2025

An issue was discovered in Syrotech SY-GPON-1110-WDONT SYRO_3.7L_3.1.02-240517 allowing attackers to exctract the SSL Pr

A Remote Code Execution (RCE) vulnerability in the template management component in REDAXO CMS 5.20.0 allows remote auth

A stored cross-site scripting (XSS) vulnerability in the module management component in REDAXO CMS 5.20.0 allows remote

Cross Site Request Forgery (CSRF) vulnerability in Ilevia EVE X1 Server Firmware Version v4.7.18.0.eden and before, Logi

A Stored Cross-Site Scripting vulnerability was discovered in the Dashboards functionality due to improper validation of

A flaw was found in the Keycloak LDAP User Federation provider. This vulnerability allows an authenticated realm adminis

HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability caused by improper validation of user-

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.5 and 6.2.1.

Security Point (Windows) of MaLion and MaLionCloud contains a heap-based buffer overflow vulnerability in processing Con

Security Point (Windows) of MaLion and MaLionCloud contains a stack-based buffer overflow vulnerability in processing HT

Incorrect default permissions issue exists in Security Point (Windows) of MaLion prior to Ver.5.3.4. If this vulnerabili

A path traversal vulnerability has been identified in certain router models. A remote, authenticated attacker could expl

An authentication bypass vulnerability has been identified in the IFTTT integration feature. A remote, authenticated att

A command injection vulnerability has been identified in bwdpi. A remote, authenticated attacker could leverage this vul

A SQL injection vulnerability has been identified in bwdpi. A remote, authenticated attacker could leverage this vulnera

An integer underflow vulnerability has been identified in Aicloud. An authenticated attacker may trigger this vulnerabil

An authentication-bypass vulnerability exists in AiCloud. This vulnerability can be triggered by an unintended side effe

A stack buffer overflow vulnerability has been identified in certain router models. An authenticated attacker may trigge

A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, lea

The Admin and Customer Messages After Order for WooCommerce: OrderConvo plugin for WordPress is vulnerable to Missing Au

The Chamber Dashboard Business Directory plugin for WordPress is vulnerable to unauthorized data export due to a missing

The Ace Post Type Builder plugin for WordPress is vulnerable to unauthorized custom taxonomy deletion due to missing aut

The atec Duplicate Page & Post plugin for WordPress is vulnerable to unauthorized post duplication due to missing author

The Admin and Customer Messages After Order for WooCommerce: OrderConvo plugin for WordPress is vulnerable to unauthoriz

The Social Images Widget plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabi

The Bookme – Free Online Appointment Booking and Scheduling Plugin for WordPress is vulnerable to time-based SQL Injecti

The Job Board by BestWebSoft plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, an

The Frontend File Manager Plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to,

The AI Engine for WordPress: ChatGPT, GPT Content Generator plugin for WordPress is vulnerable to Arbitrary File Read in

The ProjectList plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all

The ProjectList plugin for WordPress is vulnerable to time-based SQL Injection via the 'id' parameter in all versions up

The Just Highlight plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Highlight Color' setting i

The Inline frame – Iframe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'embedsite' shortcod

The Refund Request for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a miss

The Peer Publish plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including,

The Conditional Maintenance Mode for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all v

The Locker Content plugin for WordPress is vulnerable to Sensitive Information Exposure in version 1.0.0 via the 'locker

The Autochat Automatic Conversation plugin for WordPress is vulnerable to unauthorized modification of data due to a mis

The Wishlist for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up t

The Zweb Social Mobile – Ứng Dụng Nút Gọi Mobile plugin for WordPress is vulnerable to Stored Cross-Site Scripting via t

The YouTube Subscribe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versio

A path traversal vulnerability has been identified in WebDAV, which may allow unauthenticated remote attackers to impact

MongoDB Server may experience an invariant failure during batched delete operations when handling documents. The issue a

A user with access to the cluster with a limited set of privilege actions may be able to terminate queries that are bein

A Looker user with a Developer role could cause Looker to execute a malicious command, due to insecure processing of Ter

Cross-site scripting vulnerability exists in SNC-CX600W all versions. If this vulnerability is exploited, an arbitrary s

"FOD" App uses hard-coded cryptographic keys, which may allow a local unauthenticated attacker to retrieve the cryptogra

Cross-site request forgery vulnerability exists in SNC-CX600W versions prior to Ver.2.8.0. If a user accesses a speciall

The EduKart Pro plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.3.

The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to unauthorized modification of d