2025

Out-of-bounds write in setting auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged

In the Linux kernel, the following vulnerability has been resolved: media: platform: exynos4-is: Add hardware sync wait

A vulnerability was found in code-projects Responsive Blog Site 1.0. It has been declared as critical. This vulnerabilit

A vulnerability was found in code-projects Responsive Blog Site 1.0. It has been classified as critical. This affects an

The Woodmart theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'multiple_markers' attrib

SAP NetWeaver Application Server ABAP and ABAP Platform allows an unauthenticated attacker to create a malicious link wh

An low privileged remote attacker can enforce the watchdog of the affected devices to reboot the PLC due to incorrect de

A physical attacker with access to the device display via USB-C can send a message to the device which triggers an unsec

An unauthenticated remote attacker can use MQTT messages to crash a service on charging stations complying with German C

A vulnerability, which was classified as critical, was found in PHPGurukul Zoo Management System 2.1. Affected is an unk

A vulnerability, which was classified as critical, has been found in PHPGurukul Zoo Management System 2.1. This issue af

The Guest Support – Complete customer support ticket system for WordPress plugin for WordPress is vulnerable to unauthor

The Lightbox & Modal Popup WordPress Plugin – FooBox plugin for WordPress is vulnerable to Stored Cross-Site Scripting v

A vulnerability classified as critical was found in PHPGurukul Zoo Management System 2.1. This vulnerability affects unk

A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been rated as critical. Affected by this issue

A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been declared as critical. Affected by this vu

The Essential Addons for Elementor – Popular Elementor Templates and Widgets plugin for WordPress is vulnerable to Store

The AI Engine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the mwai_chatbot shortcode 'id' para

In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of serv

In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of serv

In wlan STA driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote (

In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local inf

In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local inf

In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local inf

In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local inf

In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local inf

In Bluetooth driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local d

A vulnerability has been found in hitsz-ids airda 0.0.3 and classified as critical. This vulnerability affects the funct

A vulnerability, which was classified as critical, has been found in TOTOLINK N200RE 9.3.5u.6095_B20200916/9.3.5u.6139_B

SAPCAR allows an attacker logged in with high privileges to override the permissions of the current and parent directori

SAPCAR allows an attacker logged in with high privileges to create a malicious SAR archive in SAPCAR. This could enable

Due to a missing authorization check in an obsolete RFC enabled function module in SAP BASIS, an authenticated low-privi

Due to insufficient sanitization in the SAP BusinessObjects Content Administrator Workbench, attackers could craft malic

Due to an open redirect vulnerability in SAP NetWeaver Application Server ABAP, an unauthenticated attacker could craft

The GuiXT application, which is integrated with SAP GUI for Windows, uses obfuscation algorithms instead of secure symme

Due to missing authorization check, an attacker authenticated as a non-administrative user could call a remote-enabled f

Due to a Cross-Site Scripting vulnerability in SAP Data Services Management Console, an authenticated attacker could exp

A memory corruption vulnerability exists in SAPCAR allowing an attacker to craft malicious SAPCAR archives. When a high

SAPCAR improperly sanitizes the file paths while extracting SAPCAR archives. Due to this, an attacker could craft a mali

SAP NetWeaver Application Server ABAP and ABAP Platform allows an unauthenticated attacker to inject a malicious script

SAP NetWeaver allows an authenticated non-administrative user to call the remote-enabled function module which could gra

SAP CMC Promotion Management allows an authenticated attacker to enumerate internal network systems by submitting crafte

SAP Business Warehouse (Business Explorer Web) allows an attacker to create a malicious link. If an authenticated user c

Due to a missing authorization check in SAP NetWeaver Application server for ABAP, an authenticated user with high privi

SAP Business Warehouse and SAP BW/4HANA BEx Tools allow an authenticated attacker to gain higher access levels than inte

SAP�BusinessObjects Business�Intelligence Platform (Web Intelligence) is vulnerable to HTML Injection, allowing an attac

A vulnerability classified as critical has been found in Campcodes Advanced Online Voting System 1.0. Affected is an unk

A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been rated as critical. This issue affe

A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been declared as critical. This vulnera

A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been classified as critical. This affec