2025

Improper validation of an array index in the AND power Management Firmware could allow a privileged attacker to corrupt

Improper input validation in the system management mode (SMM) could allow a privileged attacker to overwrite arbitrary m

An integer overflow in the SMU could allow a privileged attacker to potentially write memory beyond the end of the reser

Improper restriction of operations in the IOMMU could allow a malicious hypervisor to access guest private memory result

An out-of-bounds read in the ASP could allow a privileged attacker with access to a malicious bootloader to potentially

Use of an uninitialized variable in the ASP could allow an attacker to access leftover data from a trusted execution env

Improper isolation of shared resources on System-on-a-chip (SOC) could a privileged attacker to tamper with the contents

Type confusion in the ASP could allow an attacker to pass a malformed argument to the Reliability, Availability, and Ser

Improper validation of an array index in the AMD graphics driver software could allow an attacker to pass malformed argu

Improper handling of insufficiency privileges in the ASP could allow a privileged attacker to modify Translation Map Reg

Failure to validate the address and size in TEE (Trusted Execution Environment) may allow a malicious x86 attacker to se

Insufficient parameter validation while allocating process space in the Trusted OS (TOS) may allow for a malicious users

A vulnerability was found in D-Link DIR-825 1.08.01. This impacts the function get_ping6_app_stat of the file ping6_resp

A vulnerability has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown function of the file

A vulnerability was detected in Campcodes Grocery Sales and Inventory System 1.0. The affected element is an unknown fun

A security vulnerability has been detected in Campcodes Grocery Sales and Inventory System 1.0. Impacted is an unknown f

A weakness has been identified in Campcodes Grocery Sales and Inventory System 1.0. This issue affects some unknown proc

A security flaw has been discovered in itsourcecode POS Point of Sale System 1.0. This vulnerability affects unknown cod

An authenticated attacker may remotely execute arbitrary code via the CWMP binary on the devices AX10 and AX1500.  The

The ELEX WooCommerce Google Shopping (Google Product Feed) plugin for WordPress is vulnerable to SQL Injection via the '

A vulnerability was identified in itsourcecode POS Point of Sale System 1.0. This affects an unknown part of the file /i

The Recent Posts Widget Extended plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'rpw

The Admin Menu Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘placeholder’ parameter

The StreamWeasels Kick Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘vodsChanne

The Smart Table Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all

The Content Views plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Grid and List widge

The SKT Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in a

The aThemes Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Coun

The Cloud SAML SSO plugin for WordPress is vulnerable to Identity Provider Deletion due to a missing capability check on

The Cloud SAML SSO plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability c

The Optio Dentistry plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'optio-lightbox'

The Multi Step Form plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via

The User Registration & Membership plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in version

The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several of

The AdForest theme for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 6.0.9. Thi

Coder allows organizations to provision remote development environments via Terraform. In versions 2.22.0 through 2.24.3

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Versions 3.25.23 and below contain a def

The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress plugin for

The Html Social share buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'zm_sh_

The REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme theme for WordPress is vulnerable to Information

The The REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme theme for WordPress is vulnerable to arbitrar

The Easy Social Feed – Social Photos Gallery – Post Feed – Like Box plugin for WordPress is vulnerable to Stored Cross-S

ERP is a free and open source Enterprise Resource Planning tool. In versions below 14.89.2 and 15.0.0 through 15.75.1, l

Frappe is a full-stack web application framework. Versions 14.96.9 and below, and 15.0.0 through 15.71.0 have an insecur

Insufficient bounds checking in AMD TEE (Trusted Execution Environment) could allow an attacker with a compromised users

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Versions 3.25.23 and below contain a vul

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Versions 3.25.23 and below contain a vul

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. In versions 3.26.6 and below, a Github w

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Versions below 3.26.0 contain a vulnerab

fs2 is a compositional, streaming I/O library for Scala. Versions up to and including 2.5.12, 3.0.0-M1 through 3.12.2, a