2025

Cross-Site Request Forgery (CSRF) vulnerability in WPFactory Min Max Step Quantity Limits Manager for WooCommerce produc

Missing Authorization vulnerability in Roland Beaussant Audio Editor & Recorder audio-editor-recorder allows Exploiting

The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the data-countdow

The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cros

Client-Side Enforcement of Server-Side Security vulnerability in Salesforce OmniStudio (FlexCards) allows bypass of requ

The Ultimate Blocks – WordPress Blocks Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via mult

Due to an undocumented active bluetooth stack on products delivered within the period 01.01.2024 to 09.05.2025 fingerpri

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists

CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability exists when a

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could c

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists impact

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in Cer

CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated maliciou

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists impact

CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated maliciou

CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause Denial of Service when an authenticated

A vulnerability was found in Open5GS up to 2.7.3. It has been declared as problematic. Affected by this vulnerability is

The Elementor Website Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘button_text

The Bunny’s Print CSS plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includ

The security settings in the SAP Business One Integration Framework are not adequately checked, allowing attackers to by

SAP MDM Server allows an attacker to gain control of existing client sessions and execute certain functions without havi

Due to a missing authorization check vulnerability in SAP S/4HANA (Enterprise Event Enablement), an attacker with access

SAP S/4HANA (Bank Account Application) does not perform necessary authorization checks. This allows an authenticated 'ap

SAP Manage Processing Rules (For Bank Statement) allows an attacker with basic privileges to edit shared rules of any us

SAP S/4HANA Manage Central Purchase Contract does not perform necessary authorization checks for an authenticated user.

Due to a Cross-Site Scripting vulnerability in SAP NetWeaver (ABAP Keyword Documentation), an unauthenticated attacker c

In AMD Versal Adaptive SoC devices, the lack of address validation when executing PLM runtime services through the PLM f

CyberData 011209 Intercom could allow an unauthenticated user to gather sensitive information through blind SQL injectio

A vulnerability, which was classified as problematic, was found in Tenda AC9 15.03.02.13. This affects an unknown part.

A vulnerability classified as critical was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. Affected by this

A vulnerability classified as critical has been found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. Affected is

A vulnerability was found in vuejs vue-cli up to 5.0.8. It has been rated as problematic. This issue affects the functio

A vulnerability was found in tarojs taro up to 4.1.1. It has been declared as problematic. This vulnerability affects un

HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.0, in the HAX site

HAX CMS PHP allows users to manage their microsite universe with a PHP backend. Prior to version 11.0.0, an authenticate

A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the

A vulnerability was found in Metabase 54.10. It has been classified as problematic. This affects the function parseDataU

A vulnerability, which was classified as problematic, has been found in RocketChat up to 7.6.1. This issue affects the f

A vulnerability classified as problematic was found in Unitech pm2 up to 6.0.6. This vulnerability affects unknown code

A vulnerability classified as problematic has been found in actions toolkit 0.5.0. This affects the function globEscape

A vulnerability was found in jsnjfz WebStack-Guns 1.0. It has been declared as problematic. Affected by this vulnerabili

Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to

A stored cross-site scripting (XSS) vulnerability in Anchor CMS v0.12.7 allows attackers to inject malicious JavaScript

Vigybag v1.0 and before is vulnerable to Cross Site Scripting (XSS) via the upload profile picture function under my pro

An issue in KeeperChat IOS Application v.5.8.8 allows a physically proximate attacker to escalate privileges via the Bio

A Host Header injection vulnerability in the password reset function of VigyBag Open Source Online Shop commit 3f0e21b a

Missing Authorization vulnerability in Crypto Cloud CryptoCloud - Crypto Payment Gateway cryptocloud-crypto-payment-gate

Missing Authorization vulnerability in relentlo StyleAI relentlosoftware allows Accessing Functionality Not Properly Con

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in click5 History Log

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in info@welcart Welcart e-C