2025

HCL BigFix SaaS Authentication Service is affected by a sensitive information disclosure. Under certain conditions, err

HCL BigFix SaaS Authentication Service is affected by a SQL injection vulnerability. The vulnerability allows potential

This issue was addressed with improved checks. This issue is fixed in Apple Music Classical 2.3 for Android. An app may

HashiCorp's go-getter library subdirectory download feature is vulnerable to symlink attacks leading to unauthorized rea

IBM TS4500 1.11.0.0-D00, 1.11.0.1-C00, 1.11.0.2-C00, and 1.10.00-F00 web GUI is vulnerable to cross-site scripting. This

A potential security vulnerability has been identified in the HPAudioAnalytics service included in the HP Hotkey Support

@backstage/plugin-scaffolder-backend is the backend for the default Backstage software templates. Prior to version 2.1.1

A vulnerability has been found in the  MSoft MFlash application that allows execution of arbitrary code on the server

Missing Authorization vulnerability in Drupal Layout Builder Advanced Permissions allows Forceful Browsing.This issue af

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authenticati

Server-Side Request Forgery (SSRF) vulnerability in Drupal AI SEO Link Advisor allows Server Side Request Forgery.This i

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal GoogleTag M

Missing Authorization vulnerability in Drupal Config Pages allows Forceful Browsing. This issue affects Config Pages: f

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal COOKiES Con

Improper Control of Generation of Code ('Code Injection') vulnerability in Wulkano KAP on MacOS allows TCC Bypass.This i

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Bunkerity Bunker Web on Linux allows Phishing.This

Astro is a web framework for content-driven websites. Following CVE-2025-54793 there's still an Open Redirect vulnerabil

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xolluteon Dropshix

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus Vertical

Missing Authorization vulnerability in FWDesign Ultimate Video Player fwduvp allows Exploiting Incorrectly Configured Ac

A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force a Memory Corruption vulnerabili

A maliciously crafted DGN file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability.

A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerabi

Plane is open-source project management software. Prior to version 0.28.0, a stored cross-site scripting (XSS) vulnerabi

Firebird is a relational database. Prior to versions 3.0.13, 4.0.6, and 5.0.3, there is an XDR message parsing NULL poin

Improper Control of Generation of Code ('Code Injection') vulnerability leading to a possible RCE in Apache OFBiz scrum

Firebird is a relational database. Prior to snapshot versions 4.0.6.3183, 5.0.2.1610, and 6.0.0.609, Firebird is vulnera

A vulnerability has been found in projectworlds Travel Management System 1.0. This vulnerability affects unknown code of

A vulnerability was identified in projectworlds Travel Management System 1.0. This affects an unknown part of the file /

A vulnerability was determined in projectworlds Travel Management System 1.0. Affected by this issue is some unknown fun

A vulnerability was found in projectworlds Travel Management System 1.0. Affected by this vulnerability is an unknown fu

A SQL injection vulnerability in the JS Jobs plugin versions 1.3.2-1.4.4 for Joomla allows low-privilege users to execut

A SQLi vulnerability in DJ-Classifieds component 3.9.2-3.10.1 for Joomla was discovered. The issue allows privileged use

An authenticated RCE vulnerability in Phoca Commander component 1.0.0-4.0.0 and 5.0.0-5.0.1 for Joomla was discovered. T

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Risk Yazılım Tekno

A vulnerability has been found in projectworlds Visitor Management System 1.0. Affected is an unknown function of the fi

A vulnerability was identified in Tenda AC20 16.03.08.12. This issue affects the function sub_46A2AC of the file /goform

A flaw has been found in code-projects Online Medicine Guide 1.0. This vulnerability affects unknown code of the file /a

There is an unauthorized access vulnerability in ZTE F50. Due to improper permission control of the Web module interface

A vulnerability has been found in code-projects Online Medicine Guide 1.0. This vulnerability affects unknown code of th

A vulnerability was identified in D-Link DIR-860L 2.04.B04. This affects the function ssdpcgi_main of the file htdocs/cg

A vulnerability was determined in code-projects Simple Cafe Ordering System 1.0. Affected by this issue is some unknown

A vulnerability was found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unkno

A vulnerability has been found in Tenda AC7 and AC18 15.03.05.19/15.03.06.44. Affected is the function formSetSchedLed o

The Inpersttion For Theme plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and includi

The Plugin README Parser plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘target’ parameter in

The EventON Lite plugin for WordPress is vulnerable to Information Exposure in all versions less than, or equal to, 2.4.

The Alobaidi Captcha plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settings in all ve

The Icons Factory plugin for WordPress is vulnerable to Arbitrary File Deletion due to insufficient authorization and im

The Add User Meta plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including,