2025

The Markup Markdown WordPress plugin before 3.20.10 allows links to contain JavaScript which could allow users with the

The Markup Markdown WordPress plugin before 3.20.10 allows links to contain JavaScript which could allow users with the

The Admin and Site Enhancements (ASE) WordPress plugin before 7.9.8 does not sanitise SVG files when uploaded via xmlrpc

The Etsy Shop WordPress plugin before 3.0.7 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it b

A vulnerability was detected in Campcodes Grocery Sales and Inventory System 1.0. This affects an unknown part of the fi

A security vulnerability has been detected in Campcodes Online Learning Management System 1.0. Affected by this issue is

A weakness has been identified in Campcodes Online Learning Management System 1.0. Affected by this vulnerability is an

A security flaw has been discovered in Campcodes Online Learning Management System 1.0. Affected is an unknown function

In Artifex GhostXPS before 10.06.0, there is a stack-based buffer overflow in xps_unpredict_tiff in xpstiff.c because th

In Artifex Ghostscript through 10.05.1, ocr_begin_page in devices/gdevpdfocr.c has an integer overflow that leads to a h

Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdfmark_coerce_dest in devices/vector/gdevpdfm.

Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdf_write_cmap in devices/vector/gdevpdtw.c.

A vulnerability was identified in Campcodes Online Learning Management System 1.0. This impacts an unknown function of t

A vulnerability was determined in CodeAstro Simple Pharmacy Management 1.0. This affects an unknown function of the file

A vulnerability was found in D-Link DCS-935L up to 1.13.01. The impacted element is the function sub_402280 of the file

A vulnerability has been found in Smartstore up to 6.2.0. The affected element is an unknown function of the file /check

A flaw has been found in JSC R7 R7-Office Document Server up to 20250820. Impacted is an unknown function of the file /d

A vulnerability was detected in LionCoders SalePro POS up to 5.5.0. This issue affects some unknown processing of the co

A security vulnerability has been detected in Wavlink WL-NU516U1 240425. This vulnerability affects the function sub_401

A weakness has been identified in Ruijie 6000-E10 up to 2.4.3.6-20171117. This affects an unknown part of the file /view

A security flaw has been discovered in B-Link BL-AC2100 up to 1.0.3. Affected by this issue is the function delshrpath o

A vulnerability was identified in huggingface LeRobot up to 0.3.3. Affected by this vulnerability is an unknown function

A vulnerability was determined in jeecgboot JimuReport up to 2.1.2. Affected is an unknown function of the file /drag/on

A vulnerability was found in jeecgboot JimuReport up to 2.1.2. This impacts an unknown function of the file /drag/onlDra

A vulnerability was detected in CosmodiumCS OnlyRAT up to 3.2. The affected element is the function connect/remote_uploa

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Sitecore Si

A vulnerability has been found in h2oai h2o-3 up to 3.46.08. This affects an unknown function of the file /99/ImportSQLT

A flaw has been found in h2oai h2o-3 up to 3.46.08. The impacted element is an unknown function of the file /99/ImportSQ

A deserialization vulnerability exists in h2oai/h2o-3 versions <= 3.46.0.8, allowing attackers to read arbitrary system

A weakness has been identified in SeriaWei ZKEACMS up to 4.3. This issue affects the function Download of the file Event

A security flaw has been discovered in SeriaWei ZKEACMS up to 4.3. This vulnerability affects the function CheckPage/Sug

A vulnerability was identified in SeriaWei ZKEACMS up to 4.3. This affects the function Edit of the file src/ZKEACMS.Eve

A vulnerability was determined in academico-sis academico up to d9a9e2636fbf7e5845ee086bcb03ca62faceb6ab. Affected by th

A vulnerability was found in kuaifan DooTask up to 1.2.49. Affected by this vulnerability is an unknown functionality of

A vulnerability has been found in Harness 3.3.0. Affected is an unknown function of the file /api/v1/login of the compon

A flaw has been found in Harness 3.3.0. This impacts the function LookupRepo of the file app/api/controller/gitspace/loo

A vulnerability was detected in Webkul QloApps up to 1.7.0. This affects an unknown function of the component CSRF Token

A security vulnerability has been detected in htmly up to 3.1.0. The impacted element is an unknown function of the file

A weakness has been identified in UTT 1200GW up to 3.0.0-170831. The affected element is an unknown function of the file

A security flaw has been discovered in UTT HiPER 840G up to 3.1.1-190328. Impacted is an unknown function of the file /g

A vulnerability was detected in Selleo Mentingo 2025.08.27. The impacted element is an unknown function of the component

Starch versions 0.14 and earlier generate session ids insecurely. The default session id generator returns a SHA-1 hash

A security vulnerability has been detected in Selleo Mentingo up to 2025.08.27. The affected element is an unknown funct

The Custom Login And Signup Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up t

The Browser Sniff plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including,

The osTicket WP Bridge plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and inclu

The SupportCandy – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Authentication Bypass

The Internal Links Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and i

The SureForms – Drag and Drop Contact Form Builder – Multi-step Forms, Conversational Forms and more plugin for WordPres

The Secure Passkeys plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the d