2025

Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Fir

Race condition in the Graphics component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 11

Insecure default permissions in the agent of Ivanti Endpoint Manager before version 2024 SU4 allows a local authenticate

Collision in MiniFilter driver in Avast Software Avast Free Antivirus  before 25.9  on Windows allows a local attacker w

Files or Directories Accessible to External Parties, Exposure of Private Personal Information to an Unauthorized Actor v

An issue in Agnitum Outpost Security Suite 7.5.3 (3942.608.1810) and 7.6 (3984.693.1842) allows a local attacker to exec

Zohocorp ManageEngine OpManager versions 128609 and below are vulnerable to Stored XSS Vulnerability in the SNMP trap pr

Zohocorp ManageEngine Applications Manager versions 178100 and below are vulnerable to authenticated command injection v

Cross-Site Scripting (XSS) in NetScaler ADC and NetScaler Gateway when the appliance is configured as a Gateway (VPN vir

A security issue was discovered within Verve Asset Manager allowing unauthorized read-only users to read, update, and de

A local code execution security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability a

A local server-side request forgery (SSRF) security issue exists within Studio 5000® Simulation Interface™ via the API.

A security issue exists within DataMosaix™ Private Cloud allowing for Persistent XSS. This vulnerability can result in t

A security issue exists within DataMosaix™ Private Cloud, allowing attackers to bypass MFA during setup and obtain a val

Zohocorp ManageEngine Analytics Plus versions 6170 and below are vulnerable to Unauthenticated SQL Injection due to the

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection du

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection du

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection du

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection du

Improper Restriction of Excessive Authentication Attempts, Client-Side Enforcement of Server-Side Security, Reliance on

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection du

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection du

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Aryom Softw

Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in t

Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in t

Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in t

The Classified Listing – AI-Powered Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to una

The Blocksy Companion plugin for WordPress is vulnerable to authenticated arbitrary file upload in all versions up to, a

The Hydra Booking — Appointment Scheduling & Booking Calendar plugin for WordPress is vulnerable to missing payment veri

The Hydra Booking — Appointment Scheduling & Booking Calendar plugin for WordPress is vulnerable to unauthorized booking

The TNC Toolbox: Web Performance plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up

Photo Station 5.4.1 & 5.2.7 include the security fix for the vulnerability related to the XMR mining programs identified

The VAPIX API port.cgi did not have sufficient input validation, which may result in process crashes and impact usabilit

The VAPIX Edge storage API that allowed a privilege escalation, enabling a VAPIX administrator-privileged user to gain L

It was possible to upload files with a specific name to a temporary directory, which may result in process crashes and i

Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in t

An improper access restriction to a folder in Bitdefender Endpoint Security Tools for Mac (BEST) before 7.20.52.200087 a

AXIS Optimizer was vulnerable to an unquoted search path vulnerability, which could potentially lead to privilege escala

An ACAP configuration file has improper permissions and lacks input validation, which could potentially lead to privileg

An ACAP configuration file has improper permissions, which could allow command injection and potentially lead to privile

A 3rd-party component exposed its password in process arguments, allowing for low-privileged users to access it.

ACAP applications can gain elevated privileges due to improper input validation, potentially leading to privilege escala

The ACAP Application framework could allow privilege escalation through a symlink attack. This vulnerability can only be

An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to pote

A malicious ACAP application can gain access to admin-level service account credentials used by legitimate ACAP applicat

An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. This vuln

The age-restriction WordPress plugin through 3.0.2 does not have authorisation in the age_restrictionRemoteSupportReques

The WP Go Maps (formerly WP Google Maps) WordPress plugin before 9.0.48 does not sanitize user input provided via an AJA

The Make Email Customizer for WooCommerce WordPress plugin through 1.0.6 lacks proper authorization checks and option va

The Progress Bar Blocks for Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File upl