2025

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers

The WPBakery Page Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several sh

The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to SQL Injection via th

The WP Tournament Registration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘field’ paramet

The esri-map-view plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's esri-map-view short

The Flex Guten plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘thumbnailHoverEffect’ paramete

Out-of-bounds read vulnerability in the devicemanager module. Impact: Successful exploitation of this vulnerability may

Iterator failure issue in the WantAgent module. Impact: Successful exploitation of this vulnerability may cause memory r

Deserialization vulnerability of untrusted data in the ability module. Impact: Successful exploitation of this vulnerabi

Iterator failure issue in the multi-mode input module. Impact: Successful exploitation of this vulnerability may cause i

Permission control vulnerability in the distributed clipboard module. Impact: Successful exploitation of this vulnerabil

Stack-based buffer overflow vulnerability in the dms_fwk module. Impact: Successful exploitation of this vulnerability c

Out-of-bounds array access vulnerability in the ArkUI framework. Impact: Successful exploitation of this vulnerability m

Vulnerability of insufficient information protection in the media library module. Impact: Successful exploitation of thi

Input verification vulnerability in the home screen module. Impact: Successful exploitation of this vulnerability may af

Iterator failure vulnerability in the card management module. Impact: Successful exploitation of this vulnerability may

Iterator failure vulnerability in the card management module. Impact: Successful exploitation of this vulnerability may

Out-of-bounds access vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may

Out-of-bounds access vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may

Vulnerability that allows setting screen rotation direction without permission verification in the screen management mod

Mastodon is a free, open-source social network server based on ActivityPub Mastodon which facilitates LDAP configuration

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. In versio

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki Platform

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki Platform

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 4.2

Concrete CMS versions 9 through 9.4.2 are vulnerable to Stored XSS from Home Folder on Members Dashboard page.  Version

Concrete CMS 9 to 9.4.2 and versions below 8.5.21 are vulnerable to Reflected Cross-Site Scripting (XSS) in the Conversa

An issue in the component /stl/actions/download?filePath of SSCMS v7.3.1 allows attackers to execute a directory travers

File upload vulnerability in Writebot AI Content Generator SaaS React Template thru 4.0.0, allowing remote attackers to

A stored cross-site scripting (XSS) vulnerability exists in the Shopware 6 installation interface at /recovery/install/d

Cross site scripting vulnerability in seacms before 13.2 via the vid parameter to Upload/js/player/dmplayer/player.

A lack of signature verification in the bootloader of DENX Software Engineering Das U-Boot (U-Boot) v1.1.3 allows attack

The reconcile method in the AttachmentReconciler class of the Halo system v.2.20.18LTS and before is vulnerable to XSS a

Incorrect access control in CaricaVerbale in Agenzia Impresa Eccobook v2.81.1 allows authenticated attackers with low-le

An issue was discovered in CPUID cpuz.sys 1.0.5.4. An attacker can use DeviceIoControl with the unvalidated parameters 0

A command injection vulnerability exists in TwistedWeb (version 14.0.0) due to improper input sanitization in the file u

An Authentication Bypass vulnerability in Blue Access' Cobalt X1 thru 02.000.187 allows an unauthorized attacker to log

A vulnerability, which was classified as critical, has been found in libav up to 12.3. Affected by this issue is the fun

An issue was discovered on FIRSTNUM JC21A-04 devices through 2.01ME/FN. They enable the SSH service by default with the

An out-of-bounds read vulnerability exists in the EMF functionality of PDF-XChange Co. Ltd PDF-XChange Editor 10.6.0.396

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t

An out-of-bounds read vulnerability exists in the EMF functionality of PDF-XChange Editor version 10.5.2.395. By using

IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.03 could be susceptible to cross-site scripting due to n

The Employee Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘noaccess_msg’ paramete

The Download Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘name’ parameter in all v

A low privileged local attacker can abuse the affected service by using a hardcoded cryptographic key.

The WP Easy Contact plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘noaccess_msg’ parameter i

The Campus Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘noaccess_msg’ parameter