2025

In the Linux kernel, the following vulnerability has been resolved: serial: qcom-geni: Fix blocked task Revert commit

A vulnerability was determined in Sangfor Operation and Maintenance Security Management System 3.0. Impacted is an unkno

A vulnerability was found in 70mai X200 up to 20251019. This issue affects some unknown processing of the component Init

A vulnerability has been found in aaPanel BaoTa up to 11.2.x. This vulnerability affects unknown code of the file /datab

A flaw has been found in code-projects Responsive Hotel Site 1.0. This affects an unknown part of the file /admin/roomde

The aThemes Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Call To Actio

The Saphali LiqPay for donate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'saphali_liqpay'

The Alex Reservations: Smart Restaurant Booking plugin for WordPress is vulnerable to arbitrary file uploads due to miss

The CYAN Backup plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation i

The Quick Featured Images plugin for WordPress is vulnerable to SQL Injection via the 'delete_orphaned' function in all

The Mail Mint plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the pr

The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unauthorized modification

The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to PHP Object

The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to Sensitive I

The Flexible Refund and Return Order for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized booking note c

The Better Find and Replace – AI-Powered Suggestions plugin for WordPress is vulnerable to Limited Code Injection in all

The Ovatheme Events Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capability check

The WPFunnels – The Easiest Funnel Builder For WordPress And WooCommerce To Collect Leads And Increase Sales plugin for

The Mang Board WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'mp' parameter in all ver

The Download Manager plugin for WordPress is vulnerable to unauthorized access due to a hardcoded Cron key used in the d

The Contact Form 7 AWeber Extension plugin for WordPress is vulnerable to unauthorized modification of data due to a mis

The Smart Auto Upload Images plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type valid

The HTML Forms – Simple WordPress Forms Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via adm

The Insert Headers and Footers Code – HT Script plugin for WordPress is vulnerable to Stored Cross-Site Scripting via ad

The WP2Social Auto Publish plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PostMessage in all v

The Course Booking System plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability

The WPFunnels plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in

The Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI plugin for WordPress is vulnerable to SQL Injection

The Groups plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including,

The Simple Downloads List plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capab

The Asgaros Forum plugin for WordPress is vulnerable to SQL Injection via the '$_COOKIE['asgarosforum_unread_exclude']'

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Versions 0.6.224 and

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. In versions 0.6.34 an

Soft Serve is a self-hostable Git server for the command line. In versions prior to 0.10.0, there are several places whe

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. In versions 8.

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Versions 8.9.0

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Versions 7.14.

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Versions 7.14.

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Versions 7.14.

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. In versions 7.

calibre is an e-book manager. In versions 8.13.0 and prior, calibre does not validate filenames when handling binary ass

CVAT is an open source interactive video and image annotation tool for computer vision. In versions 2.4.0 through 2.48.1

Inappropriate implementation in Permissions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to perform

Inappropriate implementation in Passkeys in Google Chrome prior to 140.0.7339.80 allowed a local attacker to obtain pote

Insufficient policy enforcement in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to leak cr

Insufficient validation of untrusted input in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a rem

Insufficient validation of untrusted input in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker

Inappropriate implementation in Permissions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to perform

Inappropriate implementation in Downloads in Google Chrome on Windows prior to 140.0.7339.80 allowed a remote attacker t