2025

VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a

Reflected cross-site scripting vulnerability exists in the laser printers and MFPs (multifunction printers) which implem

The ISOinsight from Netvision has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to a

The LightPress Lightbox WordPress plugin before 2.3.4 does not check download links point to valid, non-Javascript URLs,

The Firelight Lightbox WordPress plugin before 2.3.15 does not prevent users with post writing capabilities from executi

A vulnerability has been found in ContiNew Admin up to 3.6.0 and classified as problematic. Affected by this vulnerabili

A vulnerability was found in 1Panel-dev MaxKB up to 1.10.7. It has been declared as critical. Affected by this vulnerabi

A vulnerability was found in CTCMS Content Management System 2.1.2. It has been classified as critical. Affected is the

A vulnerability was found in D-Link DI-8100 up to 16.07.26A1 and classified as critical. This issue affects some unknown

A vulnerability classified as critical has been found in LmxCMS 1.41. Affected is the function manageZt of the file c\ad

A vulnerability was found in kkFileView 4.4.0. It has been classified as critical. This affects an unknown part of the f

A vulnerability has been found in Gosuncn Technology Group Audio-Visual Integrated Management Platform 1.0 and classifie

A vulnerability, which was classified as problematic, was found in Gosuncn Technology Group Audio-Visual Integrated Mana

A vulnerability was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. It has been rated as critical. Affected b

A vulnerability was found in feng_ha_ha/megagao ssm-erp and production_ssm 1.0. It has been declared as problematic. Aff

A vulnerability was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. It has been classified as problematic. Af

A weakness has been identified in Dígitro NGC Explorer up to 3.48.21. This affects an unknown function. Executing a mani

Lumi H5P-Nodejs-library before 9.3.3 omits a sanitizeHtml call for plain text strings.

A vulnerability was identified in Dígitro NGC Explorer up to 3.48.21. The affected element is an unknown function of the

libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called

libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called

A vulnerability, which was classified as problematic, was found in Zylon PrivateGPT up to 0.6.2. This affects an unknown

A vulnerability, which was classified as critical, has been found in Zhengzhou Jiuhua Electronic Technology mayicms up t

A vulnerability classified as problematic was found in Catalyst User Key Authentication Plugin 20220819 on Moodle. Affec

A vulnerability classified as problematic has been found in Inetum IODAS 7.2-LTS.4.1-JDK7/7.2-RC3.2-JDK7. Affected is an

A vulnerability was found in vector4wang spring-boot-quick up to 20250422. It has been rated as critical. This issue aff

A vulnerability was found in Changjietong UFIDA CRM 1.0. It has been declared as critical. This vulnerability affects un

A vulnerability, which was classified as critical, was found in code-projects Album Management System 1.0. This affects

A vulnerability, which was classified as critical, has been found in code-projects Hotel Management System 1.0. Affected

A vulnerability classified as critical was found in code-projects Simple Hospital Management System 1.0. Affected by thi

The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th

A vulnerability classified as critical has been found in code-projects Simple Bus Reservation System 1.0. Affected is th

A vulnerability was found in code-projects Simple Banking System up to 1.0. It has been rated as critical. This issue af

The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Video Button an

The WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More plugin for WordPress is vu

IBM App Connect Enterprise Certified Container 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5,

A vulnerability was found in code-projects Simple College Management System 1.0. It has been declared as critical. This

An issue has been discovered in GitLab CE/EE affecting all versions from 12.0 before 17.9.8, 17.10 before 17.10.6, and 1

An issue has been discovered in GitLab CE/EE affecting all versions starting from 17.3 prior to 17.9.8, from 17.10 prior

An issue has been discovered in GitLab CE/EE affecting all versions starting from 17.1 prior to 17.9.8, from 17.10 prior

A flaw was found in Rust's Ring package. A panic may be triggered when overflow checking is enabled. In the QUIC protoco

An issue in Victure RX1800 EN_V1.0.0_r12_110933 allows physically proximate attackers to execute arbitrary code or gain

A flaw was found in systems utilizing LUKS-encrypted disks with GRUB configured for TPM-based auto-decryption. When GRUB

The EUCookieLaw plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 2.7.2 vi

Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x. There are a number of issues in Ap

The Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode plugin for Wor

A vulnerability was found in code-projects Departmental Store Management System 1.0. It has been classified as critical.

A vulnerability, which was classified as critical, has been found in code-projects Jewelery Store Management system 1.0.

In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Consistently treat platform_max as contr

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_