2025

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service

In wlan STA driver, there is a possible out of bounds write due to improper input validation. This could lead to remote

A vulnerability was found in Codezips Project Management System 1.0. It has been classified as critical. This affects an

IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 is vulnerable to SQL injection. A remote attacker co

IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to cause a denial of

A vulnerability has been found in Campcodes School Faculty Scheduling System 1.0 and classified as critical. Affected by

The UpdraftPlus: WP Backup & Migration Plugin plugin for WordPress is vulnerable to PHP Object Injection in all versions

A vulnerability, which was classified as critical, has been found in code-projects Online Shoe Store 1.0. Affected by th

The Backup Migration plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.

An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0. A medium-severity vulnerability exists in the C

An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0. A medium-severity vulnerability exists in the C

An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity issue exists in requests fo

An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity session issue exists in the

An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity issue concerning business l

The The WordPress Popular Posts plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up t

A vulnerability was found in Roxy-WI up to 8.1.3. It has been declared as critical. Affected by this vulnerability is th

FFmpeg version n6.1.1 has a double-free vulnerability in the fftools/ffmpeg_mux_init.c component of FFmpeg, specifically

GoCD is a continuous deliver server. GoCD versions prior to 24.4.0 can allow GoCD "group admins" to abuse ability to edi

GoCD is a continuous deliver server. GoCD versions 16.7.0 through 24.4.0 (inclusive) can allow GoCD admins to abuse a hi

GoCD is a continuous deliver server. GoCD versions prior to 24.5.0 are vulnerable to admin privilege escalation due to i

SQL Injection vulnerability in Silverpeas 6.4.1 allows a remote attacker to obtain sensitive information via the ViewTyp

Moxa’s cellular routers, secure routers, and network security appliances are affected by a high-severity vulnerability,

In startListeningForDeviceStateChanges, there is a possible Permission Bypass due to a confused deputy. This could lead

there is a possible biometric bypass due to an unusual root cause. This could lead to local escalation of privilege with

In Exynos_parsing_user_data_registered_itu_t_t35 of VendorVideoAPI.cpp, there is a possible out of bounds write due to a

In prepare_response of lwis_periodic_io.c, there is a possible out of bounds write due to an integer overflow. This coul

there is a possible biometric bypass due to an unusual root cause. This could lead to local escalation of privilege with

In sms_DisplayHexDumpOfPrivacyBuffer of sms_Utilities.c, there is a possible out of bounds read due to an incorrect boun

In prepare_response_locked of lwis_transaction.c, there is a possible out of bounds write due to improper input validat

In construct_transaction_from_cmd of lwis_ioctl.c, there is a possible out of bounds write due to a heap buffer overflow

there is a possible to add apps to bypass VPN due to Undeclared Permission . This could lead to local escalation of priv

In isPackageDeviceAdmin of PackageManagerService.java, there is a possible edge case which could prevent the uninstallat

In skia_alloc_func of SkDeflate.cpp, there is a possible out of bounds write due to an integer overflow. This could lead

In prepare_to_draw_into_mask of SkBlurMaskFilterImpl.cpp, there is a possible heap overflow due to improper input valida

In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to partially bypass lock screen. This could l

In multiple locations, there is a possible way to avoid unbinding of a service from the system due to a logic error in t

In resizeToAtLeast of SkRegion.cpp, there is a possible out of bounds write due to an integer overflow. This could lead

In DevmemValidateFlags of devicemem_server.c , there is a possible out of bounds write due to memory corruption. This co

A vulnerability in Forescout SecureConnector v11.3.07.0109 on Windows allows unauthenticated user to modify compliance

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protec

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protec

Missing Authorization vulnerability in Crocoblock JetEngine jet-engine allows Exploiting Incorrectly Configured Access C

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Markyis Cool Olivi

Cross-Site Request Forgery (CSRF) vulnerability in CridioStudio ListingPro listingpro allows Authentication Bypass.This

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in html5maps Interact

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Greg Ross Just Wri

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AF themes WP Post

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg – SiteOrigin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in adworkmedia AdWork

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DuoGeek Custom Das