2025

The Lexicata plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg withou

The CanadaHelps Embedded Donation Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin'

The UMich OIDC Login plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'umich_oidc_butt

The UltraEmbed – Advanced Iframe Plugin For WordPress with Gutenberg Block Included plugin for WordPress is vulnerable t

Movable Type contains a reflected cross-site scripting vulnerability in the user information edit page. When Multi-Facto

Movable Type contains a stored cross-site scripting vulnerability in the HTML edit mode of MT Block Editor. It is exploi

Movable Type contains a stored cross-site scripting vulnerability in the custom block edit page of MT Block Editor. If e

The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scriptin

The User Private Files – File Upload & Download Manager with Secure File Sharing plugin for WordPress is vulnerable to S

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all version

Age Verification for your checkout page. Verify your customer's identity 1.20.0 was found to be vulnerable. The web appl

The Easypromos Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Easypromos shor

A vulnerability was found in kasuganosoras Pigeon 1.0.177. It has been declared as critical. This vulnerability affects

The Booking Package plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the locale parameter in all

DCMTK v3.6.9+ DEV was discovered to contain a buffer overflow via the component /dcmimgle/diinpxt.h.

FFmpeg git master before commit c08d30 was discovered to contain a memory leak in the avformat_free_context function in

A buffer overflow in DCMTK git master v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DCM

FFmpeg git master before commit fd1772 was discovered to contain a NULL pointer dereference via the component libavforma

A heap buffer overflow vulnerability in FFmpeg before commit 4bf784c allows attackers to trigger a memory corruption via

A reachable assertion in FFmpeg git-master commit N-113007-g8d24a28d06 allows attackers to cause a Denial of Service (Do

The Wonder Video Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wonderplugin_v

A buffer overflow vulnerability was discovered in D-Link DSL-3782 v1.01 via the destination, netmask, and gateway parame

A buffer overflow vulnerability was discovered in D-Link DSL-3782 v1.01 via the sstartip, sendip, dstartip, and dendip p

A buffer overflow vulnerability was discovered in D-Link DSL-3782 v1.01, triggered by the destination, netmask and gatew

FFmpeg git-master before commit d5873b was discovered to contain a memory leak in the component libavutil/iamf.c.

FFmpeg git-master before commit d5873b was discovered to contain a memory leak in the component libavutil/mem.c.

FFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain a segmentation violation via the component /libavcodec/

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in awsm.in Drivr Lite

Missing Authorization vulnerability in QuanticaLabs MediCenter - Health Medical Clinic medicenter allows Exploiting Inco

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Erez Hadas-Sonnens

Improper Restriction of Excessive Authentication Attempts vulnerability in Rameez Iqbal Real Estate Manager real-estate-

A flaw was found in command/gpg. In some scenarios, hooks created by loaded modules are not removed when the related mod

A flaw was found in grub2. When failing to mount an HFS+ grub, the hfsplus filesystem driver doesn't properly set an ERR

A flaw was found in grub2. When reading a symbolic link's name from a UFS filesystem, grub2 fails to validate the string

When reading the language .mo file in grub_mofile_open(), grub2 fails to verify an integer overflow when allocating its

A flaw was found in grub2 where the grub_extcmd_dispatcher() function calls grub_arg_list_alloc() to allocate memory for

Vim is a greatly improved version of the good old UNIX editor Vi. Vim allows to redirect screen messages using the `:red

A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be

Meshtastic is an open source mesh networking solution. In affected firmware versions crafted packets over MQTT are able

Incorrect cookie session handling in WombatDialer before 25.02 results in the full session identity being written to sys

Server-Side Access Control Bypass vulnerability in WombatDialer before 25.02 could allow unauthorized users to potential

A flaw was found in grub2. A specially crafted JPEG file can cause the JPEG parser of grub2 to incorrectly check the bou

Webkul QloApps v1.6.1 exposes authentication tokens in URLs during redirection. When users access the admin panel or oth

Sage DPW before 2024_12_000 is vulnerable to Cross Site Scripting (XSS). Low-privileged Sage users with employee role pr

Foundry Artifacts was found to be vulnerable to a Denial Of Service attack due to disk being potentially filled up based

Insecure Permissions in Atos Eviden IDRA and IDCA before 2.7.0. A highly trusted role (Config Admin) could exceed their

The administrative web interface of a Netgear C7800 Router running firmware version 6.01.07 (and possibly others) authen

The Uncode Core plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including

Memory safety bugs present in Firefox 135. Some of these bugs showed evidence of memory corruption and we presume that w

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in HAVELSAN Liman MYS allows Cross-Site Flashing. Thi