2025

The Event List plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.0.4. T

SelectZero Data Observability Platform before 2025.5.2 is vulnerable to Content Spoofing / Text Injection. Improper sani

A flaw has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1

A vulnerability was detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.

A security vulnerability has been detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.

Mitrastar GPT-2741GNAC-N2 devices are provided with access through ssh into a restricted default shell.The command "devi

Mahara before 24.04.9 exposes database connection information if the database becomes unreachable, e.g., due to the data

An issue was discovered in Mahara 23.04.8 and 24.04.4. Attackers may utilize escalation of privileges in certain cases w

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Avoid stack buffer overflow from kernel

Delta Electronics COMMGR has Code Injection vulnerability.

Delta Electronics COMMGR has Stack-based Buffer Overflow vulnerability.

A vulnerability has been found in SourceCodester Human Resource Information System 1.0. Affected by this issue is some u

A flaw has been found in SourceCodester Human Resource Information System 1.0. Affected by this vulnerability is an unkn

A security vulnerability has been detected in SourceCodester Online Bank Management System 1.0. This impacts an unknown

A vulnerability was found in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of

The Dokan Pro plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and

A vulnerability has been found in itsourcecode Apartment Management System 1.0. This vulnerability affects unknown code

A flaw has been found in itsourcecode Apartment Management System 1.0. This affects an unknown part of the file /managem

A vulnerability was detected in itsourcecode Apartment Management System 1.0. Affected by this issue is some unknown fun

A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. Affected by this vulnerabili

The Vibes plugin for WordPress is vulnerable to time-based SQL Injection via the ‘resource’ parameter in all versions up

A vulnerability has been found in 1000projects Online Project Report Submission and Evaluation System 1.0. This issue af

A flaw has been found in Tenda CH22 1.0.0.1. This vulnerability affects the function formeditUserName of the file /gofor

A weakness has been identified in itsourcecode Online Tour and Travel Management System 1.0. This affects an unknown par

A security flaw has been discovered in itsourcecode Online Tour and Travel Management System 1.0. Affected by this issue

A vulnerability was determined in Campcodes Online Water Billing System 1.0. Affected is an unknown function of the file

A vulnerability has been found in itsourcecode Apartment Management System 1.0. This affects an unknown function of the

A flaw has been found in itsourcecode Apartment Management System 1.0. The impacted element is an unknown function of th

The TP-Link KP303 Smartplug can be issued unauthenticated protocol commands that may cause unintended power-off conditio

XGrammar is an open-source library for efficient, flexible, and portable structured generation. Prior to version 0.1.21,

A vulnerability was detected in itsourcecode Apartment Management System 1.0. The affected element is an unknown functio

A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. Impacted is an unknown funct

On affected platforms running Arista EOS, maliciously formed UDP packets with source port 3503 may be accepted by EOS. U

Craft is a platform for creating digital experiences. From versions 4.0.0-RC1 to 4.16.5 and 5.0.0-RC1 to 5.8.6, there is

alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the order_by paramet

Securden’s Unified PAM Remote Vendor Gateway access portal shares infrastructure and access tokens across multiple tenan

Langflow is a tool for building and deploying AI-powered agents and workflows. A privilege escalation vulnerability exis

PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the getThemeFileContent function.

PerfreeBlog v4.0.11 has a directory traversal vulnerability in the getThemeFilesByName function.

FoxCMS 1.2.6, there is a Cross Site Scripting vulnerability in /index.php/article. This allows attackers to execute arbi

An unauthenticated unrestricted file upload vulnerability allows an attacker to upload malicious binaries and scripts to

D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability vi

A denial of service vulnerability exists in the JSONReader component of the run-llama/llama_index repository, specifical

phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in about-us.php via the pagetitle parameter.

A memory corruption vulnerability exists in the PSD Image Decoding functionality of the SAIL Image Decoding Library v0.9

A memory corruption vulnerability exists in the PSD RLE Decoding functionality of the SAIL Image Decoding Library v0.9.8

A memory corruption vulnerability exists in the BMPv3 RLE Decoding functionality of the SAIL Image Decoding Library v0.9

A memory corruption vulnerability exists in the WebP Image Decoding functionality of the SAIL Image Decoding Library v0.

D-Link DI-8100 16.07.26A1 is vulnerable to Buffer Overflow via the en`, `val and id parameters in the qj_asp function. T

A memory corruption vulnerability exists in the PCX Image Decoding functionality of the SAIL Image Decoding Library v0.9