2025

The linkID plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when incl

The WP Database Backup – Unlimited Database & Files Backup by Backup for WP plugin for WordPress is vulnerable to Sensit

A vulnerability was found in code-projects Admission Management System 1.0. It has been declared as critical. This vulne

The CGI script <redacted>.sh can be used to download any file on the filesystem. This issue affects Iocharger firmware

After gaining access to the firmware of a charging station, a file at <redacted> can be accessed to obtain default crede

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Inje

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Inje

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Iocharger firmware

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability  allows OS Command Inj

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Inje

Authenticated command injection in the filename of a <redacted>.exe request leads to remote code execution as the root u

Command injection in the <redacted> parameter of a <redacted>.exe request leads to remote code execution as the root use

A post-authentication format string vulnerability in SonicOS management allows a remote attacker to crash a firewall and

A post-authentication stack-based buffer overflow vulnerability in SonicOS management allows a remote attacker to crash

A vulnerability was found in pgadmin. Users logging into pgAdmin running in server mode using LDAP authentication may be

A vulnerability classified as critical was found in code-projects Cinema Seat Reservation System 1.0. Affected by this v

A vulnerability in the Gen7 SonicOS Cloud platform NSv, allows a remote authenticated local low-privileged attacker to e

A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a remote attacker to establis

A vulnerability, which was classified as critical, has been found in KaiYuanTong ECT Platform up to 2.0.0. Affected by t

A vulnerability was found in Ruby. The Ruby interpreter is vulnerable to the Marvin Attack. This attack allows the attac

A vulnerability classified as critical has been found in REVE Antivirus 1.0.0.0 on Linux. This affects an unknown part o

A vulnerability, which was classified as critical, was found in wander-chu SpringBoot-Blog 1.0. This affects the functio

Due to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a malicious command line a

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7

A vulnerability classified as critical has been found in ZeroWdd myblog 1.0. This affects an unknown part of the file sr

WeGIA is a web manager for charitable institutions. A SQL Injection vulnerability was identified in the /dao/verificar_r

WeGIA is a web manager for charitable institutions. A SQL Injection vulnerability was identified in the /html/funcionari

Type Confusion in V8 in Google Chrome prior to 131.0.6778.264 allowed a remote attacker to execute arbitrary code inside

SourceCodester Computer Laboratory Management System 1.0 is vulnerable to Incorrect Access Control. via /php-lms/admin/?

Dell VxRail, versions 8.0.000 through 8.0.311, contain(s) a Plaintext Storage of a Password vulnerability. A high privil

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Adding array index check to preven

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix handling of plane refcount [W

In the Linux kernel, the following vulnerability has been resolved: kunit: string-stream: Fix a UAF bug in kunit_init_s

Command Injection in Minidlna version v1.3.3 and before allows an attacker to execute arbitrary OS commands via a specia

In DevmemIntMapPages of devicemem_server.c, there is a possible physical page uaf due to a logic error in the code. This

Soft Serve is a self-hostable Git server for the command line. Prior to 0.8.2 , a path traversal attack allows existing

RedisBloom adds a set of probabilistic data structures to Redis. There is an integer overflow vulnerability in RedisBloo

An issue was discovered in the Interllect Core Search in Polaris FT Intellect Core Banking 9.5. Input passed through the

RediSearch is a Redis module that provides querying, secondary indexing, and full-text search for Redis. An authenticate

RedisTimeSeries is a time-series database (TSDB) module for Redis, by Redis. Executing one of these commands TS.QUERYIND

Dell VxRail, versions 7.0.000 through 7.0.532, contain(s) a Plaintext Storage of a Password vulnerability. A high privil

The Ultimate Gift Cards for WooCommerce – Create WooCommerce Gift Cards, Gift Vouchers, Redeem & Manage Digital Gift Cou

The Garden Gnome Package plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validatio

The Modula Image Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validatio

The WordPress File Upload plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 4.2

Insufficient Session Expiration vulnerability in Apache Airflow Fab Provider. This issue affects Apache Airflow Fab Pro

The MinigameCenter module has insufficient restrictions on loading URLs, which may lead to some information leakage.

The MinigameCenter module has insufficient restrictions on loading URLs, which may lead to some information leakage.

The Cost Calculator Builder PRO plugin for WordPress is vulnerable to blind time-based SQL Injection via the ‘data’ para

The health module has insufficient restrictions on loading URLs, which may lead to some information leakage.