2025

The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to unauthorized access, mo

The Product Import Export for WooCommerce – Import Export Product CSV Suite plugin for WordPress is vulnerable to PHP Ob

The Product Import Export for WooCommerce – Import Export Product CSV Suite plugin for WordPress is vulnerable to Server

The WordPress Importer plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including,

The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Remo

The Newsletters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the logging functionality in all v

The Active Products Tables for WooCommerce. Use constructor to create tables plugin for WordPress is vulnerable to unaut

The BWL Advanced FAQ Manager plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a

The Booknetic WordPress plugin before 4.1.5 does not have CSRF check when creating Staff accounts, which could allow att

OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior

An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs when converting glyphs to Unicod

An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs via an oversized Type 4 function

An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs for a long TTF font name to pdf/

An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of DollarBl

In NASA cFS (Core Flight System) Aquila, it is possible to put the onboard software in a state that will prevent the lau

NASA cFS (Core Flight System) Aquila is vulnerable to segmentation fault via sending a malicious telecommand to the Memo

NASA cFS (Core Flight System) Aquila is vulnerable to path traversal in the OSAL module, allowing the override of any ar

An issue was discovered on the Audi Universal Traffic Recorder 2.88. It has Susceptibility to denial of service. It uses

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP01 WP01 wp01 allows Pa

A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker

A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker

Frappe is a full-stack web application framework. Prior to versions 14.89.0 and 15.51.0, making crafted requests could l

Frappe is a full-stack web application framework. Prior to versions 14.91.0 and 15.52.0, a system user was able to creat

Frappe is a full-stack web application framework. An SQL Injection vulnerability has been identified in Frappe Framework

Luxion KeyShot USDC File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote at

Luxion KeyShot DAE File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allow

Luxion KeyShot DAE File Parsing Access of Uninitialized Pointer Remote Code Execution Vulnerability. This vulnerability

The GLPI Inventory Plugin handles various types of tasks for GLPI agents, including network discovery and inventory (SNM

A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrar

VMware Tools for Windows contains an authentication bypass vulnerability due to improper access control. A malicious act

A vulnerability exists in RTU IEC 61850 client and server functionality that could impact the availability if renegotiat

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache VCL. Users

The EZ SQL Reports Shortcode Widget and DB Backup plugin for WordPress is vulnerable to Cross-Site Request Forgery in ve

The WP Church Donation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several donation form submi

A vulnerability classified as critical has been found in PHPGurukul Old Age Home Management System 1.0. Affected is an u

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0. It has been rated as critical. This issue af

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0. It has been declared as critical. This vulne

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0. It has been classified as critical. This aff

SQL Injection can occur in the SirsiDynix Horizon Information Portal (IPAC20) through 3.25_9382; however, a patch is ava

The Stylish Google Sheet Reader 4.0 WordPress plugin before 4.1 does not sanitise and escape a parameter before outputt

The aoa-downloadable WordPress plugin through 0.1.0 lacks authorization and authentication for requests to its download.

The aoa-downloadable WordPress plugin through 0.1.0 doesn't validate a parameter in its download function, allowing unau

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this

A vulnerability has been found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by

A vulnerability, which was classified as critical, was found in PHPGurukul Old Age Home Management System 1.0. Affected

A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014.

A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014.

A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014.

A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014 a

A vulnerability has been found in H3C Magic NX30 Pro and Magic NX400 up to V100R014 and classified as critical. This vul