2025

The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data

The Error Log Viewer By WP Guru plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and inc

The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to Reflected Cross

The Host PHP Info plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check wh

The Post Saint: ChatGPT, GPT4, DALL-E, Stable Diffusion, Pexels, Dezgo AI Text & Image Generator plugin for WordPress is

The ThePerfectWedding.nl Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to,

The Compare Products for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, a

The Popup – MailChimp, GetResponse and ActiveCampaign Intergrations plugin for WordPress is vulnerable to SQL Injection

The Custom Product Tabs for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to

The Live Sales Notification for Woocommerce – Woomotiv plugin for WordPress is vulnerable to SQL Injection via the 'woom

Dell Update Package Framework, versions prior to 22.01.02, contain(s) a Local Privilege Escalation Vulnerability. A loca

Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. When you send a request with the Authori

In FRRouting (FRR) before 10.3 from 6.0 onward, all routes are re-validated if the total size of an update received via

An access control issue in the component /juis_boxinfo.xml of AVM FRITZ!Box 7530 AX v7.59 allows attackers to obtain sen

The com.windymob.callscreen.ringtone.callcolor.colorphone (aka Color Phone Call Screen Themes) application through 1.1.2

An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi

An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua

An issue was discovered in Inspur ClusterEngine v4.0 that allows attackers to gain escalated Local privileges and execut

Grocy through 4.3.0 has no CSRF protection, as demonstrated by changing the Administrator's password.

The edit profile function of Grocy through 4.3.0 allows stored XSS and resultant privilege escalation by uploading a cra

An issue in the DeviceloControl function of ITE Tech. Inc ITE IO Access v1.0.0.0 allows attackers to perform arbitrary p

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr

NiceGUI is an easy-to-use, Python-based UI framework. Prior to 2.9.1, authenticating with NiceGUI logged in the user for

go-git is a highly extensible git implementation library written in pure Go. A denial of service (DoS) vulnerability was

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: fix double free in atmel_pmecc_create

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/vas: Add close() callback in vas_vm

In the Linux kernel, the following vulnerability has been resolved: ublk: detach gendisk from ublk device if add_disk()

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free when COWing tree bock and

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: add intf release flow w

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr

A flaw was found in FFmpeg's DASH playlist support. This vulnerability allows arbitrary HTTP GET requests to be made on

TabberNeue is a MediaWiki extension that allows the wiki to create tabs. Prior to 2.7.2, TabberTransclude.php doesn't es

tgstation-server is a production scale tool for BYOND server management. Prior to 6.12.3, roles used to authorize API me

OpenVPN Connect before version 3.5.0 can contain the configuration profile's clear-text private key which is logged in t

Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without ch

Memory corruption can occur if an already verified IFS2 image is overwritten, bypassing boot verification. This allows u

Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global

Memory corruption occurs when invoking any IOCTL-calling application that executes all MCDM driver IOCTL calls.

Memory corruption while processing FIPS encryption or decryption validation functionality IOCTL call.

Memory corruption while processing IOCTL call invoked from user-space to verify non extension FIPS encryption and decryp

Memory corruption while processing FIPS encryption or decryption IOCTL call invoked from user-space.

Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.

Memory corruption when IOCTL call is invoked from user-space to read board data.

Uncontrolled resource consumption when a driver, an application or a SMMU client tries to access the global registers th

Memory corruption while processing IPA statistics, when there are no active clients registered.

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code executio

In wlan STA, there is a possible way to trick a client to connect to an AP with spoofed SSID. This could lead to remote

In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service with no add