2025

The drag-and-drop onto image (ddimageortext) question type required additional sanitizing to prevent a stored XSS risk.

A vulnerability was found in libarchive up to 3.7.7. It has been classified as problematic. This affects the function li

Mattermost versions 9.11.x <= 9.11.6, 10.4.x <= 10.4.1 fail to invalidate all active sessions when converting a user to

A vulnerability was found in Excitel Broadband Private my Excitel App 3.13.0 on Android. It has been classified as probl

A vulnerability, which was classified as problematic, was found in Netis WF2780 2.1.41925. This affects an unknown part

A vulnerability classified as problematic was found in FiberHome AN5506-01A ONU GPON RP2511. Affected by this vulnerabil

A vulnerability classified as problematic has been found in FiberHome AN5506-01A ONU GPON RP2511. Affected is an unknown

A vulnerability was found in FiberHome AN5506-01A ONU GPON RP2511. It has been rated as problematic. This issue affects

A vulnerability was found in Edimax BR-6288ACL 1.30. It has been declared as problematic. This vulnerability affects unk

A vulnerability was found in SourceCodester Best Church Management Software 1.0. It has been classified as problematic.

A vulnerability was found in SourceCodester Best Employee Management System 1.0. It has been rated as problematic. Affec

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as problematic. Affecte

A vulnerability was found in code-projects Blood Bank System 1.0. It has been declared as problematic. This vulnerabilit

A vulnerability, which was classified as problematic, has been found in otale tale up to 2.0.5. This issue affects the f

A vulnerability was found in code-projects Blood Bank System 1.0 and classified as problematic. This issue affects some

A vulnerability, which was classified as problematic, has been found in code-projects Blood Bank System 1.0. Affected by

Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data ou

A vulnerability was found in pankajindevops scale up to 3633544a00245d3df88b6d13d9b3dd0f411be7f6. It has been classified

IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 thro

A vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects unknown code of the file

A vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects unknown code of the file

A vulnerability was found in iteachyou Dreamer CMS 4.1.3. It has been declared as problematic. This vulnerability affect

The Ajax Search Lite WordPress plugin before 4.12.5 does not sanitise and escape some of its settings, which could allo

The Carousel, Slider, Gallery by WP Carousel WordPress plugin before 2.7.4 does not sanitise and escape some of its set

The Master Slider WordPress plugin before 3.10.5 does not sanitise and escape some of its settings, which could allow h

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.

A stack consumption issue in sqfs_size in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with de

A vulnerability was found in Keycloak. This issue may allow a privileged attacker to use a malicious payload as the perm

A vulnerability has been found in D-Link DIR-816 1.01TO and classified as problematic. Affected by this vulnerability is

A vulnerability, which was classified as problematic, was found in radare2 5.9.9 33286. Affected is an unknown function

A vulnerability, which was classified as problematic, has been found in GNU elfutils 0.192. This issue affects the funct

A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elf_s

A vulnerability was found in FFmpeg up to 7.1. It has been rated as problematic. Affected by this issue is the function

A vulnerability has been found in GNU elfutils 0.192 and classified as problematic. This vulnerability affects the funct

A vulnerability was found in MicroWord eScan Antivirus 7.0.32 on Linux. It has been declared as problematic. This vulner

A vulnerability, which was classified as problematic, was found in Internet Web Solutions Sublime CRM up to 20250207. Af

A vulnerability, which was classified as problematic, was found in PMWeb 7.2.0. This affects an unknown part of the comp

A vulnerability was found in Eastnets PaymentSafe 2.5.26.0. It has been classified as problematic. This affects an unkno

A vulnerability has been found in FastCMS up to 0.1.5 and classified as problematic. This vulnerability affects unknown

For a brief summary of Xapi terminology, see: https://xapi-project.github.io/xen-api/overview.html#object-model-over

Mattermost versions 9.11.x <= 9.11.6 fail to filter out DMs from the deleted channels endpoint which allows an attacker

An issue was discovered on Mercedes Benz NTG 6. A possible integer overflow exists in the user data import/export functi

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Inside profile folder the

A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the 'gw' parameter at /userRpm/WanDynamicIp

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in share file list function

The Simple Video Management System WordPress plugin through 1.0.4 does not sanitise and escape some of its settings, whi

The Everest Forms WordPress plugin before 3.0.8.1 does not sanitise and escape some of its settings, which could allow

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress pl

A directory traversal vulnerability exists in the Mavenir SCE Application Provisioning Portal, version PORTAL-LBS-R_1_0_

Incorrect execution-assigned permissions in the Linux kernel mode driver for the Intel(R) 800 Series Ethernet Driver bef