2025

A vulnerability was found in Jinher OA 1.1. It has been rated as problematic. This issue affects some unknown processing

A vulnerability was found in Jinher OA 1.2. It has been declared as problematic. This vulnerability affects unknown code

The WPLMS theme for WordPress is vulnerable to Privilege Escalation in versions 1.5.2 to 1.8.4.1 via the 'wp_ajax_import

The GI-Media Library plugin for WordPress is vulnerable to Directory Traversal in versions before 3.0 via the 'fileid' p

The Simple Backup plugin for WordPress is vulnerable to Arbitrary File Download in versions up to, and including, 2.7.10

The Subscribe to Comments for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.1.2 vi

In the Linux kernel, the following vulnerability has been resolved: net/sched: Always pass notifications when child cla

An incomplete fix has been identified for CVE-2025-23084 in Node.js, specifically affecting Windows device names like CO

The V8 release used in Node.js v24.0.0 has changed how string hashes are computed using rapidhash. This implementation r

A vulnerability classified as critical was found in code-projects Food Ordering Review System 1.0. This vulnerability af

A vulnerability, which was classified as critical, has been found in Tenda FH451 1.0.0.9. This issue affects the functio

A vulnerability classified as critical was found in Tenda FH451 1.0.0.9. This vulnerability affects the function fromSaf

A vulnerability classified as critical has been found in Tenda FH451 1.0.0.9. This affects the function fromPptpUserSett

An issue in Perplexity AI GPT-4 v.2.51.0 allows a remote attacker to obtain sensitive information via the token componen

A vulnerability has been found in BossSoft CRM 6.0 and classified as critical. Affected by this vulnerability is an unkn

agorum Software GmbH Agorum core open v11.9.2 & v11.10.1 was discovered to contain a reflected cross-site scripting (XSS

StudentManage v1.0 was discovered to contain a SQL injection vulnerability via the component /admin/adminStudentUrl.

A vulnerability, which was classified as critical, was found in Tenda FH451 1.0.0.9. This affects the function fromPptpU

A vulnerability, which was classified as critical, has been found in Tenda FH451 1.0.0.9. Affected by this issue is the

Software GmbH Agorum core open v11.9.2 & v11.10.1 was discovered to store credentials in plaintext.

A vulnerability classified as critical was found in Tenda FH451 1.0.0.9. Affected by this vulnerability is the function

A vulnerability classified as critical has been found in Tenda FH451 1.0.0.9. Affected is the function formWebTypeLibrar

A vulnerability was found in Tenda FH451 1.0.0.9. It has been rated as critical. This issue affects the function formSaf

Permissive list of allowed inputs in Microsoft Purview allows an authorized attacker to elevate privileges over a networ

A vulnerability was found in D-Link DI-8100 16.07.26A1. It has been classified as critical. This affects an unknown part

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection

MDC is a tool to take regular Markdown and write documents interacting deeply with a Vue component. Prior to version 0.1

mcp-package-docs is an MCP (Model Context Protocol) server that provides LLMs with efficient access to package documenta

apko allows users to build and publish OCI container images built from apk packages. Starting in version 0.27.0 and prio

An open redirect vulnerability has been identified in Grafana OSS that can be exploited to achieve XSS attacks. The vuln

In the Linux kernel, the following vulnerability has been resolved: eventpoll: don't decrement ep refcount while still

The MasterStudy LMS Pro plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type valid

The B1.lt plugin for WordPress is vulnerable to SQL Injection due to a missing capability check on the b1_run_query AJAX

The aapanel WP Toolkit plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization checks wi

The School Management System for Wordpress plugin for WordPress is vulnerable to Local File Inclusion in all versions up

A vulnerability classified as critical was found in code-projects Online Appointment Booking System 1.0. Affected by thi

A vulnerability classified as critical has been found in code-projects Online Appointment Booking System 1.0. Affected i

A vulnerability, which was classified as critical, has been found in D-Link DI-8100 16.07.26A1. This issue affects some

A vulnerability, which was classified as critical, has been found in TOTOLINK T6 up to 4.1.5cu.748_B20211015. Affected b

A vulnerability in the ascgshell, of Brocade ASCG before 3.3.0 stores any command executed in the Command Line Interfa

A vulnerability classified as critical was found in PHPGurukul Land Record System 1.0. Affected by this vulnerability is

A vulnerability was found in code-projects Online Appointment Booking System 1.0. It has been classified as critical. Th

A vulnerability was found in code-projects Online Appointment Booking System 1.0 and classified as critical. Affected by

A vulnerability has been found in code-projects Online Appointment Booking System 1.0 and classified as critical. Affect

A local privilege escalation vulnerability in Sophos Intercept X for Windows with Central Device Encryption 2025.1 and o

A cross-site scripting (XSS) vulnerability was reported in the Lenovo Browser that could allow an attacker to obtain sen

An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local at

An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local at

A code execution vulnerability has been identified in the Robot Operating System (ROS) 'rosbag' tool, affecting ROS dist

NVIDIA Jetson Linux contains a vulnerability in UEFI Management mode, where an unprivileged local attacker may cause exp