2025

An issue was discovered in GoBGP before 3.35.0. pkg/packet/bgp/bgp.go allows attackers to cause a panic via a zero value

A vulnerability was found in PHPGurukul Men Salon Management System 1.0. It has been classified as critical. Affected is

A vulnerability was found in PHPGurukul Men Salon Management System 1.0 and classified as critical. This issue affects s

A vulnerability has been found in PHPGurukul Men Salon Management System 1.0 and classified as critical. This vulnerabil

A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644) and classified as critical. Affected by this

A vulnerability has been found in PHPGurukul Men Salon Management System 1.0 and classified as critical. Affected by thi

In Pritunl Client before 1.3.4220.57, an administrator with access to /Applications can escalate privileges after uninst

A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644). It has been rated as critical. This issue af

A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644). It has been declared as critical. This vulne

A vulnerability has been found in WCMS 11 and classified as critical. Affected by this vulnerability is an unknown funct

A vulnerability, which was classified as critical, was found in WCMS 11. Affected is an unknown function of the file app

The Download Manager plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validat

The Debug Log Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the auto-refresh debug log i

The Insert Headers And Footers plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, a

The WP-Syntax WordPress plugin through 1.2 does not properly handle input, allowing an attacker to create a post contain

The CLEVER - HTML5 Radio Player With History - Shoutcast and Icecast - Elementor Widget Addon plugin for WordPress is vu

The JobWP – Job Board, Job Listing, Career Page and Recruitment Plugin plugin for WordPress is vulnerable to SQL Injecti

z80pack is a mature emulator of multiple platforms with 8080 and Z80 CPU. In version 1.38 and prior, the `makefile-ubunt

When installing Nessus to a non-default location on a Windows host, Nessus versions prior to 10.8.4 did not enforce secu

An issue in WorldCast Systems ECRESO FM/DAB/TV Transmitter v1.10.1 allows authenticated attackers to escalate privileges

An information disclosure vulnerability in the component /socket.io/1/websocket/ of Soundcraft Ui Series Model(s) Ui12 a

A potential security vulnerability has been identified in the HP Touchpoint Analytics Service for certain HP PC products

An access control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows deleted users to retain access to system re

Fastify is a fast and low overhead web framework, for Node.js. In versions 5.0.0 to 5.3.0 as well as version 4.29.0, app

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, forum q

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, if a ma

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, the for

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, the s p

In the Linux kernel, the following vulnerability has been resolved: HSI: ssi_protocol: Fix use after free vulnerability

A buffer overflow vulnerability in Astrolog v7.70 allows attackers to execute arbitrary code or cause a Denial of Servic

A credential exposure vulnerability in Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Web v01.09, v01.08, v01.07, and

In the Linux kernel, the following vulnerability has been resolved: io_uring: fix io_req_prep_async with provided buffe

A vulnerability was found in Tenda AC15 up to 15.03.05.19 and classified as critical. This issue affects the function fr

A vulnerability has been found in D-Link DWR-M961 1.1.36 and classified as critical. This vulnerability affects unknown

In the Linux kernel, the following vulnerability has been resolved: iio: light: Add check for array bounds in veml6075_

In the Linux kernel, the following vulnerability has been resolved: objtool, spi: amd: Fix out-of-bounds stack access i

In the Linux kernel, the following vulnerability has been resolved: ASoC: simple-card-utils: Don't use __free(device_no

In the Linux kernel, the following vulnerability has been resolved: objtool, nvmet: Fix out-of-bounds stack access in n

In the Linux kernel, the following vulnerability has been resolved: jfs: fix slab-out-of-bounds read in ea_get() Durin

In the Linux kernel, the following vulnerability has been resolved: nfsd: allow SC_STATUS_FREEABLE when searching via n

In the Linux kernel, the following vulnerability has been resolved: dmaengine: fsl-edma: free irq correctly in remove p

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Fix off-by-one error in build_prolo

In the Linux kernel, the following vulnerability has been resolved: ext4: fix OOB read when checking dotdot dir Mounti

Path Traversal: '.../...//' vulnerability in ThimPress Ivy School ivy-school allows PHP Local File Inclusion.This issue

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pantherius Modal S

The Avatar plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in a f

Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data ou

A Remote Code Execution (RCE) vulnerability was identified in GitHub Enterprise Server that allowed attackers to execute

An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed cross-site scr

An issue in a-blogcms 3.1.15 allows a remote attacker to obtain sensitive information via the /bid/1/admin/entry-edit/ p