2025

Mismatched length fields in Zlib compressed protocol headers may allow a read of uninitialized heap memory by an unauthe

Apache NiFi 1.20.0 through 2.6.0 include the GetAsanaObject Processor, which requires integration with a configurable Di

The Image Photo Gallery Final Tiles Grid plugin for WordPress is vulnerable to authorization bypass in all versions up t

The myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program plugin for WordPress is vulne

The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'outbound_resource' par

The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the colibri_blog_posts sh

A stored cross-site scripting (XSS) vulnerability exists in the Digital IDs functionality of the Foxit PDF Editor Cloud

A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Trusted Certificates feature.

A stored cross-site scripting (XSS) vulnerability exists in the Portfolio feature of the Foxit PDF Editor cloud (pdfonli

A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Layer Import functionality. A

A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Page Templates feature. A cra

A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Predefined Text feature of th

A stored cross-site scripting (XSS) vulnerability exists in webplugins.foxit.com. A postMessage handler fails to validat

A heap-based buffer overflow vulnerability exists in the PDF parsing of Foxit PDF Reader when processing specially craft

A memory corruption vulnerability exists in the 3D annotation handling of Foxit PDF Reader due to insufficient bounds ch

A memory corruption vulnerability exists in the 3D annotation handling of Foxit PDF Reader due to insufficient bounds ch

A memory corruption vulnerability exists in the 3D annotation handling of Foxit PDF Reader due to insufficient bounds ch

A use-after-free vulnerability exists in the annotation handling of Foxit PDF Reader before 2025.2.1, 14.0.1, and 13.2.1

A use-after-free vulnerability exists in the PDF file parsing of Foxit PDF Reader before 2025.2.1, 14.0.1, and 13.2.1 on

A use-after-free vulnerability exists in the AcroForm handling of Foxit PDF Reader and Foxit PDF Editor before 2025.2.1,

There is an improper authentication vulnerability in some Hikvision DVR products. Due to the improper implementation of

There is a privilege escalation vulnerability in some Hikvision DVR products. Due to the improper implementation of auth

The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's babe-search-fo

Incomplete removal of sensitive information before transfer vulnerability in M-Files Corporation M-Files Server allows d

The HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player plugin for WordPress is vulnerable to Server-S

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin for WordPress is vulnerable to Sensitive

An information disclosure vulnerability in M-Files Server before versions 25.12.15491.7, 25.8 LTS SR3, 25.2 LTS SR3 and

The Ocean Modal Window WordPress plugin before 2.3.3 is vulnerable to Remote Code Execution via the modal display logic.

Versions of the package fastapi-sso before 0.19.0 are vulnerable to Cross-site Request Forgery (CSRF) due to the imprope

A vulnerability was determined in code-projects Scholars Tracking System 1.0. The affected element is an unknown functio

A vulnerability was found in code-projects Online Appointment Booking System 1.0. Impacted is an unknown function of the

The Deployment Infrastructure in Mintlify Platform before 2025-11-15 allows remote attackers to bypass security patches

A Directory Traversal vulnerability in the Static Asset Proxy Endpoint in Mintlify Platform before 2025-11-15 allows rem

The GitHub Integration API in Mintlify Platform before 2025-11-15 allows remote attackers to obtain sensitive repository

A Server-Side Template Injection (SSTI) vulnerability in the MDX Rendering Engine in Mintlify Platform before 2025-11-15

The Static Asset API in Mintlify Platform before 2025-11-15 allows remote attackers to inject arbitrary web script or HT

Successful exploitation of the vulnerability could allow an attacker with local network access to send a specially craft

A vulnerability was detected in Edimax BR-6208AC 1.02. This impacts the function handle_retr of the component FTP Daemon

A weakness has been identified in JeecgBoot up to 3.9.0. The impacted element is the function SysUserOnlineController of

A local privilege escalation vulnerability exists in the Foxit PDF Reader/Editor Update Service. During plugin installat

A security flaw has been discovered in JeecgBoot up to 3.9.0. The affected element is an unknown function of the file je

A security vulnerability has been detected in CodeAstro Real Estate Management System 1.0. Affected is an unknown functi

A weakness has been identified in CodeAstro Real Estate Management System 1.0. This impacts an unknown function of the f

An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attac

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the software

Improper neutralization of input during web page generation ('cross-site scripting') in Azure Cosmos DB allows an unauth

A security flaw has been discovered in CodeAstro Real Estate Management System 1.0. This affects an unknown function of

A vulnerability was identified in CodeAstro Real Estate Management System 1.0. The impacted element is an unknown functi

Improper Authorization (CWE-285) in Kibana can lead to privilege escalation (CAPEC-233) by allowing an authenticated use

Weblate is a web based localization tool. In versions prior to 5.15.1, it was possible to overwrite Git configuration re