2025

HCL Traveler generates some error messages that provide detailed information about errors and failures, such as internal

HCL Traveler is affected by an internal path disclosure in a Windows application when the application inadvertently reve

An issue was discovered in Iglu Server 0.13.0 and below. It is similar to CVE-2024-47214, but involves an authenticated

A vulnerability was found in FastCMS 0.1.5. It has been declared as critical. This vulnerability affects unknown code of

Vite is a frontend tooling framework for javascript. The contents of arbitrary files can be returned to the browser. By

Element X Android is a Matrix Android Client provided by element.io. In Element X Android versions between 0.4.16 and 25

Element X iOS is a Matrix iOS Client provided by Element. In Element X iOS version between 1.6.13 and 25.03.7, the entit

A vulnerability was found in Projeqtor up to 12.0.2. It has been rated as critical. Affected by this issue is some unkno

A vulnerability, which was classified as problematic, has been found in Tenda AC23 16.03.07.52. This issue affects some

A vulnerability classified as critical was found in code-projects Product Management System 1.0. This vulnerability affe

API Platform Core is a system to create hypermedia-driven REST and GraphQL APIs. From 3.2.0 until 3.2.4, exception messa

A vulnerability classified as critical has been found in thu-pacman chitu 0.1.0. This affects the function torch.load of

A vulnerability was found in Tencent Music Entertainment SuperSonic up to 0.9.8. It has been rated as critical. Affected

A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been declared as critical. Affected by this vulnerabi

A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been classified as critical. Affected is the function

HCL DevOps Deploy / HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary H

A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the

A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. Affected by

A flaw was found in libsoup. A vulnerability in sniff_feed_or_html() and skip_insignificant_space() functions may lead t

A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may lead to heap buffer over-read.

A flaw was found in libsoup. The libsoup soup_uri_decode_data_uri() function may crash when processing malformed data UR

A flaw was found in libsoup. The libsoup append_param_quoted() function may contain an overflow bug resulting in a buffe

Missing Authorization vulnerability in istmoplugins GetBookingsWP get-bookings-wp allows Exploiting Incorrectly Configur

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cheesefather Botne

Missing Authorization vulnerability in gunnarpayday Payday payday allows Exploiting Incorrectly Configured Access Contro

Missing Authorization vulnerability in matthewrubin Local Magic local-magic allows Exploiting Incorrectly Configured Acc

Missing Authorization vulnerability in Frank P. Walentynowicz FPW Category Thumbnails fpw-category-thumbnails allows Exp

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in vlad.olaru Fonto fonto a

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in pixelgrade Category Icon

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in publitio Publitio publit

Missing Authorization vulnerability in Plugin Devs Shopify to WooCommerce Migration migrate-shopify-to-woocommerce allow

Missing Authorization vulnerability in Web Ready Now WR Price List Manager For Woocommerce wr-price-list-for-woocommerce

Missing Authorization vulnerability in Matat Technologies TextMe SMS textme-sms-integration allows Exploiting Incorrectl

Missing Authorization vulnerability in OTWthemes Widget Manager Light widget-manager-light allows Accessing Functionalit

Missing Authorization vulnerability in BinaryCarpenter Free Woocommerce Product Table View free-product-table-for-woocom

Missing Authorization vulnerability in Think201 Clients clients allows Exploiting Incorrectly Configured Access Control

Missing Authorization vulnerability in Manuel Schmalstieg Minimalistic Event Manager minimalistic-event-manager allows E

Missing Authorization vulnerability in richtexteditor Rich Text Editor richtexteditor allows Exploiting Incorrectly Conf

Missing Authorization vulnerability in jeffikus WooTumblog woo-tumblog allows Exploiting Incorrectly Configured Access C

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Utkarsh Kukreti Ad

Missing Authorization vulnerability in Sandeep Kumar WP Video Playlist wp-video-playlist allows Exploiting Incorrectly C

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Greg TailPress tailpres

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in docxpresso Docxpresso do

Missing Authorization vulnerability in TuriTop TuriTop Booking System turitop-booking-system allows Exploiting Incorrect

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CreativeMindsSolut

Missing Authorization vulnerability in enituretechnology Residential Address Detection residential-address-detection all

Missing Authorization vulnerability in enituretechnology Small Package Quotes – Worldwide Express Edition small-package-

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in tstafford include-file i

The Modula Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's bundled Fanc

The LuckyWP Table of Contents plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, an