2025

A vulnerability was detected in SourceCodester Simple Forum Discussion System 1.0. This impacts an unknown function of t

The Microsoft vulnerable driver block list is implemented as Windows Defender Application Control (WDAC) policy. Entries

FoxCMS v1.2.5 and before is vulnerable to SQL Injection via the column_model parameter in the app/admin/controller/Colum

A cross-site scripting (XSS) vulnerability in Smart Search & Filter Shopify and BigCommerce apps allows a remote attacke

JSON::SIMD before version 1.07 and earlier for Perl has an integer buffer overflow causing a segfault when parsing craft

JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabl

The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended dr

A vulnerability ( CVE-2025-21176 https://www.cve.org/CVERecord ) exists in DiaSymReader.dll due to buffer over-read. P

A vulnerability ( CVE-2024-38229 https://www.cve.org/CVERecord ) exists in EOL ASP.NET when closing an HTTP/3 stream whi

A vulnerability (CVE-2025-21172) exists in msdia140.dll due to integer overflow and heap-based overflow. Per CWE-122:

A vulnerability was found in Jinher OA up to 1.2. This impacts an unknown function of the file /c6/Jhsoft.Web.projectman

A vulnerability has been found in Jinher OA up to 1.2. This affects an unknown function of the file /c6/Jhsoft.Web.proje

A flaw has been found in Jinher OA up to 1.2. The impacted element is an unknown function of the file /C6/Jhsoft.Web.dep

Due to an unsecure default configuration HTTP is used instead of HTTPS for the web interface. An unauthenticated attacke

An authenticated, low-privileged attacker can obtain credentials stored on the charge controller including the manufactu

A low-privileged remote attacker could gain unauthorized access to critical resources, such as firmware and certificates

The Ditty WordPress plugin before 3.1.58 lacks authorization and authentication for requests to its displayItems endpoi

A vulnerability has been found in SourceCodester Online Polling System 1.0. Affected is an unknown function of the file

A flaw has been found in PHPGurukul Small CRM 4.0. Affected by this vulnerability is an unknown functionality of the fil

A vulnerability was detected in SourceCodester Online Polling System 1.0. Affected is an unknown function of the file /a

A security vulnerability has been detected in SourceCodester Online Polling System 1.0. This impacts an unknown function

A weakness has been identified in SourceCodester Online Polling System 1.0. This affects an unknown function of the file

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix filehandle bounds checking in nfs_fh_to_de

In the Linux kernel, the following vulnerability has been resolved: mm: swap: fix potential buffer overflow in setup_cl

A flaw has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown function of the file /admin/a

A vulnerability was determined in itsourcecode Student Information Management System 1.0. This affects an unknown part o

Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. All versions o

xgrammar is an open-source library for efficient, flexible, and portable structured generation. A grammar optimizer intr

Improper cleanup in AMD CPU microcode patch loading could allow an attacker with local administrator privilege to load m

Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, r

Improper input validation in the AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, pote

Improper input validation in the GPU driver could allow an attacker to exploit a heap overflow potentially resulting in

Missing authorization in AMD RomArmor could allow an attacker to bypass ROMArmor protections during system resume from a

Improper input validation in the system management mode (SMM) could allow a privileged attacker to overwrite arbitrary m

Improper isolation of shared resources on System-on-a-chip (SOC) could a privileged attacker to tamper with the contents

Type confusion in the ASP could allow an attacker to pass a malformed argument to the Reliability, Availability, and Ser

A vulnerability was found in D-Link DIR-825 1.08.01. This impacts the function get_ping6_app_stat of the file ping6_resp

A vulnerability has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown function of the file

A security vulnerability has been detected in Campcodes Grocery Sales and Inventory System 1.0. Impacted is an unknown f

A weakness has been identified in Campcodes Grocery Sales and Inventory System 1.0. This issue affects some unknown proc

The Cloud SAML SSO plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability c

The Multi Step Form plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via

Coder allows organizations to provision remote development environments via Terraform. In versions 2.22.0 through 2.24.3

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Versions 3.25.23 and below contain a def

The The REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme theme for WordPress is vulnerable to arbitrar

ERP is a free and open source Enterprise Resource Planning tool. In versions below 14.89.2 and 15.0.0 through 15.75.1, l

Frappe is a full-stack web application framework. Versions 14.96.9 and below, and 15.0.0 through 15.71.0 have an insecur

Insufficient bounds checking in AMD TEE (Trusted Execution Environment) could allow an attacker with a compromised users

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Versions 3.25.23 and below contain a vul