2025

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shanaver CloudFlar

An issue was discovered in GFI Kerio Control 9.2.5 through 9.4.5. The dest GET parameter passed to the /nonauth/addCertE

The Link Fixer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via broken links in all versions up to,

The Shared Files – Frontend File Upload Form & Secure File Sharing plugin for WordPress is vulnerable to Stored Cross-Si

Software installed and run as a non-privileged user may conduct improper GPU system calls to access OOB kernel memory.

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kern

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kern

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kern

Software installed and run as a non-privileged user may conduct improper read/write operations on imported/exported DMA

The Live2DWebCanvas plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validati

This vulnerability allows network-adjacent attackers to create arbitrary files on affected installations of Pioneer DMH-

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint

Users can consume unlimited disk space in /var/crash

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Silicon Labs

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Silicon Labs

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine Halo9

pwn.college is an education platform to learn about, and practice, core cybersecurity concepts in a hands-on fashion. In

pwn.college is an education platform to learn about, and practice, core cybersecurity concepts in a hands-on fashion. Mi

Sante PACS Server URL path Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote attackers

Sante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote a

Sante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote a

AutomationDirect C-More EA9 EAP9 File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability

AutomationDirect C-More EA9 EAP9 File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability

AutomationDirect C-More EA9 EAP9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vuln

Plonky2 is a SNARK implementation based on techniques from PLONK and FRI. Lookup tables, whose length is not divisible b

Type confusion in the Zoom Workplace App for Linux before 6.2.10 may allow an authorized user to conduct an escalation o

The "monitor" binary in the firmware of the affected product attempts to mount to a hard-coded, routable IP address, byp

The issue was addressed with improved bounds checks. This issue is fixed in GarageBand 10.4.12. Processing a maliciously

VMware Aria Operations contains an information disclosure vulnerability. A malicious user with non-administrative privil

VMware Aria Operations for Logs contains an information disclosure vulnerability. A malicious actor with View Only Admin

The WP Image Uploader plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path valida

The WP Image Uploader plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includ

The Music Sheet Viewer plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 4

The Single-user-chat plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial o

The Media Manager for UserPro plugin for WordPress is vulnerable to unauthorized modification of data that can lead to p

The Safe Ai Malware Protection for WP plugin for WordPress is vulnerable to unauthorized access of data due to a missing

The Royal Core plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escala

The Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for WordPress is vulnerable t

The MWB HubSpot for WooCommerce – CRM, Abandoned Cart, Email Marketing, Marketing Automation & Analytics plugin for Word

A Stored Cross-Site Scripting vulnerability has been found in EmbedAI. This vulnerability allows an authenticated attack

An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authentic

an Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authentic

An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authent

An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authentic

The The Contact Form & SMTP Plugin for WordPress by PirateForms plugin for WordPress is vulnerable to arbitrary shortcod

Dell NetWorker, version(s) prior to 19.11.0.3, all versions of 19.10 & prior versions contain(s) an Unquoted Search Path