2025

Tesla Model S Iris Modem Race Condition Firewall Bypass Vulnerability. This vulnerability allows network-adjacent attack

XWiki is a generic wiki platform. In versions starting from 1.8.1 to before 14.10.22, from 15.0-rc-1 to before 15.10.12,

OpenCTI is an open-source cyber threat intelligence platform. In versions starting from 6.4.8 to before 6.4.10, the allo

: Use of GET Request Method With Sensitive Query Strings vulnerability in ABB ANC, ABB ANC-L, ABB ANC-mini.This issue af

A vulnerability was found in Netgear WG302v2 up to 5.2.9 and classified as critical. Affected by this issue is the funct

Missing Authorization vulnerability in David Gwyer Simple Sitemap – Create a Responsive HTML Sitemap simple-sitemap.This

An app could impersonate system notifications. Sensitive notifications now require restricted entitlements. This issue i

Websites directing users to long URLs that caused eliding to occur in the location view could leverage the truncating be

Symantec Endpoint Protection Windows Agent, running an ERASER Engine prior to 119.1.7.8, may be susceptible to an Elevat

A vulnerability was found in Netgear JWNR2000v2 1.0.0.11. It has been rated as critical. Affected by this issue is the f

XWiki is a generic wiki platform. In versions starting from 13.5-rc-1 to before 15.10.13, from 16.0.0-rc-1 to before 16.

Discourse is an open-source discussion platform. Prior to versions 3.4.3 on the stable branch and 3.5.0.beta3 on the bet

A vulnerability was found in Netgear JWNR2000v2 1.0.0.11. It has been declared as critical. Affected by this vulnerabili

A vulnerability classified as critical was found in Weitong Mall 1.0.0. This vulnerability affects unknown code of the f

A vulnerability classified as critical has been found in Weitong Mall 1.0.0. This affects an unknown part of the file /h

A SQL Injection vulnerability was identified in the admin/edit-directory.php file of the PHPGurukul Directory Management

A SQL injection vulnerability was discovered in /add-foreigners-ticket.php file of PHPGurukul Park Ticketing Management

A Cross-Site Scripting (XSS) vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGuruku

A HTML Injection vulnerability was discovered in the foreigner-search.php file of PHPGurukul Park Ticketing Management S

A HTML Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketin

A HTML Injection vulnerability was discovered in the normal-search.php file of PHPGurukul Park Ticketing Management Syst

A vulnerability, which was classified as critical, was found in Netgear JWNR2000v2 1.0.0.11. This affects the function s

A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the profile.php file of PHPGurukul Timetable Gene

A vulnerability in the “Backup & Restore” functionality of the web application of ctrlX OS allows a remote authenticated

A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticat

A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticat

A vulnerability in the “Hosts” functionality of the web application of ctrlX OS allows a remote authenticated (low-privi

A vulnerability in the error notification messages of the web application of ctrlX OS allows a remote unauthenticated at

A vulnerability in the “Manages app data” functionality of the web application of ctrlX OS allows a remote authenticated

A vulnerability in the login functionality of the web application of ctrlX OS allows a remote unauthenticated attacker t

A vulnerability in the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to induce a D

A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0. It has been rated as critical. This issue a

A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0. It has been classified as critical. This affec

A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by this is

A vulnerability in the users configuration file of ctrlX OS may allow a remote authenticated (low-privileged) attacker t

A vulnerability in the web application of ctrlX OS allows a remote unauthenticated attacker to conduct various attacks a

A vulnerability has been found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by th

The tagDiv Opt-In Builder plugin for WordPress is vulnerable to time-based SQL Injection via the ‘subscriptionCouponId’

The WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin plugin for WordPress is vulnerable to unauthorize

The SureForms WordPress plugin before 1.4.4 does not have proper authorisation check when updating its settings via the

vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Versions starting from 0.8.0 and p

YesWiki is a wiki system written in PHP. Prior to version 4.5.4, the `/?BazaR` endpoint and `idformulaire` parameter are

YesWiki is a wiki system written in PHP. Prior to version 4.5.4, an attacker can use a reflected cross-site scripting at

A flaw was found in Keycloak. The org.keycloak.authorization package may be vulnerable to circumventing required actions

A vulnerability has been found in PHPGurukul Online Nurse Hiring System 1.0 and classified as critical. Affected by this

A vulnerability, which was classified as problematic, has been found in Wangshen SecGate 3600 2400. This issue affects s

A vulnerability classified as critical was found in code-projects School Billing System 1.0. This vulnerability affects

A vulnerability classified as critical has been found in LB-LINK BL-AC3600 up to 1.0.22. This affects the function easy_

A vulnerability was found in VMSMan up to 20250416. It has been rated as problematic. Affected by this issue is some unk

A vulnerability was found in PHPGurukul Online Nurse Hiring System 1.0 and classified as critical. This issue affects so