2025

The Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce plugin for WordPress is vulnerable to unauthorized access

Pimcore's Admin Classic Bundle provides a Backend UI for Pimcore. An HTML injection issue allows users with access to th

Dell Common Event Enabler, version(s) CEE 9.0.0.0, contain(s) an Initialization of a Resource with an Insecure Default v

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to unauthorized modification

The Accept SagePay Payments Using Contact Form 7 plugin for WordPress is vulnerable to Sensitive Information Exposure in

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripti

The coreActivity: Activity Logging for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'order' and

The Advanced Advertising System plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including

The AAWP Obfuscator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data-aawp-web' parameter

A vulnerability has been identified in Mendix Runtime V10 (All versions < V10.21.0), Mendix Runtime V10.12 (All versions

A vulnerability has been identified in Siemens License Server (SLS) (All versions < V4.3). The affected application does

A vulnerability has been identified in Siemens License Server (SLS) (All versions < V4.3). The affected application sear

In the Linux kernel, the following vulnerability has been resolved: devlink: fix xa_alloc_cyclic() error handling In c

In the Linux kernel, the following vulnerability has been resolved: dpll: fix xa_alloc_cyclic() error handling In case

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pdr: Fix the potential deadlock When so

In the Linux kernel, the following vulnerability has been resolved: ARM: dts: bcm2711: Fix xHCI power-domain During s2

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix soft lockup during bt pages loop Dri

In the Linux kernel, the following vulnerability has been resolved: regulator: dummy: force synchronous probing Someti

In the Linux kernel, the following vulnerability has been resolved: regulator: check that dummy regulator has been prob

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected de

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected de

SAP S4CORE OData meta-data property is vulnerable to data tampering, due to which entity set could be externally modifie

Due to insecure file permissions in SAP BusinessObjects Business Intelligence Platform, an attacker who has local access

SAP NetWeaver allows an attacker to bypass authorization checks, enabling them to view portions of ABAP code that would

Due to a missing authorization check, an authenticated attacker could upload a file as a template for solution documenta

Due to incorrect memory address handling in ABAP SQL of SAP NetWeaver and ABAP Platform (Application Server ABAP), an au

SAP ERP BW Business Content is vulnerable to OS Command Injection through certain function modules. These function modul

The GreenPay(tm) by Green.Money plugin for WordPress is vulnerable to Sensitive Information Exposure in versions between

A Missing Authorization Check vulnerability exists in the Virus Scanner Interface of SAP NetWeaver Application Server AB

Under specific conditions and prerequisites, an unauthenticated attacker could access customer coupon codes exposed in t

SAP KMC WPC allows an unauthenticated attacker to remotely retrieve usernames by a simple parameter query which could ex

SAP Commerce Cloud (Public Cloud) does not allow to disable unencrypted HTTP (port 80) entirely, but instead allows a re

SAP NetWeaver Application Server ABAP does not sufficiently encode user-controlled inputs, leading to Stored Cross-Site

The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'printer_text' parameter in all versions up

The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'material_text' parameter in all versions u

The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'coating_text' parameter in all versions up

The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'infill_text' parameter in all versions up

The Team Circle Image Slider With Lightbox plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in

A vulnerability has been found in opplus springboot-admin up to a2d5310f44fd46780a8686456cf2f9001ab8f024 and classified

A vulnerability, which was classified as critical, was found in mymagicpower AIAS 20250308. Affected is an unknown funct

During an annual penetration test conducted on behalf of Axis Communications, Truesec discovered a flaw in the VAPIX Dev

51l3nc3, a member of the AXIS OS Bug Bounty Program, has found that the VAPIX API uploadoverlayimage.cgi did not have su

A vulnerability, which was classified as critical, has been found in mymagicpower AIAS 20250308. This issue affects some

A vulnerability classified as critical was found in mymagicpower AIAS 20250308. This vulnerability affects unknown code

A vulnerability classified as critical has been found in Nothings stb up to f056911. This affects the function stb_inclu

Improper verification of intent by broadcast receiver vulnerability in Galaxy Store prior to version 4.5.90.7 allows loc

Use of implicit intent for sensitive communication in SamsungNotes prior to version 4.4.26.45 allows local attackers to

Out-of-bounds read in enrollment with cdsp frame secfr trustlet prior to SMR Apr-2025 Release 1 allows local privileged

Improper handling of insufficient permission or privileges in ClipboardService prior to SMR Apr-2025 Release 1 allows lo

Improper access control in Galaxy Watch prior to SMR Apr-2025 Release 1 allows local attackers to access sensitive infor