2025

An issue in NetSurf v.3.11 allows a remote attacker to execute arbitrary code via the dom_node_normalize function

Missing Authorization vulnerability in d3wp WP Snow Effect wp-snow-effect allows Accessing Functionality Not Properly Co

In the Linux kernel, the following vulnerability has been resolved: can: hi311x: fix null pointer dereference when resu

A security flaw has been discovered in jeecgboot jeewx-boot up to 641ab52c3e1845fec39996d7794c33fb40dad1dd. This affects

Authorization Bypass Through User-Controlled Key vulnerability in CB Project Ltd. Co. CVLand allows Parameter Injection.

The privileged user could log in without sufficient credentials after enabling an application protocol. This security is

Arbitrary code execution is possible due to improper validation of the file upload functionality in Eaton BLSS. This sec

A vulnerability was identified in fushengqian fuint up to 41e26be8a2c609413a0feaa69bdad33a71ae8032. Affected by this iss

A vulnerability was determined in Tenda AC10 16.03.10.13. Affected by this vulnerability is the function formSysRunCmd o

A vulnerability was found in Tenda A15 15.13.07.13. Affected is the function fromSetWirelessRepeat of the file /goform/o

A vulnerability has been found in Tenda AC8 16.03.34.06. This impacts an unknown function of the file /goform/DatabaseIn

EasyFlow .NET and EasyFlow AiNet developed by Digiwin has a SQL Injection vulnerability, allowing authenticated remote a

A flaw has been found in itsourcecode Billing System 1.0. This affects an unknown function of the file /admin/app/login_

A vulnerability was detected in PHPGurukul News Portal 1.0. The impacted element is an unknown function of the file /onp

A security vulnerability has been detected in PHPGurukul News Portal 1.0. The affected element is an unknown function of

A weakness has been identified in SourceCodester Best House Rental Management System 1.0. Impacted is the function delet

A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. This issue affects some unkn

A vulnerability was identified in Tenda AC21 16.03.08.16. This vulnerability affects the function formSetPPTPServer of t

A vulnerability was determined in CodeAstro Gym Management System 1.0. This affects an unknown part of the file /admin/v

A vulnerability was found in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality o

A security flaw has been discovered in itsourcecode Online Loan Management System 1.0. The affected element is an unknow

A vulnerability was identified in itsourcecode Online Loan Management System 1.0. Impacted is an unknown function of the

A vulnerability was determined in itsourcecode Online Loan Management System 1.0. This issue affects some unknown proces

A vulnerability was found in itsourcecode Online Loan Management System 1.0. This vulnerability affects unknown code of

A vulnerability has been found in itsourcecode Online Loan Management System 1.0. This affects an unknown part of the fi

A flaw has been found in SourceCodester Best House Rental Management System 1.0. Affected by this issue is the function

A vulnerability was detected in SourceCodester Best House Rental Management System 1.0. Affected by this vulnerability i

A security vulnerability has been detected in Tenda AC23 16.03.07.52. Affected is the function saveParentControlInfo of

A weakness has been identified in Tenda AC23 16.03.07.52. This impacts the function formSetVirtualSer of the file /gofor

A security flaw has been discovered in code-projects Simple Online Hotel Reservation System 2.0. This affects an unknown

A vulnerability was identified in code-projects Simple Online Hotel Reservation System 2.0. The impacted element is an u

/etc/timezone can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

/etc/avahi/services/z9.service can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1

Denial of Service Due to SlowLoris.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

Web UI Malfunction when setting unexpected locale via API.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1

Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000).This issue affects BLU-IC2: through 1.19.5; BLU-I

IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 is vulnerable to privilege escalation caused by an invalid IBM i SQL services authoriz

The kallyas theme for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.24.0 via

The kallyas theme for WordPress is vulnerable to Stored Cross-Site Scripting via several of the plugin's shortcodes in a

The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versi

The RESTful Content Syndication plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type va

The Import WP – Export and Import CSV and XML files to WordPress plugin for WordPress is vulnerable to Arbitrary File Re

The WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) plugin for WordPress is vulnerable to ar

The Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent plugin for WordPress is vulnerable to

The Advanced Ads – Ad Manager & AdSense plugin for WordPress is vulnerable to Remote Code Execution in all versions up t

The Qi Blocks plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.4.3. T

The Employee Spotlight – Team Member Showcase & Meet the Team Plugin plugin for WordPress is vulnerable to Stored Cross-

The Folderly plugin for WordPress is vulnerable to unauthorized modification of data due to an insufficient capability c

The WP Discourse plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.5.9.

The wpForo Forum plugin for WordPress is vulnerable to SQL Injection via the Subscriptions Manager in all versions up to