2025

A vulnerability, which was classified as critical, was found in Brilliance Golden Link Secondary System up to 20250424.

A vulnerability, which was classified as critical, has been found in Brilliance Golden Link Secondary System up to 20250

The Cision Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all version

A vulnerability classified as critical was found in D-Link DIR-880L up to 104WWb01. Affected by this vulnerability is th

Memory corruption while processing an IOCTL call to set mixer controls.

Memory corruption can occur during context user dumps due to inadequate checks on buffer length.

Memory corruption while handling multiple IOCTL calls from userspace to operate DMA operations.

Memory corruption while sound model registration for voice activation with audio kernel driver.

Memory corruption may occur during IO configuration processing when the IO port count is invalid.

Memory corruption due to improper bounds check while command handling in camera-kernel driver.

Memory corruption while handling schedule request in Camera Request Manager(CRM) due to invalid link count in the corres

Memory corruption during concurrent access to server info object due to unprotected critical field.

A vulnerability classified as critical has been found in D-Link DIR-890L and DIR-806A1 up to 100CNb11/108B03. Affected i

A vulnerability was found in feng_ha_ha/megagao ssm-erp and production_ssm up to 0.0.1. It has been classified as critic

Process residence vulnerability in abnormal scenarios in the print module Impact: Successful exploitation of this vulner

Null pointer dereference vulnerability in the USB HDI driver module Impact: Successful exploitation of this vulnerabilit

Out-of-bounds data read vulnerability in the authorization module Impact: Successful exploitation of this vulnerability

Bypass vulnerability in the network search instruction authentication module Impact: Successful exploitation of this vul

Vulnerability of unauthorized access in the app lock module Impact: Successful exploitation of this vulnerability will a

Vulnerability of unauthorized access in the app lock module Impact: Successful exploitation of this vulnerability will a

Permission control vulnerability in the media library module Impact: Successful exploitation of this vulnerability may a

The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vuln

An low privileged remote Attacker can execute arbitrary web scripts or HTML via a crafted payload injected into several

Vulnerability of insufficient information protection in the media library module Impact: Successful exploitation of this

A vulnerability was found in 74CMS up to 3.33.0. It has been rated as problematic. Affected by this issue is the functio

A vulnerability was found in MRCMS 3.1.2. It has been classified as problematic. Affected is an unknown function. The ma

Permission control vulnerability in the contacts module Impact: Successful exploitation of this vulnerability may affect

The AHAthat Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including

A vulnerability classified as critical has been found in itsourcecode Content Management System 1.0. This affects an unk

The Reales WP STPT plugin for WordPress is vulnerable to unauthorized user registration in all versions up to, and inclu

A vulnerability has been found in kefaming mayi up to 1.3.9 and classified as critical. This vulnerability affects the f

In sprd ssense service, there is a possible missing permission check. This could lead to local information disclosure wi

A vulnerability, which was classified as critical, was found in IdeaCMS up to 1.6. Affected is the function saveUpload.

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 12.1.0 through 12.1.1 could allow an authenticat

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 coul

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 un

Discourse is an open-source community platform. A data leak vulnerability affects sites deployed between commits 10df7fd

league/commonmark is a PHP Markdown parser. A cross-site scripting (XSS) vulnerability in the Attributes extension of th

MobSF is a mobile application security testing tool used. Typically, MobSF is deployed on centralized internal or cloud-

Incorrect access control in the component /admin/sys/datasource/ajaxList of jeeweb-mybatis-springboot v0.0.1.RELEASE all

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.6.

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.6.

Misskey is an open source, federated social media platform. Starting in version 12.31.0 and prior to version 2025.4.1, m

@misskey-dev/summaly is a tool for getting a summary of a web page. Starting in version 3.0.1 and prior to version 5.2.1

Mobile Security Framework (MobSF) is a security research platform for mobile applications in Android, iOS and Windows Mo

Cross-Site Scripting (XSS) vulnerability exists in Mezzanine CMS 6.0.0 in the "View Entries" feature within the Forms mo

HCL BigFix Compliance is affected by inclusion of temporary files left in the production environment. An attacker might

HCL BigFix Compliance is affected by an improper or missing SameSite attribute. This can lead to Cross-Site Request For

A vulnerability has been found in SourceCodester/oretnom23 Stock Management System 1.0 and classified as problematic. Th

Insufficient data validation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced