-2025-29771)

Remote Code Execution (RCE) via Arbitrary File Write In Document API (CVE-2024-54449)

A mass assignment vulnerability exists in Pantera CRM versions 401.152 and 402.072. This flaw allows authenticated users to modify any user... (CVE-2024-40531)

Studio 42 elFinder 2.1.64 is vulnerable to Incorrect Access Control. Copying files with an unauthorized extension between server directories allows... (CVE-2024-38909)