2025

Improper Certificate Validation (CWE-295) in the Gallagher Command Centre SALTO integration allowed an attacker to spoof

A vulnerability was found in Quantico Tecnologia PRMV 6.48. It has been classified as critical. This affects an unknown

A vulnerability was found in AT Software Solutions ATSVD up to 3.4.1. It has been rated as critical. Affected by this is

The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Cross-Site Request Forgery in all vers

The WP-Recall – Registration, Profile, Commerce & More plugin for WordPress is vulnerable to SQL Injection via the 'data

The Product Input Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to insufficien

The Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit plugin for WordPress is

The SMTP by BestWebSoft plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation

The miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) Pro Addon plugin for WordPress is vulnerab

The Allow PHP Execute plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 1.0

The Post Meta Data Manager plugin for WordPress is vulnerable to multisite privilege escalation in all versions up to, a

A vulnerability, which was classified as critical, has been found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This issue

An issue was discovered in the Masquerade module before 1.x-1.0.1 for Backdrop CMS. It allows people to temporarily swit

Trimble SketchUp SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows

Python JSON Logger is a JSON Formatter for Python Logging. Between 30 December 2024 and 4 March 2025 Python JSON Logger

XWiki Confluence Migrator Pro helps admins to import confluence packages into their XWiki instance. The homepage of the

IBM Aspera Shares 1.9.9 through 1.10.0 PL7 is vulnerable to an XML external entity injection (XXE) attack when processin

A command injection vulnerability has been reported to affect QHora. If exploited, the vulnerability could allow remote

An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, t

An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, t

An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP o

An improper certificate validation vulnerability has been reported to affect Helpdesk. If exploited, the vulnerability c

An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, t

A vulnerability, which was classified as critical, was found in PHPGurukul Pre-School Enrollment System up to 1.0. Affec

The WordPress Activity O Meter WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting i

In the Linux kernel, the following vulnerability has been resolved: amdkfd: properly free gang_ctx_bo when failed to in

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Load DR6 with guest value only before ent

In the Linux kernel, the following vulnerability has been resolved: io_uring/kbuf: reallocate buf lists on upgrade IOR

The Eventer - WordPress Event & Booking Manager Plugin plugin for WordPress is vulnerable to SQL Injection via the reg_i

The School Management System for Wordpress plugin for WordPress is vulnerable to privilege escalation via account takeov

The CS Framework plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 6.9 via

The CS Framework plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation

The Ultimate Video Player WordPress & WooCommerce Plugin plugin for WordPress is vulnerable to Directory Traversal in al

Dell ThinOS 2411 and prior, contains an Improper Neutralization of Special Elements used in a Command ('Command Injectio

The UiPress lite | Effortless custom dashboards, admin themes and pages plugin for WordPress is vulnerable to unauthoriz

The Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress plugin for WordPress is vulnerable to

Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory.

The Flex Mag - Responsive WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data th

The CURCY - WooCommerce Multi Currency - Currency Switcher plugin for WordPress is vulnerable to SQL Injection via the '

A vulnerability was found in projectworlds Life Insurance Management System 1.0 and classified as critical. This issue a

A vulnerability has been found in projectworlds Life Insurance Management System 1.0 and classified as critical. This vu

A vulnerability, which was classified as critical, was found in projectworlds Life Insurance Management System 1.0. This

A vulnerability, which was classified as critical, has been found in projectworlds Life Insurance Management System 1.0.

A vulnerability classified as critical was found in projectworlds Life Insurance Management System 1.0. Affected by this

A vulnerability classified as critical has been found in projectworlds Life Insurance Management System 1.0. Affected is

A vulnerability was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. It has been classified as critical. This

A vulnerability was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0 and classified as critical. Affected by th

A vulnerability has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0 and classified as critical. Affected

A vulnerability, which was classified as critical, was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affect

The Homey theme for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.4.3. This is du