2025

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local es

In wlan STA driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local e

In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of

In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation

In ims service, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalat

The service employed by Everything, running as SYSTEM, communicates with the lower privileged Everything GUI via a named

The Centangle-Team plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including

The Visit Counter plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missin

The Pagerank Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Cross-Site Request Forgery in a

The MapMap plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. T

The Social Media WPCF7 Stop Words plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to

The Top Bar Notification plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and inc

The SH Contextual Help plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and inclu

The Associados Amazon Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and

The LinkedIn Resume plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includin

The LMB^Box Smileys plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includin

The clubmember plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up t

The Free Quotation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions

The Import Export For WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missi

The Nari Accountant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via account settings in all versio

The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `geojsonmarker`

The DominoKit plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wp_ajax

The Posts Navigation Links for Sections and Headings – Free by WP Masters plugin for WordPress is vulnerable to Cross-Si

The Simple User Capabilities plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability chec

The Simple User Capabilities plugin for WordPress is vulnerable to unauthorized modification of data due to a missing ca

The Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One plugin for WordPress is vulnerable to un

The WP Carticon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'carticon_js_script' parameter

The Crypto Payment Gateway with Payeer for WooCommerce plugin for WordPress is vulnerable to payment bypass in all versi

The Reuse Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'reuse_builder_single_post_t

The All in One Time Clock Lite plugin for WordPress is vulnerable to unauthorized access due to a missing authorization

The Bootstrap Multi-language Responsive Portfolio plugin for WordPress is vulnerable to Stored Cross-Site Scripting via

The Footnotes Made Easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin settings in all ver

The EM Beer Manager plugin for WordPress is vulnerable to arbitrary file upload leading to remote code execution in all

The Elegance Menu plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.9 v

Multiple plugins for WordPress with the Jewel Theme Recommended Plugins Library are vulnerable to Unrestricted Upload of

Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.

Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing.

Memory corruption while accessing a buffer during IOCTL processing.

Memory corruption while processing large input data from a remote source via a communication interface.

Information disclosure while processing message from client with invalid payload.

Memory corruption when triggering a subsystem crash with an out-of-range identifier.

Memory corruption while processing client message during device management.

Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions.

Memory corruption while processing request sent from GVM.

Memory corruption while processing audio streaming operations.

Memory corruption while processing a GP command response.

Memory corruption while performing encryption and decryption commands.

Information disclosure while registering commands from clients with diag through diagHal.

The Label Plugins plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including,

The ViaAds plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.2.