2025

The Booster for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type valida

Multiple products provided by iND Co.,Ltd contain an OS command injection vulnerability. If exploited, an arbitrary OS c

The QbiCRMGateway developed by Ai3 has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attacker

A vulnerability was determined in code-projects Online Event Judging System 1.0. This issue affects some unknown process

Clinic Image System developed by Changing has a SQL Injection vulnerability, allowing unauthenticated remote attackers t

NAVER MYBOX Explorer for Windows before 3.0.8.133 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM

There is an Access Control Vulnerability in some HikCentral Professional versions. This could allow an unauthenticated u

A vulnerability was detected in itsourcecode Apartment Management System 1.0. This affects an unknown part of the file /

A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. Affected by this issue is so

A weakness has been identified in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unk

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6. A malicious a

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7

CGI::Simple versions before 1.282 for Perl has a HTTP response splitting flaw This vulnerability is a confirmed HTTP res

A security flaw has been discovered in itsourcecode Apartment Management System 1.0. Affected is an unknown function of

A vulnerability was identified in itsourcecode Apartment Management System 1.0. This impacts an unknown function of the

A vulnerability was determined in itsourcecode Sports Management System 1.0. This affects an unknown function of the fil

A vulnerability has been found in itsourcecode Apartment Management System 1.0. The affected element is an unknown funct

A flaw has been found in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /repo

A vulnerability was detected in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing

A malicious user may submit a specially-crafted complex payload that otherwise meets the default request size limit whic

Tenda AC10 v4.0 firmware v16.03.10.20 was discovered to contain a stack overflow via the function get_parentControl_list

Volto is a React based frontend for the Plone Content Management System. In versions from 19.0.0-alpha.1 to before 19.0.

In JetBrains IDE Services before 2025.5.0.1086, 2025.4.2.2164 users without appropriate permissions could assign high-p

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.15.2, 21.10.2, and 22.5.2

Nagios XI < 2024R1.3.2 contains a remote code execution vulnerability by chaining two flaws: an arbitrary file upload an

A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system.

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protec

Deserialization of Untrusted Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Object Injection.This

Improper Control of Generation of Code ('Code Injection') vulnerability in emarket-design YouTube Showcase youtube-showc

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uxper Golo golo al

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Missing Authorization vulnerability in Dylan James Zephyr Project Manager zephyr-project-manager allows Exploiting Incor

Missing Authorization vulnerability in bPlugins Tiktok Feed b-tiktok-feed allows Accessing Functionality Not Properly Co

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in extendons WooCommerce cs

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Dmitry V. (CEO of "UKR S

Deserialization of Untrusted Data vulnerability in emarket-design WP Ticket Customer Service Software & Support Ticket S

Deserialization of Untrusted Data vulnerability in emarket-design Employee Spotlight employee-spotlight allows Object In

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in captcha.eu Captcha

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Deserialization of Untrusted Data vulnerability in emarket-design WP Easy Contact wp-easy-contact allows Object Injectio

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jason Theme Blvd W

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Deserialization of Untrusted Data vulnerability in emarket-design Employee Directory – Staff Listing & Team Directory Pl

Missing Authorization vulnerability in honzat Page Manager for Elementor page-manager-for-elementor allows Exploiting In