2025

A vulnerability classified as critical was found in Bluestar Micro Mall 1.0. Affected by this vulnerability is an unknow

A vulnerability classified as critical has been found in Bluestar Micro Mall 1.0. Affected is an unknown function of the

In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when recei

In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when reque

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown Tim

The DAP to Autoresponders Email Syncing plugin for WordPress is vulnerable to Sensitive Information Exposure in all vers

The Shortcodes by United Themes plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up t

IBM InfoSphere Information Server 11.7 could disclose sensitive user credentials from log files during new installation

IBM InfoSphere Information Server 11.7 could allow an authenticated to obtain sensitive username information due to an

IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information that is stored

OneNav 1.1.0 is vulnerable to Cross Site Scripting (XSS) in custom headers.

OneNav 1.1.0 is vulnerable to Server-Side Request Forgery (SSRF) in custom headers.

shopxo v6.4.0 has a ssrf/xss vulnerability in multiple places.

ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery (SSRF) in Email Settings.

ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery (SSRF) via image upload function.

In MISP before 2.4.193, menu_custom_right_link_html parameters can be set via the UI (i.e., without using the CLI) and t

In MISP before 2.4.193, menu_custom_right_link parameters can be set via the UI (i.e., without using the CLI) and thus a

Cross Site Scripting vulnerability in Leantime v3.2.1 and before allows an authenticated attacker to execute arbitrary c

A vulnerability was found in the Infinispan component in Red Hat Data Grid. The REST compare API may have a buffer leak

heap-buffer overflow in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via  c

Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via put_

Floating point exception in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation vi

A vulnerability classified as critical has been found in Netis WF-2404 1.1.124EN. Affected is an unknown function of the

A vulnerability was found in Netis WF-2404 1.1.124EN. It has been declared as critical. This vulnerability affects unkno

A vulnerability, which was classified as problematic, was found in ChestnutCMS up to 1.5.3. Affected is the function rea

A vulnerability, which was classified as critical, has been found in Aishida Call Center System up to 20250314. This iss

Cross-Site Request Forgery (CSRF) vulnerability in ReichertBrothers SimplyRETS Real Estate IDX simply-rets allows Cross

Publify is a self hosted Web publishing platform on Rails. Prior to version 10.0.1 of Publify, corresponding to versions

A flaw was found in the Ansible Automation Platform's Event-Driven Ansible. In configurations where verbosity is set to

SaTECH BCU, in its firmware version 2.1.3, could allow XSS attacks and other malicious resources to be stored on the web

SaTECH BCU in its firmware version 2.1.3 allows an attacker to inject malicious code into the legitimate website owning

SaTECH BCU in its firmware version 2.1.3, allows an authenticated attacker to access information about the credentials t

There is a XXE in W3CSS Validator versions before cssval-20250226 that allows an attacker to use specially-crafted XML o

IBM PowerVM Hypervisor FW1050.00 through FW1050.30 and FW1060.00 through FW1060.20 could allow a local user, under certa

Cross-Site Request Forgery (CSRF) vulnerability in matthewprice1178 WP Database Optimizer wp-database-optimizer allows C

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in matthewprice1178 W

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michele Marri Flat

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Falcon Solutions D

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FancyThemes Page T

Missing Authorization vulnerability in webrangers Clear Sucuri Cache clear-sucuri-cache allows Exploiting Incorrectly Co

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cornershop Better

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nazmur Rahman Text

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in preetindersodhi TG

Cross-Site Request Forgery (CSRF) vulnerability in Aurélien LWS LWS SMS lws-sms allows Cross Site Request Forgery.This i

Cross-Site Request Forgery (CSRF) vulnerability in bsndev Ultimate Security Checker ultimate-security-checker allows Cro

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stian Andreassen Y

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mindshare Labs, In

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kevinweber wBounce

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in phantom.omaga Togg

Cross-Site Request Forgery (CSRF) vulnerability in misteraon Simple Trackback Disabler simple-trackback-disabler allows