2025

A vulnerability was found in itning Student Homework Management System up to 1.2.7. It has been declared as problematic.

The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix error code in chan_alloc_skb_cb() T

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw: Fix NAPI registration

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix memleak of nhc_pcpu_rth_output in fib_che

In the Linux kernel, the following vulnerability has been resolved: can: ucan: fix out of bound read in strscpy() sourc

In the Linux kernel, the following vulnerability has been resolved: netfs: Call `invalidate_cache` only if implemented

In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: drop beyond-EOF folios with the rig

In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: uefisecapp: fix efivars registratio

In the Linux kernel, the following vulnerability has been resolved: xsk: fix an integer overflow in xp_create_and_assig

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix uninitialized size issue in radeon_

In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix fence reference count leak The last

The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widge

The Big Boom Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bbd-search' s

UNIX symbolic link (Symlink) following issue exists in FutureNet NXR series, VXR series and WXR series routers. Attachin

A vulnerability classified as critical has been found in SourceCodester Apartment Visitor Management System 1.0. Affecte

A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been rated as critical. This

Issue that bypasses the "Mark of the Web" security warning function for files when opening a symbolic link that points t

The MapPress Maps for WordPress plugin before 2.94.9 does not sanitise and escape some parameters when outputing them in

A vulnerability was found in SourceCodester Online Medicine Ordering System 1.0. It has been declared as critical. This

A vulnerability was found in SourceCodester Online Medicine Ordering System 1.0. It has been classified as critical. Thi

A vulnerability was found in code-projects Bus Reservation System 1.0 and classified as critical. Affected by this issue

Concrete CMS version 9 below 9.4.0RC2 and versions below 8.5.20 are vulnerable to CSRF and XSS in the Concrete CMS Addre

A vulnerability classified as critical was found in fcba_zzm ics-park Smart Park Management System 2.1. This vulnerabili

A vulnerability classified as critical has been found in code-projects Payroll Management System 1.0. This affects an un

A vulnerability, which was classified as critical, has been found in WonderCMS 3.5.0. Affected by this issue is the func

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Obfuscate a

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Access code allows Brute Force.This is

A vulnerability was found in SourceCodester Apartment Visitors Management System 1.0. It has been rated as critical. Thi

A vulnerability was found in SourceCodester Online Tutor Portal 1.0. It has been declared as critical. This vulnerabilit

Next.js is a React framework for building full-stack web applications. To mitigate CVE-2025-29927, Next.js validated the

HCL DevOps Deploy / HCL Launch could allow unauthorized access to other services or potential exposure of sensitive data

A vulnerability was found in SourceCodester Online Tutor Portal 1.0. It has been classified as critical. This affects an

SourceCodester (rems) Employee Management System 1.0 is vulnerable to Cross Site Scripting (XSS) in add_employee.php via

An HTML injection vulnerability previously discovered in Trend Vision One could have allowed a malicious user to execute

A broken access control vulnerability previously discovered in the Trend Vision One Role Name component could have allow

A broken access control vulnerability previously discovered in the Trend Vision One Status component could have allowed

A broken access control vulnerability previously discovered in the Trend Vision One User Roles component could have allo

A broken access control vulnerability previously discovered in the Trend Vision One User Account component could have al

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Pri

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Pri

IBM TXSeries for Multiplatforms 9.1 and 11.1 could disclose sensitive information to a remote attacker due to improper n

IBM TXSeries for Multiplatforms 9.1 and 11.1 could allow an attacker to enumerate usernames due to an observable login a

IBM TXSeries for Multiplatforms 9.1 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows an authent

IBM TXSeries for Multiplatforms 9.1 and 11.1 is vulnerable to cross-site request forgery which could allow an attacker t

Jenkins AsakusaSatellite Plugin 0.1.1 and earlier does not mask AsakusaSatellite API keys displayed on the job configura

Jenkins AsakusaSatellite Plugin 0.1.1 and earlier stores AsakusaSatellite API keys unencrypted in job config.xml files o

Jenkins Stack Hammer Plugin 1.0.6 and earlier stores Stack Hammer API keys unencrypted in job config.xml files on the Je

Jenkins monitor-remote-job Plugin 1.0 stores passwords unencrypted in job config.xml files on the Jenkins controller whe

Jenkins Cadence vManager Plugin 4.0.0-282.v5096a_c2db_275 and earlier stores Verisium Manager vAPI keys unencrypted in j