2025

The SMS for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'paged' parameter in

The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPres

The Everest Forms (Pro) plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including,

The Features plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check o

The expr-eval library is a JavaScript expression parser and evaluator designed to safely evaluate mathematical expressio

Cursor is a code editor built for programming with AI. In versions 1.7.23 and below, a logic bug allows a malicious agen

Cursor is a code editor built for programming with AI. In versions and below, a vulnerability in the Cursor CLI Beta all

Cursor is a code editor built for programming with AI. In versions 1.7.44 and below, various NTFS path quirks allow a pr

Cursor is a code editor built for programming with AI. In versions 1.7.52 and below, manipulating internal settings may

Cursor is a code editor built for programming with AI. In versions 1.7.28 and below, an input validation flaw in Cursor'

LinkAce is a self-hosted archive to collect website links. In versions 2.3.1 and below, the social media sharing functio

CVE-2025-59596 is a denial-of-service vulnerability in Secure Access Windows client versions 12.0 to 14.10 that is addr

CVE-2025-59595 is an internally discovered denial of service vulnerability in versions of Secure Access prior to 14.12.

LinkAce is a self-hosted archive to collect website links. In versions 2.3.1 and below, authenticated RSS feed endpoints

LinkAce is a self-hosted archive to collect website links. Versions 2.3.1 and below allow any authenticated user to expo

LinkAce is a self-hosted archive to collect website links. In versions 2.3.0 and below, the htmlKeywordsFromUrl function

ClipBucket v5 is an open source video sharing platform. Versions 5.5.2-#147 and below contain a stored Cross-Site Script

Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.27.1 and below, due to insufficient access-

Redis is an open source, in-memory database that persists on disk. In versions 8.2.0 and above, a user can run the XACKD

Xibo is an open source digital signage platform with a web content management system (CMS). Versions 4.3.0 and below con

Tencent Docs Desktop 3.9.20 and earlier suffers from Missing SSL Certificate Validation in the update component.

Fuji Electric Monitouch V-SFT-6 is vulnerable to a stack-based buffer overflow while processing a specially crafted pro

A maliciously crafted project file may cause a heap-based buffer overflow in Fuji Electric Monitouch V-SFT-6, which ma

Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.27.1 and below, when a user edits their pro

An issue was discovered in the GPU driver in Samsung Mobile Processor Exynos 1480, 2400, 1580, 2500. There is a use-afte

An issue was discovered in the GPU in Samsung Mobile Processor and Wearable Processor Exynos 1280, 2200, 1330, 1380, 148

Galette is a membership management web application for non profit organizations. In versions 1.1.5.2 and below, Galette'

Galette is a membership management web application for non profit organizations. Versions 1.1.5.2 and below allow a user

Mantis Bug Tracker (MantisBT) is an open source issue tracker. Due to incorrect use of loose (==) instead of strict (===

The GLPI Inventory Plugin handles network discovery, inventory, software deployment, and data collection for GLPI agents

An issue was discovered in the Secure Boot component in Samsung Mobile Processor and Wearable Processor Exynos 9820, 982

An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200,

A reflected cross-site scripted (XSS) vulnerability in the /jsp/gsfr_feditorHTML.jsp endpoint of Zucchetti ZMaintenance

An issue was discovered in VTS in Samsung Mobile Processor and Wearable Processor Exynos 1280, 2200, 1380, W920, W930, W

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 2100, 1280, 2200, 1330, 1380,

NVIDIA RunAI for all platforms contains a vulnerability where a user could cause an improper restriction of communicatio

NVIDIA NVApp for Windows contains a vulnerability in the installer, where a local attacker can cause a search path eleme

Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce Vibes Extension allows Mani

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Ma

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Co

Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Mulesoft Anypoint Code Builder allows

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allow

An issue was discovered in the NPU driver in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500. T

An issue was discovered in Samsung Mobile Processor Exynos 2400, 1580, 2500. A race condition in the HTS driver results

An issue was discovered in Samsung Mobile Processor Exynos 2400, 1580, 2500. A race condition in the HTS driver results

The Survision LPR Camera system does not enforce password protection by default. This allows access to the configuration

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allow

An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Invalid Pointer De

An issue was discovered in VTS in Samsung Mobile Processor and Wearable Processor Exynos 1080, 1280, 2200, 1380, 1480, 2

Radiometrics VizAir is vulnerable to a lack of authentication mechanisms for critical functions, such as admin access an