2025

A vulnerability, which was classified as critical, was found in PowerCreator CMS 1.0. Affected is an unknown function of

A vulnerability, which was classified as problematic, has been found in YouDianCMS 9.5.21. This issue affects some unkno

A vulnerability classified as problematic was found in YouDianCMS 9.5.21. This vulnerability affects unknown code of the

A vulnerability classified as problematic has been found in YouDianCMS 9.5.21. This affects an unknown part of the file

Crypt::CBC versions between 1.21 and 3.05 for Perl may use the rand() function as the default source of entropy, which i

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `widg

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Woo G

The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vuln

The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vuln

The SKT Blocks – Gutenberg based Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

The Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer plugin for WordPress is vulnerable to Cr

The Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer plugin for WordPress is vulnerable to Cr

The WordPress Mega Menu – QuadMenu plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up t

The Developer Toolbar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and in

The Cart66 Cloud plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includi

Improper access control in Visual Studio Code allows an authorized attacker to elevate privileges locally.

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Sc

An input validation weakness was reported in the TpmSetup module for some legacy System x server products that could all

Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - GrowthExperiments allows HTTP DoS.This i

Improper Encoding or Escaping of Output vulnerability in The Wikimedia Foundation Mediawiki - Confirm Account Extension

Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - HTML Tags allows Cross-Site Scripting (X

Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Wikidata Extension allows Cross-Site Scr

Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - AJAX Poll Extension allows Cross-Site Sc

Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Wikibase Media Info Extension allows Cro

Incorrect Authorization vulnerability in The Wikimedia Foundation Mediawiki - OAuth Extension allows Authentication Bypa

Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Growth Experiments Extension allows Cros

Subnet Solutions PowerSYSTEM Center is affected by a mishandling of exceptional conditions vulnerability. Crafted data

Subnet Solutions PowerSYSTEM Center's SMTPS notification service can be affected by importing an EC certificate with cra

Processing a file may lead to a denial-of-service or potentially disclose memory contents. This issue is fixed in macOS

Processing a file may lead to a denial-of-service or potentially disclose memory contents. This issue is fixed in macOS

Processing a file may lead to a denial-of-service or potentially disclose memory contents. This issue is fixed in macOS

Private Browsing tabs may be accessed without authentication. This issue is fixed in iOS 17 and iPadOS 17. The issue was

A path handling issue was addressed with improved validation. This issue is fixed in iOS 17 and iPadOS 17, iOS 16.7 and

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonom

Formie is a Craft CMS plugin for creating forms. Prior to 2.1.44, when importing a form from JSON, if the field label or

Formie is a Craft CMS plugin for creating forms. Prior to version 2.1.44, it is possible to inject malicious code into t

The The Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress plugin for WordPress

The Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress plugin for WordPress is

The Z Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions u

The WP Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all ver

A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE rancher allowed unauthenticated users

A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE rancher allowing any users with GET

The Cost Calculator Builder plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order_ids’ parameter

When using the ch-go library, under a specific condition when the query includes a large, uncompressed malicious externa

Dell PowerProtect Cyber Recovery, versions prior to 19.18.0.2, contains an Insertion of Sensitive Information Into Sent

IBM QRadar WinCollect Agent 10.0 through 10.1.13 could allow a remote attacker to cause a denial of service by interrupt

W. W. Norton InQuizitive through 2025-04-08 allows students to conduct stored XSS attacks against educators via a bonus

A path traversal vulnerability in FusionDirectory before 1.5 allows remote attackers to read arbitrary files on the host

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. A

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Th