2025

FreshRSS is a self-hosted RSS feed aggregator. Prior to version 1.26.2, HTML is sanitized improperly inside the `<iframe

FreshRSS is a self-hosted RSS feed aggregator. A vulnerability in versions prior to 1.26.2 causes a user to be repeatedl

FreshRSS is a self-hosted RSS feed aggregator. Prior to version 1.26.2, it's possible to run arbitrary JavaScript on the

VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the router port due to improper input validatio

VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the gateway firewall due to improper input vali

A vulnerability was found in Tenda AC18 15.03.05.05. It has been declared as critical. This vulnerability affects the fu

Improper sanitization of the value of the 'href' and 'xlink:href' attributes in '<image>' SVG elements in AngularJS's 'n

A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, remote attacker

A vulnerability in the CLI of multiple Cisco Unified Communications products could allow an authenticated, local attacke

A vulnerability in the file opening process of Cisco Unified Contact Center Express (Unified CCX) Editor could allow an

A vulnerability in the web-based management interface of Cisco Unified Intelligent Contact Management Enterprise could a

Multiple vulnerabilities in the update process of Cisco ThousandEyes Endpoint Agent for Windows could allow an authentic

A vulnerability in the API of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) co

A vulnerability in the web-based chat interface of Cisco Customer Collaboration Platform (CCP), formerly Cisco SocialMin

Cross Site Scripting vulnerability in Motivian Content Mangment System v.41.0.0 allows a remote attacker to execute arbi

An issue was discovered in Samsung Mobile Processor Exynos 2200, 1480, and 2400. A Use-After-Free in the mobile processo

An issue was discovered in Samsung Mobile Processor Exynos 1380. A Use-After-Free in the mobile processor leads to privi

An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400. A Double Free in the mobile pro

An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400. A Double Free in the mobile pro

Sensitive information disclosure due to SSRF. The following products are affected: Acronis Cyber Protect 16 (Windows, Li

Weak server key used for TLS encryption. The following products are affected: Acronis Cyber Protect 16 (Linux, macOS, Wi

Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Cyber Protect

A vulnerability was found in CodeAstro Real Estate Management System 1.0. It has been rated as critical. This issue affe

A reflected XSS vulnerability in RSform!Pro component 3.0.0 - 3.3.13 for Joomla was discovered. The issue arises from th

A vulnerability was found in D-Link DCS-932L 2.18.01. It has been rated as critical. Affected by this issue is the funct

A vulnerability was found in D-Link DCS-932L 2.18.01. It has been classified as critical. Affected is the function setSy

A vulnerability was found in IdeaCMS up to 1.7 and classified as critical. This issue affects the function Article/Goods

The File Provider WordPress plugin through 1.2.3 does not have CSRF check in place when updating its settings, which cou

kro (Kube Resource Orchestrator) 0.1.0 before 0.2.1 allows users (with permission to create or modify ResourceGraphDefin

A vulnerability classified as critical has been found in PHPGurukul Notice Board System 1.0. This affects an unknown par

The Simple Contact Form Plugin for WordPress – WP Easy Contact plugin for WordPress is vulnerable to Stored Cross-Site S

Improper authorization in Smart Switch installed on non-Samsung Device prior to version 3.7.64.10 allows local attackers

Improper handling of insufficient permission in ClientProvider in Samsung Internet installed on non-Samsung Device prior

Improper handling of insufficient permission in SyncClientProvider in Samsung Internet installed on non-Samsung Device p

Out-of-bounds write in libsecimaging.camera.samsung.so prior to SMR Jun-2025 Release 1 allows local attackers to write o

Out-of-bound read in libsecimaging.camera.samsung.so prior to SMR Feb-2025 Release 1 allows local attackers to read out-

Improper export of Android application components in Bluetooth prior to SMR Jun-2025 Release 1 allows local attackers to

Improper logging in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to get a hmac

Out-of-bounds read in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to read out

Improper access control in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to get

Improper access control in ScreenCapture for Galaxy Watch prior to SMR Jun-2025 Release 1 allows local attackers to take

Improper privilege management in ThemeManager prior to SMR Jun-2025 Release 1 allows local privileged attackers to reuse

Incorrect default permission in Samsung Cloud for Galaxy Watch prior to SMR Jun-2025 Release 1 allows local attackers to

Improper access control in AudioService prior to SMR Jun-2025 Release 1 allows local attackers to access sensitive infor

A vulnerability was found in PHPGurukul Teacher Subject Allocation Management System 1.0 and classified as critical. Thi

A vulnerability has been found in PHPGurukul Teacher Subject Allocation Management System 1.0 and classified as critical

A vulnerability, which was classified as critical, was found in PHPGurukul Teacher Subject Allocation Management System

The Campus Directory – Faculty, Staff & Student Directory Plugin for WordPress plugin for WordPress is vulnerable to Sto

The Employee Directory – Staff Listing & Team Directory Plugin for WordPress plugin for WordPress is vulnerable to Store

A vulnerability, which was classified as critical, has been found in PHPGurukul Rail Pass Management System 1.0. Affecte