2025

Cross-Site Request Forgery (CSRF) vulnerability in cmstactics WP Video Posts wp-video-posts allows OS Command Injection.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in guelben Bravo Sear

Missing Authorization vulnerability in revenueflex Auto Ad Inserter – Increase Google Adsense and Ad Manager Revenue rev

Cross-Site Request Forgery (CSRF) vulnerability in tiefpunkt Add Linked Images To Gallery add-linked-images-to-gallery-v

Cross-Site Request Forgery (CSRF) vulnerability in lizeipe Photo Gallery ( Responsive ) photo-gallery-pearlbells allows

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Agito Computer Hea

Files or Directories Accessible to External Parties vulnerability in Agito Computer Health4All allows Exploiting Incorre

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Agito Computer Lif

In the Linux kernel, the following vulnerability has been resolved: IORING_OP_READ did not correctly consume the provid

IBM i 7.2, 7.3, 7.4, and 7.5 could allow a user with the capability to compile or restore a program to gain elevated pri

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in imithemes Eventer

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in totalsoft WooComme

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in vbout Marketing Au

A vulnerability was found in SourceCodester Best Church Management Software 1.0 and classified as critical. This issue a

Trend Micro HouseCall for Home Networks version 5.3.1302 and below contains an uncontrolled search patch element vulnera

Cross-Site Request Forgery (CSRF) vulnerability in a1post A1POST.BG Shipping for Woo a1post-bg-shipping-for-woocommerce

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rock Solid Respons

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in grimdonkey Magic t

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a writ

Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data in

Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data ou

The SMTP for Amazon SES – YaySMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, a

The SMTP for Sendinblue – YaySMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, a

The SMTP for SendGrid – YaySMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and

The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary file uploads

In the Linux kernel, the following vulnerability has been resolved: usb: cdc-acm: Check control transfer buffer size be

The IP2Location Country Blocker plugin for WordPress is vulnerable to Regular Information Exposure in all versions up to

The LTL Freight Quotes – Purolator Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropship_edit_id

The The Custom Post Type Date Archives plugin for WordPress is vulnerable to arbitrary shortcode execution in all versio

The The Show Me The Cookies plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, a

The Mambo Importer plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0

solid-js is a declarative, efficient, and flexible JavaScript library for building user interfaces. In affected versions

dom-expressions is a Fine-Grained Runtime for Performant DOM Rendering. In affected versions the use of javascript's `.r

binance-trading-bot is an automated Binance trading bot with trailing buy/sell strategy. Authenticated users of binance-

vyper is a Pythonic Smart Contract Language for the EVM. Multiple evaluation of a single expression is possible in the i

vyper is a Pythonic Smart Contract Language for the EVM. Vyper `sqrt()` builtin uses the babylonian method to calculate

RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine based on deep document understanding. An authentic

A vulnerability classified as critical was found in hzmanyun Education and Training System 3.1.1. This vulnerability aff

Wangmarket v4.10 to v5.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /controller/Use

A vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects unknown code of the file

An issue in the shiroFilter function of White-Jotter project v0.2.2 allows attackers to execute a directory traversal an

A vulnerability has been found in BDCOM Behavior Management and Auditing System up to 20250210 and classified as critica

Qiskit SDK 0.45.0 through 1.2.4 could allow a remote attacker to cause a denial of service using a maliciously crafted Q

An issue in Loggrove v.1.0 allows a remote attacker to obtain sensitive information via the read.py component.

A vulnerability, which was classified as critical, has been found in D-Link DAP-1320 1.00. Affected by this issue is the

A vulnerability classified as critical was found in D-Link DAP-1320 1.00. Affected by this vulnerability is the function

A vulnerability was found in Raisecom Multi-Service Intelligent Gateway up to 20250208. It has been declared as critical