2025

Privilege escalation vulnerability has been found in Wondershare Dr.Fone version 13.5.21. This vulnerability could allow

The WooCommerce Wishlist (High customization, fast setup,Free Elementor Wishlist, most features) plugin for WordPress is

The Bulk Me Now! WordPress plugin through 2.0 does not validate and escape some of its shortcode attributes before outpu

The Bulk Me Now! WordPress plugin through 2.0 does not sanitise and escape a parameter before outputting it back in the

The tourmaster WordPress plugin before 5.3.5 does not escape generated URLs before outputting them in attributes, leadin

Dell Networking Switches running Enterprise SONiC OS, version(s) prior to 4.4.1 and 4.2.3, contain(s) an Insertion of Se

A vulnerability was found in 1000 Projects Employee Task Management System 1.0. It has been declared as critical. This v

A vulnerability was found in 1000 Projects Employee Task Management System 1.0. It has been classified as critical. This

Missing authorization in Microsoft Account allows an unauthorized attacker to elevate privileges over a network.

A vulnerability was found in needyamin Library Card System 1.0. It has been classified as critical. Affected is an unkno

A vulnerability was found in needyamin Library Card System 1.0 and classified as critical. This issue affects some unkno

Buffer Overflow vulnerability in Bento4 mp42avc v.3bdc891602d19789b8e8626e4a3e613a937b4d35 allows a local attacker to ex

Buffer Overflow vulnerability in Bento4 mp42avc v.3bdc891602d19789b8e8626e4a3e613a937b4d35 allows a local attacker to ex

Teedy <= 1.12 is vulnerable to Cross Site Request Forgery (CSRF), due to the lack of CSRF protection.

Reflected XSS vulnerability in Celk Sistemas Celk Saude v.3.1.252.1 allows a remote attacker to inject arbitrary JavaScr

The /WmAdmin/,/invoke/vm.server/login login page in the Integration Server in Software AG webMethods 10.15.0 before Core

Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with crafted valid or i

It is possible to construct a zone such that some queries to it will generate responses containing numerous records in t

The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflak

A vulnerability has been found in Aridius XYZ up to 20240927 on OpenCart and classified as critical. This vulnerability

A Code Injection vulnerability was identified in GitHub Enterprise Server that allowed attackers to inject malicious cod

Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowf

An issue was discovered in Akamai Enterprise Application Access (EAA) before 2025-01-17. If an admin knows another tenan

RuoYi v4.8.0 was discovered to allow unauthorized attackers to view the session ID of the admin in the system monitoring

The file names constructed within image_picker are missing sanitization checks leaving them vulnerable to malicious docu

The file names constructed within file_selector are missing sanitization checks leaving them vulnerable to malicious doc

Zohocorp ManageEngine Applications Manager versions 174000 and prior are vulnerable to the incorrect authorization in th

Use after free in DevTools in Google Chrome prior to 132.0.6834.159 allowed a remote attacker to potentially exploit hea

When copying files with rsync, octorpki uses the "-a" flag 0, which forces rsync to copy binaries with the suid bit set

Multiple switches are affected by an out-of-bounds write vulnerability. This vulnerability is caused by insufficient inp

The Flexible Wishlist for WooCommerce – Ecommerce Wishlist & Save for later plugin for WordPress is vulnerable to Stored

The Competition Form WordPress plugin through 2.0 does not sanitise and escape a parameter before outputting it back in

A vulnerability, which was classified as critical, has been found in Codezips Gym Management System 1.0. Affected by thi

A vulnerability classified as critical was found in SourceCodester Best Employee Management System 1.0. Affected by this

A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been rated as critical. This issue affec

An issue in Open5GS v.2.7.2 allows a remote attacker to cause a denial of service via the ogs_dbi_auth_info function in

Mailcow through 2024-11b has a session fixation vulnerability in the web panel. It allows remote attackers to set a sess

AutoLib Software Systems OPAC v20.10 was discovered to have multiple API keys exposed within the source code. Attackers

Buffer Overflow vulnerability in D-Link DSR-150, DSR-150N, DSR-250, DSR-250N, DSR-500N, DSR-1000N from 3.13 to 3.17B901C

An issue was discovered in DTEX DEC-M (DTEX Forwarder) 6.1.1. The com.dtexsystems.helper service, responsible for handli

In shouldSkipForInitialSUW of AdvancedPowerUsageDetail.java, there is a possible way to bypass factory reset protections

In checkKeyIntent of AccountManagerService.java, there is a possible way to bypass intent security check and install an

In parseUriInternal of Intent.java, there is a possible infinite loop due to improper input validation. This could lead

In onCreate of ChooserActivity.java, there is a possible way to bypass factory reset protections due to a missing permis

In TBD of TBD, there is a possible use after free due to a race condition. This could lead to local escalation of privil

In TBD of TBD, there is a possible use after free due to a race condition. This could lead to local escalation of privil

In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation

In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation

In _DevmemXReservationPageAddress of devicemem_server.c, there is a possible use-after-free due to improper casting. Thi

In DevmemXIntMapPages of devicemem_server.c, there is a possible arbitrary code execution due to an integer overflow. Th