2025

The UI performs the wrong action in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing

A double free vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulner

A server-side request forgery (SSRF) vulnerability has been reported to affect QuLog Center. If exploited, the vulnerabi

A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the

An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP o

An exposure of sensitive information vulnerability has been reported to affect product. If exploited, the vulnerability

IBM Control Center 6.2.1 through 6.3.1 is vulnerable to an external service interaction attack, caused by improper valid

IBM Control Center 6.2.1 through 6.3.1 is vulnerable to HTTP header injection, caused by improper validation of input by

axios is a promise based HTTP client for the browser and node.js. The issue occurs when passing absolute URLs rather tha

Incorrect Access Control in Unifiedtransform 2.X leads to Privilege Escalation allowing teachers to create syllabus.

A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by this is

A vulnerability has been found in StarSea99 starsea-mall 1.0/2.X and classified as critical. Affected by this vulnerabil

The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to blind SQL Injection via the 'search' parameter in a

The Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins plugin for WordPress i

The Reservit Hotel WordPress plugin before 3.0 does not sanitise and escape some of its settings, which could allow high

The WPGet API – Connect to any external REST API plugin for WordPress is vulnerable to Server-Side Request Forgery in al

The Advanced File Manager — Ultimate WordPress File Manager and Document Library Plugin plugin for WordPress is vulnerab

The VK Blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including,

The SupportCandy – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Insecure Direct Objec

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: avoid garbage value in panthor_ioctl_d

In the Linux kernel, the following vulnerability has been resolved: cpufreq/amd-pstate: Fix cpufreq_policy ref counting

In the Linux kernel, the following vulnerability has been resolved: thermal/netlink: Prevent userspace segmentation fau

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: core: flush gadget workqueue after dev

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_midi: fix MIDI Streaming descriptor

The Platform.ly for WooCommerce plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions

The Hero Maps Premium plugin for WordPress is vulnerable to SQL Injection via several AJAX actions in all versions up to

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Ref

The School Management System for Wordpress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the

The School Management System for Wordpress plugin for WordPress is vulnerable to unauthorized loss of data due to a miss

The School Management System for Wordpress plugin for WordPress is vulnerable to SQL Injection via the 'view-attendance'

The School Management System for Wordpress plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of

The Flexmls® IDX Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'idx_frame' s

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger a crash of the FW r

The Wishlist plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wishlist_button' shortc

ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation, resulting in out-of-bounds acc

ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.

A vulnerability was found in code-projects Online Ticket Reservation System 1.0. It has been declared as problematic. Th

There is a configuration defect vulnerability in ZTELink 5.4.9 for iOS. This vulnerability is caused by a flaw in the Wi

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. Affected

The Homey theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.4.3. This

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized access of data

A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been classified as critical. Af

A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0 and classified as critical. This issue

A vulnerability has been found in PHPGurukul Apartment Visitors Management System 1.0 and classified as critical. This v

Privilege escalation in Installer and Recovery image handling in Google ChromeOS version 15786.48.2 on device allows an

A vulnerability was found in SourceCodester Best Employee Management System 1.0 and classified as critical. Affected by

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. Affected

A vulnerability was found in LinZhaoguan pb-cms 1.0.0 and classified as critical. This issue affects some unknown proces

A vulnerability has been found in huang-yk student-manage 1.0 and classified as problematic. This vulnerability affects

A vulnerability, which was classified as critical, has been found in s-a-zhd Ecommerce-Website-using-PHP 1.0. Affected b