2025

A vulnerability, which was classified as critical, was found in Tenda AC7 1200M 15.03.06.44. Affected is the function Te

A vulnerability, which was classified as critical, has been found in zj1983 zz up to 2024-8. This issue affects some unk

A vulnerability classified as problematic has been found in FFmpeg up to 6e26f57f672b05e7b8b052007a83aef99dc81ccb. This

A vulnerability classified as problematic was found in zj1983 zz up to 2024-08. Affected by this vulnerability is an unk

A vulnerability classified as critical has been found in zj1983 zz up to 2024-08. Affected is the function GetUserOrg of

A vulnerability was found in Pixsoft Vivaz 6.0.11. It has been classified as problematic. Affected is an unknown functio

list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a

A vulnerability, which was classified as problematic, has been found in Eastnets PaymentSafe 2.5.26.0. Affected by this

A vulnerability has been found in D-Link DAR-7000 3.2 and classified as critical. This vulnerability affects the functio

A vulnerability, which was classified as critical, was found in Zorlan SkyCaiji 2.9. This affects the function previewAc

A vulnerability, which was classified as critical, has been found in Hunan Zhonghe Baiyi Information Technology Baiyiyun

IBM Controller 11.0.0 through 11.0.1 and 11.1.0 does not require that users should have strong passwords by default, whi

A vulnerability has been found in Zorlan SkyCaiji 2.9 and classified as critical. This vulnerability affects the functio

A vulnerability, which was classified as critical, was found in rizinorg rizin up to 0.8.0. This affects the function rz

The WP Posts Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘auto_play_timeout’ para

The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to unauthorized access of data

A vulnerability was found in rizinorg rizin up to 0.7.4. It has been rated as critical. This issue affects the function

The GenerateBlocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and inclu

The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Si

The Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress is vu

The The Authors List plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and incl

The Simple Download Counter plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and includi

The IP2Location Redirection plugin for WordPress is vulnerable to unauthorized access of data due to a missing capabilit

The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Embedded Video(

The Counter Box: Add Engaging Countdowns, Timers & Counters to Your WordPress Site plugin for WordPress is vulnerable to

The Clicface Trombi plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘nom’ parameter in all ver

The Currency Switcher for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the us

The SKU Generator for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of

The Multilevel Referral Affiliate Plugin for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'or

The Booking Calendar and Notification plugin for WordPress is vulnerable to unauthorized access, modification, and loss

The TemplatesNext ToolKit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tx_woo_wis

The Simple:Press Forum plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and inclu

The BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages plugin for WordPress is vulnerable to

The BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages plugin for WordPress is vulnerable to

An Improper Certificate Validation vulnerability could allow an authenticated malicious actor with access to UniFi Prote

An Insufficient Firmware Update Validation vulnerability could allow an authenticated malicious actor with access to Uni

The account file upload functionality in Syspass 3.2.x fails to properly handle special characters in filenames. This mi

A stored cross-site scripting (XSS) vulnerability in SysPass 3.2.x allows a malicious user with elevated privileges to e

A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a m

PwnDoc is a penetration test reporting application. Prior to version 1.2.0, the backup restore functionality allows an a

PwnDoc is a penetration test reporting application. Prior to version 1.2.0, the backup restore functionality is vulnerab

Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting (XSS) vulnerability via the r_name variable inside t

Manifest offers users a one-file micro back end. Prior to version 4.9.2, Manifest employs a weak password hashing implem

Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting (XSS) vulnerability via the The ssid key of wifi_dat

Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting (XSS) vulnerability via the configname parameter on

Insecure file retrieval process that facilitates potential for file manipulation to affect product stability and confide

Cookie policy is observable via built-in browser tools. In the presence of XSS, this could lead to full session compromi

The Dario Health Internet-based server infrastructure is vulnerable due to exposure of development environment details,

Unauthenticated log effects metrics gathering incident response efforts and potentially exposes risk of injection attack

The Dario Health portal service application is vulnerable to XSS, which could allow an attacker to obtain sensitive info