2025

A vulnerability has been found in zhenfeng13 My-BBS 1.0 and classified as problematic. This vulnerability affects unknow

A vulnerability, which was classified as critical, was found in zhenfeng13 My-BBS 1.0. This affects the function Upload

A vulnerability classified as critical was found in sarrionandia tournatrack up to 4c13a23f43da5317eea4614870a7a8510fc54

A vulnerability classified as critical has been found in thautwarm vscode-diana 0.0.1. Affected is an unknown function o

A vulnerability, which was classified as critical, has been found in WCMS 11. This issue affects the function sub of the

The SB Chart block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘className’ parameter in al

A vulnerability classified as critical was found in SeaCMS up to 13.3. This vulnerability affects unknown code of the fi

The Themesflat Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the TF E Slide

The Element Pack Addons for Elementor – Free Templates and Widgets for Your WordPress Websites plugin for WordPress is v

The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vuln

NSSCryptoSignBackend.cc in Poppler before 25.04.0 does not verify the adbe.pkcs7.sha1 signatures on documents, resulting

A vulnerability classified as critical has been found in PHPGurukul Men Salon Management System 1.0. This affects an unk

In Nessus versions prior to 10.8.4, a non-authenticated attacker could alter Nessus logging entries by manipulating http

Rasa Pro is a framework for building scalable, dynamic conversational AI assistants that integrate large language models

An issue in Macro-video Technologies Co.,Ltd V380E6_C1 IP camera (Hw_HsAKPIQp_WF_XHR) 1020302 allows a physically proxim

An issue in redoxOS relibc before commit 98aa4ea5 allows a local attacker to cause a denial of service via the setsockop

Volmarg Personal Management System 1.4.65 is vulnerable to Cross Site Request Forgery (CSRF) allowing attackers to execu

Cross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code in

Cross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code and

A stored cross-site scripting (XSS) vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scr

Dify is an open-source LLM app development platform. Prior to version 0.6.12, a vulnerability was identified in the DIFY

Dify is an open-source LLM app development platform. Prior to version 0.6.12, a vulnerability was identified in the DIFY

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. Prior to version 2.1.4, NamelessMC

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, an inse

Element X Android is a Matrix Android Client provided by element.io. Prior to version 25.04.2, a crafted hyperlink on a

A vulnerability, which was classified as critical, has been found in SeaCMS up to 13.3. This issue affects some unknown

A vulnerability classified as critical was found in symisc UnQLite up to 957c377cb691a4f617db9aba5cc46d90425071e2. This

IBM i 7.3, 7.4, 7.5, and 7.5 is vulnerable to a host header injection attack caused by improper neutralization of HTTP h

A vulnerability classified as critical has been found in baseweb JSite 1.0. This affects an unknown part of the file /dr

Dify is an open-source LLM app development platform. In versions 0.6.8 and prior, a vulnerability was identified in the

74cms <=3.33 is vulnerable to remote code execution (RCE) in the background interface apiadmin.

IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 could allow an authenticated user to spoof the identity

IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 does not invalidate session after a browser closure w

The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin

The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versi

In the Linux kernel, the following vulnerability has been resolved: md/raid10: wait barrier before returning discard re

In the Linux kernel, the following vulnerability has been resolved: x86/mce: use is_copy_from_user() to determine copy-

In the Linux kernel, the following vulnerability has been resolved: staging: gpib: Fix cb7210 pcmcia Oops The pcmcia_

In the Linux kernel, the following vulnerability has been resolved: clk: samsung: Fix UBSAN panic in samsung_clk_init()

In the Linux kernel, the following vulnerability has been resolved: net_sched: skbprio: Remove overly strict queue asse

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use aead_request_free to match aead_request_

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: dp: drm_err => dev_err in HPD path to

In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Clear table_sz when rproc_shutdow

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Replace Mutex with Spinlock for RLCG re

In the Linux kernel, the following vulnerability has been resolved: x86/resctrl: Fix allocation of cleanest CLOSID on p

In the Linux kernel, the following vulnerability has been resolved: jfs: reject on-disk inodes of an unsupported type

In the Linux kernel, the following vulnerability has been resolved: sfc: fix NULL dereferences in ef100_process_design_

A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. Aff

The Coupon Affiliates – Affiliate Plugin for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scri

The MapPress Maps for WordPress plugin before 2.94.10 does not sanitise and escape some of its settings, which could all