2025

The Staff Directory Plugin: Company Directory plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due t

The The Listingo theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including

The Lafka - Multi Store Burger - Pizza & Food Delivery WooCommerce Theme theme for WordPress is vulnerable to unauthoriz

The Zass - WooCommerce Theme for Handmade Artists and Artisans theme for WordPress is vulnerable to unauthorized access

The Hero Slider - WordPress Slider Plugin plugin for WordPress is vulnerable to SQL Injection via several parameters in

The Hero Mega Menu - Responsive WordPress Menu Plugin plugin for WordPress is vulnerable to arbitrary file deletion due

The Hero Mega Menu - Responsive WordPress Menu Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripti

The Hero Mega Menu - Responsive WordPress Menu Plugin plugin for WordPress is vulnerable to SQL Injection via several fu

The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the pl

The WooMail - WooCommerce Email Customizer plugin for WordPress is vulnerable to unauthorized loss of data due to a miss

The Point Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'point_maker' shortco

The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the pl

Secure flag not set and SameSIte was set to Lax in the Foreseer Reporting Software (FRS). Absence of this secure flag co

The bbPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.6.1

The Recently Purchased Products For Woo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘view’

The I Am Gloria plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1

The JNews - WordPress Newspaper Magazine Blog AMP Theme theme for WordPress is vulnerable to unauthorized user registrat

The Simple Notification plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and inc

The Razorpay Subscription Button Elementor Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting d

The SearchIQ – The Search Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 's

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cross-Site Scri

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cross-Site Scri

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cross Site Scri

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Cross Site Scri

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Preauthenticate

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0.2614 allows Cross-Site Scr

Inappropriate implementation in Permission Prompts in Google Chrome prior to 134.0.6998.35 allowed an attacker who convi

Inappropriate implementation in Selection in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker w

Inappropriate implementation in Media Stream in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to obtain

Inappropriate implementation in Browser UI in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker

NVIDIA Hopper HGX for 8-GPU contains a vulnerability in the GPU vBIOS that may allow a malicious actor with tenant level

GMOD Apollo does not have sufficient logical or access checks when updating a user's information. This could result in a

After attempting to upload a file that does not meet prerequisites, GMOD Apollo will respond with local path information

A vulnerability has been found in SourceCodester Best Church Management Software 1.1 and classified as critical. Affecte

A vulnerability, which was classified as critical, has been found in aaluoxiang oa_system 1.0. This issue affects some u

hb.exe in TSplus Remote Access before 17.30 2024-10-30 allows remote attackers to retrieve a list of all domain accounts

On affected platforms running Arista EOS with BGP Link State configured, BGP peer flap can cause the BGP agent to leak m

On affected platforms running Arista EOS with 802.1X configured, certain conditions may occur where a dynamic ACL is rec

Cross-Site Scripting (XSS) vulnerability exists in the WPA/WAPI Passphrase field of the Wireless Security settings (2.4G

Improper request input validation in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center allows a us

A vulnerability, which was classified as problematic, has been found in ZZCMS 2025. This issue affects some unknown proc

A vulnerability classified as critical has been found in hzmanyun Education and Training System 2.1.3. This affects the

A vulnerability was found in hzmanyun Education and Training System 2.1. It has been rated as critical. Affected by this

A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Content Security Management Appliance (

A security vulnerability was discovered in the local status page functionality of Cisco Meraki’s MX67 and MX68 security

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap is missing CSRF

Tuleap is an Open Source Suite to improve management of software developments and collaboration. In a standard usages of

Tuleap is an Open Source Suite to improve management of software developments and collaboration. The mass emailing featu

Pinecone is an experimental overlay routing protocol suite which is the foundation of the current P2P Matrix demos. The

Tuleap is an Open Source Suite to improve management of software developments and collaboration. The password to connect