2025

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: fix some leaks in probe The dwc3_

In the Linux kernel, the following vulnerability has been resolved: net: sched: sfb: fix null pointer access issue when

In the Linux kernel, the following vulnerability has been resolved: mmc: wmt-sdmmc: fix return value check of mmc_add_h

Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not restrict or transform the characters that can be inserted fr

Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check for the authenticated user profil

Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check in the sidepanel of a page intent

Open5GS v2.7.5, prior to commit 67ba7f92bbd7a378954895d96d9d7b05d5b64615, is vulnerable to a NULL pointer dereference wh

An issue in Perplexity AI GPT-4 allows a remote attacker to obtain sensitive information via a GET parameter

A flaw has been found in SourceCodester Online Student File Management System 1.0. Affected by this vulnerability is an

A vulnerability was detected in SourceCodester Online Student File Management System 1.0. Affected is an unknown functio

Authorization Bypass Through User-Controlled Key vulnerability in SecHard Information Technologies SecHard allows Forcef

When a Java command with password parameters is executed and terminated by NeuVector for Process rule violation the pass

NeuVector stores user passwords and API keys using a simple, unsalted hash. This method is vulnerable to rainbow table a

A security vulnerability has been detected in itsourcecode Online Public Access Catalog OPAC 1.0. This impacts an unknow

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Shopside So

The Sydney theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on t

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting'), Improper Restriction of Ren

A security flaw has been discovered in Portabilis i-Educar up to 2.10. The impacted element is an unknown function of th

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Paraşüt Sof

In JetBrains TeamCity before 2025.07.2 path traversal was possible during project archive upload

In JetBrains TeamCity before 2025.07.2 project isolation bypass was possible due to race condition

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Zirve Infor

The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's blocksy_newslet

The StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More plugin for Wor

The Media Player Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'subtitl

The Quiz Maker plugin for WordPress is vulnerable to SQL Injection via spoofed IP headers in all versions up to, and inc

A vulnerability (CWE-428) has been identified in the Uninterruptible Power Supply (UPS) management application provided

RAID Manager provided by Century Corporation registers a Windows service with an unquoted file path. A user with the wri

Hidden functionality issue exists in WN-7D36QR and WN-7D36QR/UE. If this vulnerability is exploited, SSH may be enabled

The The Hack Repair Guy's Plugin Archiver plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versio

The Memberlite Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugins's 'row' shor

The User Sync – Remote User Sync plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to,

The Appointmind plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'appointmind_calendar

The USS Upyun plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5

The Productive Style plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's display_producti

The Social Media Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'twitter'

The Developer Loggers for Simple History plugin for WordPress is vulnerable to Local File Inclusion in all versions up t

Cross-site scripting (XSS) vulnerability in Search widget in Liferay Portal 7.4.3.93 through 7.4.3.111, and Liferay DXP

A vulnerability in EdgeConnect SD-WAN ECOS could allow an authenticated remote threat actor with admin privileges to acc

A vulnerability in the command-line interface of EdgeConnect SD-WAN could allow an authenticated attacker to read arbitr

A vulnerable feature in the command line interface of EdgeConnect SD-WAN could allow an authenticated attacker to exploi

A vulnerability in the web API of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote a

A vulnerability exists in the Kubernetes C# client where the certificate validation logic accepts properly constructed c

Liferay Portal 7.3.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92

A vulnerability was identified in Campcodes Grocery Sales and Inventory System 1.0. Affected by this issue is some unkno

Cleartext storage of sensitive information in Microsoft PC Manager allows an unauthorized attacker to bypass a security

Insufficient ui warning of dangerous operations in Microsoft Edge for Android allows an unauthorized attacker to perform

Substance3D - Stager versions 3.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to m

LDAP Account Manager (LAM) is a webfrontend for managing entries stored in an LDAP directory. LAM before 9.3 allows stor

In the Linux kernel, the following vulnerability has been resolved: USB: chipidea: fix memory leak with using debugfs_l