2025

An issue in xxyopen novel plus v.4.4.0 and before allows a remote attacker to execute arbitrary code via the PageControl

A Cross Site Scripting (XSS) vulnerability exists in TeamPasswordManager v12.162.284 and before that could allow a remot

t0mer BroadlinkManager v5.9.1 was discovered to contain an OS command injection vulnerability via the IP Address paramet

Malicious websites utilizing a server-side redirect to an internal error page could result in a spoofed website URL. Thi

Scanning certain QR codes that included text with a website URL could allow the URL to be opened without presenting the

Websites redirecting to a non-HTTP scheme URL could allow a website address to be spoofed for a malicious page. This vul

Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7. Some of these bugs

A web page could trick a user into setting that site as the default handler for a custom URL protocol. This vulnerabilit

It was possible to interrupt the processing of a RegExp bailout and run additional JavaScript, potentially triggering ga

A vulnerability classified as problematic was found in Open5GS up to 2.7.2. Affected by this vulnerability is the functi

The Ultimate WordPress Auction Plugin plugin for WordPress is vulnerable to unauthorized access to functionality in all

The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

There is a Hard-coded Cryptographic Key in Docusnap 13.0.1440.24261, and earlier and later versions. This key can be use

The Structured Content (JSON-LD) #wpsc plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin'

The Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations plugin for

The Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations plugin for

The Wallet System for WooCommerce – Wallet, Wallet Cashback, Refunds, Partial Payment, Wallet Restriction plugin for Wor

The Wallet System for WooCommerce – Wallet, Wallet Cashback, Refunds, Partial Payment, Wallet Restriction plugin for Wor

Vulnerability of improper access permission in the process management module Impact: Successful exploitation of this vul

Vulnerability of improper access permission in the HDC module Impact: Successful exploitation of this vulnerability may

Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability

Multi-thread problem vulnerability in the package management module Impact: Successful exploitation of this vulnerabilit

Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability

Permission management vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may

Dzmitry Lukyanenka, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API param.cgi was vulnerable to a

51l3nc3, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API mediaclip.cgi did not have a sufficient

The Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10 retrieves client IP addresses from potentially untr

A vulnerability has been found in PHPGurukul Restaurant Table Booking System 1.0 and classified as critical. This vulner

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause information leak through out-of-bounds read bypass

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause information leak through out-of-bounds read.

The teachPress plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the 'tpsearch' shortcode

The VW Storefront theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability che

A vulnerability has been found in Tenda TX3 16.03.13.11_multi and classified as critical. Affected by this vulnerability

A vulnerability, which was classified as critical, was found in Tenda TX3 16.03.13.11_multi. Affected is an unknown func

A vulnerability, which was classified as critical, has been found in Tenda TX3 16.03.13.11_multi. This issue affects som

A vulnerability classified as critical was found in Tenda TX3 16.03.13.11_multi. This vulnerability affects unknown code

A vulnerability classified as critical has been found in Tenda TX3 16.03.13.11_multi. This affects an unknown part of th

A vulnerability was found in Open5GS up to 2.7.2. It has been declared as problematic. Affected by this vulnerability is

In NGINX Unit before version 1.34.2 with the Java Language Module in use, undisclosed requests can lead to an infinite l

In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#es

In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Ser

A vulnerability was found in shishuocms 1.1 and classified as problematic. This issue affects some unknown processing. T

A vulnerability has been found in shishuocms 1.1 and classified as critical. This vulnerability affects the function han

Multiple cross-site scripting (XSS) vulnerabilities in EasyVirt DC NetScope <= 8.6.4 allow remote attackers to inject ar

A vulnerability was found in i-Drive i11 and i12 up to 20250227. It has been rated as critical. Affected by this issue i

A vulnerability was found in i-Drive i11 and i12 up to 20250227. It has been declared as problematic. Affected by this v

There is a stored Cross-site Scripting vulnerability in ArcGIS Server for versions 11.3 and below that may allow a remot

There is a path traversal vulnerability in ESRI ArcGIS Server versions 11.3 and below. Successful exploitation may allo

There is a stored Cross-site Scripting vulnerability in ArcGIS Server for versions 11.3 and follow that may allow a remo

There is a stored Cross-site Scripting vulnerability in ArcGIS Server for versions 11.3 and below that may allow a remot