2025

The TRMTracker web application is vulnerable to reflected Cross-site scripting attack. The application allows client-sid

A Host Header Injection vulnerability in TRMTracker application may allow an attacker by modifying the host header value

The TRMTracker web application is vulnerable to LDAP injection attack potentially allowing an attacker to inject code in

A vulnerability exists in RTU500 IEC 60870-5-104 controlled station functionality and IEC 61850 functionality, that allo

A vulnerability exists in RTU500 IEC 60870-4-104 controlled station functionality, that allows an authenticated and auth

A vulnerability exists in the RTU500 web server component that can cause a denial of service to the RTU500 CMU applicati

accountsservice no longer drops permissions when writting .pam_environment

The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Server-Side Request For

A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects t

A vulnerability classified as critical has been found in Open Asset Import Library Assimp 5.4.3. This affects the functi

The Digital License Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remov

The Your Simple SVG Support plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in al

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache VCL in the

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as critical. Affected by this iss

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been declared as critical. Affected by this

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as critical. Affected is the

A flaw was found in Keycloak. When the configuration uses JWT tokens for authentication, the tokens are cached until exp

The Frndzk Expandable Bottom Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'text' parameter

The Alert Box Block – Display notice/alerts in the front end. plugin for WordPress is vulnerable to Stored Cross-Site Sc

The Estatebud – Properties & Listings plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions u

A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects th

A vulnerability has been found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This vulnerabili

A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the

A vulnerability, which was classified as critical, was found in zhijiantianya ruoyi-vue-pro 2.4.1. Affected is an unknow

A vulnerability, which was classified as problematic, has been found in zhijiantianya ruoyi-vue-pro 2.4.1. This issue af

A vulnerability classified as critical was found in zhijiantianya ruoyi-vue-pro 2.4.1. This vulnerability affects unknow

The Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Sensit

The teachPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 9.

The DICOM Support plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'dcm' shortcode in

The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to

Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uniniti

Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arb

The does not sanitise and escape some parameters when outputting them back in a page, allowing unauthenticated users th

The DesignThemes Core Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versi

The WP-Recall WordPress plugin before 16.26.12 does not sanitize and escape a parameter before using it in a SQL statem

The IP Based Login WordPress plugin before 2.4.1 does not have CSRF checks in some places, which could allow attackers t

The Smart Maintenance Mode WordPress plugin before 1.5.2 does not sanitise and escape some of its settings, which could

The Product Labels For Woocommerce (Sale Badges) WordPress plugin before 1.5.9 does not sanitize and escape a parameter

The WP Tabs WordPress plugin before 2.2.7 does not sanitise and escape some of its settings, which could allow high pri

The Contact Form & SMTP Plugin for WordPress by PirateForms WordPress plugin before 2.6.0 does not sanitise and escape s

The Contact Form & SMTP Plugin for WordPress by PirateForms WordPress plugin before 2.6.0 does not sanitise and escape s

The Registrations for the Events Calendar WordPress plugin before 2.13.4 does not sanitise and escape some of its setti

The Quiz and Survey Master (QSM) WordPress plugin before 9.2.1 does not sanitise and escape some of its settings, which

The Product Labels For Woocommerce (Sale Badges) WordPress plugin before 1.5.11 does not sanitize and escape a parameter

The Slider by 10Web WordPress plugin before 1.2.62 does not sanitise and escape some of its settings, which could allow

The Slider by 10Web WordPress plugin before 1.2.62 does not sanitise and escape some of its settings, which could allow

The Stylish Price List WordPress plugin before 7.1.12 does not sanitise and escape some of its settings, which could al

The Job Postings WordPress plugin before 2.7.11 does not sanitise and escape some of its settings, which could allow hig

A vulnerability classified as critical has been found in mannaandpoem OpenManus up to 2025.3.13. This affects an unknown

A vulnerability, which was classified as critical, has been found in D-Link DIR-823X 240126/240802. This issue affects t