2025

The Simple Logo Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all

The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the pl

The Poll, Survey & Quiz Maker Plugin by Opinion Stage plugin for WordPress is vulnerable to unauthorized modification of

Mezzanine CMS, in versions prior to 6.1.1, contains a Stored Cross-Site Scripting (XSS) vulnerability in the admin inter

A vulnerability classified as critical was found in Webkul QloApps 1.6.1. Affected by this vulnerability is an unknown f

A vulnerability classified as critical has been found in themanojdesai python-a2a up to 0.5.5. Affected is the function

The Ivory Search WordPress plugin before 5.5.10 does not sanitise and escape some of its settings, which could allow hi

A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been declared as critical. Aff

A vulnerability, which was classified as critical, was found in Steel Browser up to 0.1.3. This affects the function han

The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to SQL Injection via the ‘prgSort

The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.123 and 25.0.27

Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.123 and 25.0.27

A vulnerability was found in Intera InHire up to 20250530. It has been declared as critical. Affected by this vulnerabil

This issue was addressed with improved checks. This issue is fixed in iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPad

OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable to a Minerva attack, exploitable by measuring the

Weblate is a web based localization tool. Prior to version 5.12, the audit log notifications included the full IP addres

Weblate is a web based localization tool. Prior to version 5.12, the verification of the second factor was not subject t

A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been rated as critical. This iss

A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been declared as critical. This

A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been classified as critical. Thi

A vulnerability was found in Projectworlds Life Insurance Management System 1.0 and classified as critical. Affected by

A vulnerability was found in PHPGurukul Rail Pass Management System 1.0. It has been declared as problematic. Affected b

Any project that uses Protobuf Pure-Python backend to parse untrusted Protocol Buffers data containing an arbitrary numb

A vulnerability, which was classified as critical, was found in code-projects Restaurant Order System 1.0. This affects

A vulnerability classified as critical was found in Open Asset Import Library Assimp up to 5.4.3. Affected by this vulne

Possible kernel exceptions caused by reading and writing kernel heap data after free.

A vulnerability classified as critical has been found in Open Asset Import Library Assimp up to 5.4.3. Affected is the f

A web application for configuring the controller is accessible at a specific path. It contains an endpoint that allows a

An unauthenticated remote attacker can trick an admin to visit a website containing malicious java script code. The curr

Reflected Cross-Site Scripting (XSS) in /customer_support/index.php in Customer Support System v1.0, which allows remote

An open redirection vulnerability in M-Files mobile applications for Android and iOS prior to version 25.6.0 allows atta

A vulnerability was found in javahongxi whatsmars 2021.4.0. It has been rated as problematic. Affected by this issue is

A vulnerability was found in hansonwang99 Spring-Boot-In-Action up to 807fd37643aa774b94fd004cc3adbd29ca17e9aa. It has b

A vulnerability was found in WuKongOpenSource WukongCRM 9.0 and classified as problematic. This issue affects some unkno

A vulnerability has been found in jflyfox jfinal_cms 5.0.1 and classified as problematic. This vulnerability affects unk

A vulnerability classified as critical has been found in letta-ai letta up to 0.4.1. Affected is the function function_m

A vulnerability was found in realguoshuai open-video-cms 1.0. It has been rated as critical. This issue affects some unk

A vulnerability was found in szluyu99 gin-vue-blog up to 61dd11ccd296e8642a318ada3ef7b3f7776d2410. It has been declared

A vulnerability was found in UTT 进取 750W up to 5.0 and classified as critical. Affected by this issue is the function fo

A vulnerability has been found in codesiddhant Jasmin Ransomware up to 1.0.1 and classified as critical. Affected by thi

A vulnerability, which was classified as critical, has been found in qianfox FoxCMS up to 1.2.5. This issue affects the

A vulnerability classified as critical was found in uYanki board-stm32f103rc-berial up to 84daed541609cb7b46854cc6672a27

A path traversal issue in the API endpoint in M-Files Server before version 25.6.14925.0 allows an authenticated user to

A vulnerability was found in comfyanonymous comfyui up to 0.3.39. It has been declared as problematic. Affected by this

A vulnerability has been found in Astun Technology iShare Maps 5.4.0 and classified as problematic. This vulnerability a

IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0,

The Slider, Gallery, and Carousel by MetaSlider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th

The YITH WooCommerce Wishlist plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter i

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Sto