2025

The Woocommerce Multiple Addresses plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and

The PeproDev Ultimate Profile Solutions plugin for WordPress is vulnerable to unauthorized modification of data due to a

The WPshop 2 – E-Commerce plugin for WordPress is vulnerable to privilege escalation via account takeover in versions 2.

The PGS Core plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing

Use after free in WebAudio in Google Chrome prior to 136.0.7103.92 allowed a remote attacker to potentially exploit heap

The PGS Core plugin for WordPress is vulnerable to SQL Injection via the 'event' parameter in the 'save_header_builder'

Incorrect JSON input stringification in Google's Tensorflow serving versions up to 2.18.0 allows for potentially unbound

phpgt/Dom provides access to modern DOM APIs. Versions of phpgt/Dom prior to 4.1.8 expose the GITHUB_TOKEN in the Dom wo

The identity infrastructure software ZITADEL offers developers the ability to manage user sessions using the Session API

vLLM is an inference and serving engine for large language models. In a multi-node vLLM deployment using the V0 engine,

A vulnerability, which was classified as critical, was found in Tenda AC8 16.03.34.06. Affected is the function formGetR

A vulnerability, which was classified as critical, has been found in itsourcecode Gym Management System 1.0. This issue

Dell Storage Center - Dell Storage Manager, version(s) 20.1.20, contain(s) an Improper Restriction of XML External Entit

Dell Storage Center - Dell Storage Manager, version(s) 20.1.20, contain(s) an Improper Authentication vulnerability. An

A vulnerability classified as critical was found in itsourcecode Gym Management System 1.0. This vulnerability affects u

A vulnerability classified as critical has been found in PHPGurukul Company Visitor Management System 2.0. This affects

A vulnerability, which was classified as critical, has been found in itsourcecode Gym Management System 1.0. Affected by

IBM Maximo Application Suite 9.0 could allow an attacker with some level of access to elevate their privileges due to a

A vulnerability classified as critical was found in itsourcecode Gym Management System 1.0. Affected by this vulnerabili

A vulnerability classified as critical has been found in PHPGurukul Company Visitor Management System 2.0. Affected is a

A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02. It has been declared as critical. This vulnerability affects

A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02. It has been classified as critical. This affects the functio

A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02 and classified as critical. Affected by this issue is the fun

A vulnerability classified as critical was found in D-Link DIR-600L up to 2.07B01. This vulnerability affects the functi

A vulnerability classified as critical has been found in D-Link DIR-600L up to 2.07B01. This affects the function formSy

Unrestricted Upload of File with Dangerous Type, Improper Neutralization of Input During Web Page Generation (XSS or 'Cr

A vulnerability was found in D-Link DIR-600L up to 2.07B01. It has been rated as critical. Affected by this issue is the

A vulnerability was found in D-Link DIR-600L up to 2.07B01. It has been declared as critical. Affected by this vulnerabi

A vulnerability was found in D-Link DIR-600L up to 2.07B01. It has been classified as critical. Affected is the function

A vulnerability was found in D-Link DIR-600L up to 2.07B01 and classified as critical. This issue affects the function f

A vulnerability, which was classified as critical, was found in D-Link DIR-600L up to 2.07B01. This affects the function

Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions allows bad actors to execute ar

The Slider & Popup Builder by Depicter plugin for WordPress is vulnerable to generic SQL Injection via the ‘s' parameter

A vulnerability has been found in D-Link DIR-600L up to 2.07B01 and classified as critical. This vulnerability affects t

A vulnerability, which was classified as critical, has been found in D-Link DIR-600L up to 2.07B01. Affected by this iss

Memory corruption while processing escape code, when DisplayId is passed with large unsigned value.

Memory corruption while processing image encoding, when configuration is NULL in IOCTL parameter.

Memory corruption while processing image encoding, when input buffer length is 0 in IOCTL call.

Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to w

Memory corruption while reading the FW response from the shared queue.

Memory corruption while processing an IOCTL request, when buffer significantly exceeds the command argument limit.

Memory corruption while processing a message, when the buffer is controlled by a Guest VM, the value can be changed cont

Transient DOS while parsing per STA profile in ML IE.

Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential f

Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE.

Memory corruption while decoding of OTA messages from T3448 IE.

Memory corruption during the FRS UDS generation process.

Memory corruption while triggering commands in the PlayReady Trusted application.

Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions.

Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling.