2025

Missing Authorization vulnerability in quantumcloud Simple Link Directory qc-simple-link-directory allows Exploiting Inc

Missing Authorization vulnerability in wordpresschef Salon Booking Pro salon-booking-plugin-pro-cc allows Exploiting Inc

Cross-Site Request Forgery (CSRF) vulnerability in Chaser324 Featured Posts Scroll featured-posts-scroll allows Stored X

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mojofywp Product C

Missing Authorization vulnerability in QuanticaLabs CSS3 Accordions for WordPress css3_accordions allows Exploiting Inco

Cross-Site Request Forgery (CSRF) vulnerability in loopus WP Ultimate Tours Builder WP_UltimateToursBuilder allows Cross

Cross-Site Request Forgery (CSRF) vulnerability in kamleshyadav Pixel WordPress Form BuilderPlugin & Autoresponder pixel

Cross-Site Request Forgery (CSRF) vulnerability in themeton Spare allows Cross Site Request Forgery. This issue affects

Missing Authorization vulnerability in themeton The Business allows Exploiting Incorrectly Configured Access Control Sec

Missing Authorization vulnerability in themeton HotStar – Multi-Purpose Business Theme allows Exploiting Incorrectly Con

Cross-Site Request Forgery (CSRF) vulnerability in themeton Seven Stars allows Cross Site Request Forgery. This issue af

Missing Authorization vulnerability in themeton Acerola acerola allows Exploiting Incorrectly Configured Access Control

Missing Authorization vulnerability in themeton Rozario allows Exploiting Incorrectly Configured Access Control Security

Missing Authorization vulnerability in redqteam Wishlist wishlist allows Exploiting Incorrectly Configured Access Contro

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in redqteam Wishlist wishlist a

A vulnerability has been found in SourceCodester/oretnom23 Stock Management System 1.0 and classified as critical. This

A vulnerability classified as critical has been found in PHPGurukul Park Ticketing Management System 2.0. Affected is an

A flaw was found in the FreeRDP used by Anaconda's remote install feature, where a crafted RDP packet could trigger a se

Nextcloud Server is a self hosted personal cloud system, and the Nextcloud Groupfolders app provides admin-configured fo

Nextcloud Desktop is the desktop sync client for Nextcloud. In versions of Nextcloud Desktop prior to 3.15, 3rdparty app

Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server prior to 28.0.13, 29.0.10, and 30.0.3 and N

A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0. It has been rated as critical. This issue

A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0. It has been declared as critical. This vul

Nextcloud Server is a self hosted personal cloud system. Nextcloud Server prior to 29.0.15, 30.0.9, and 31.0.3 and Nextc

Flask-AppBuilder is an application development framework built on top of Flask. Versions prior to 4.6.2 would allow for

A vulnerability was found in PHPGurukul Park Ticketing Management System 2.0. It has been classified as critical. This a

FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library. The in

An Improper Access Control vulnerability was identified in the file download functionality. This vulnerability allows us

seaweedfs v3.68 was discovered to contain a SQL injection vulnerability via the component /abstract_sql/abstract_sql_sto

A vulnerability, which was classified as critical, has been found in PHPGurukul Park Ticketing Management System 2.0. Th

Cross-site scripting (XSS) in Icewarp Mail Server affecting version 11.4.0. This vulnerability allows an attacker to mod

HTTP host header injection vulnerability in Icewarp Mail Server affecting version 11.4.0. By modifying the Host header a

Open redirection vulnerability in IceWarp Mail Server affecting version 11.4.0. This vulnerability allows an attacker to

A vulnerability classified as critical has been found in feng_ha_ha/megagao ssm-erp and production_ssm 1.0. This affects

A vulnerability was found in defog-ai introspect up to 0.1.4. It has been rated as critical. Affected by this issue is t

A vulnerability in Synology Active Backup for Microsoft 365 allows remote authenticated attackers to obtain sensitive in

A vulnerability was found in D-Link DI-7003GV2 24.04.18D1 R(68125). It has been declared as problematic. This vulnerabil

A vulnerability was found in D-Link DI-7003GV2 24.04.18D1 R(68125) and classified as problematic. Affected by this issue

Missing Authorization vulnerability in Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view component).T

Authentication credentials leakage vulnerability in Hitachi Ops Center Analyzer viewpoint.This issue affects Hitachi Op

Cross-Site WebSocket Hijacking vulnerability in Hitachi Ops Center Analyzer (RAID Agent component).This issue affects Hi

A vulnerability has been found in D-Link DI-7003GV2 24.04.18D1 R(68125) and classified as problematic. Affected by this

A vulnerability, which was classified as problematic, was found in D-Link DI-7003GV2 24.04.18D1 R(68125). Affected is an

A vulnerability, which was classified as problematic, has been found in D-Link DI-7003GV2 24.04.18D1 R(68125). This issu

The Simple Lightbox WordPress plugin before 2.9.4 does not validate and escape some of its attributes before outputting

The Contact Form builder with drag & drop for WordPress WordPress plugin before 2.4.3 does not sanitise and escape some

Bypass Connection Restriction vulnerability in Hitachi Infrastructure Analytics Advisor (Data Center Analytics component

A vulnerability was found in Bohua NetDragon Firewall 1.0 and classified as critical. This issue affects some unknown pr

In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes,

In libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer overflow in stream->offset+si