2025

woocommerce-pdf-invoices-packing-slips is an extension which allows users to create, print & automatically email PDF inv

Inappropriate implementation in Extensions API in Google Chrome prior to 133.0.6943.53 allowed a remote attacker who con

Use after free in V8 in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap corru

Use after free in Skia in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap cor

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Files or Directories Accessible to Exter

A vulnerability in HPE Aruba Networking ClearPass Policy Manager may, under certain circumstances, expose sensitive unen

A vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager exposes directori

IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 could allow a remote attacker to obtain sensiti

Missing Authorization vulnerability in ksher thailand Ksher ksher-payment allows Exploiting Incorrectly Configured Acces

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CyberChimps Respon

Missing Authorization vulnerability in WPDeveloper Document Block – Upload & Embed Docs document.This issue affects Docu

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Alert Box

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Get Bowtied Produc

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Survey Mak

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SendPulse SendPuls

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tuyennv Music Pres

Missing Authorization vulnerability in famethemes OnePress onepress allows Exploiting Incorrectly Configured Access Cont

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rtowebsites Dynami

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Prem Tiwari FM Not

A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.2 for Joomla allows authenticated attackers (admi

cpp-httplib version v0.17.3 through v0.18.3 fails to filter CRLF characters ("\r\n") when those are prefixed with a null

The z-order of the browser windows could be manipulated to hide the fullscreen notification. This could potentially be l

The fullscreen notification is prematurely hidden when fullscreen is re-requested quickly by the user. This could have b

The Thunderbird Address Book URI fields contained unsanitized links. This could be used by an attacker to create and exp

A race condition could have led to private browsing tabs being opened in normal browsing windows. This could have result

Thunderbird displayed an incorrect sender address if the From field of an email used the invalid group name syntax that

Authentik project is vulnerable to Stored XSS attacks through uploading crafted SVG files that are used as application i

The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘cursor’ parameter

Incorrect Authorization vulnerability in Apache Cassandra allowing users to access a datacenter or IP/CIDR groups they s

In Apache Cassandra it is possible for a local attacker without access to the Apache Cassandra process or configuration

The SKT Blocks – Gutenberg based Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

The SocialV - Social Network and Community BuddyPress Theme theme for WordPress is vulnerable to unauthorized access of

The ShopSite plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.

The DSGVO All in one for WP plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and

The WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More plugin for WordPress is vu

Improper privilege management in Samsung Find prior to SMR Feb-2025 Release 1 allows local privileged attackers to disab

Improper Export of Android Application Components in Settings prior to SMR Feb-2025 Release 1 allows local attackers to

Out-of-bounds read and write in mPOS TUI trustlet prior to SMR Feb-2025 Release 1 allows local privileged attackers to r

Out-of-bounds write in mPOS TUI trustlet prior to SMR Feb-2025 Release 1 allows local privileged attackers to cause memo

Improper access control in Media Controller prior to version 1.0.24.5282 allows local attacker to launch activities in M

Out-of-bounds read in Blockchain Keystore prior to version 1.3.16.5 allows local privileged attackers to read out-of-bou

Out-of-bounds write in Blockchain Keystore prior to version 1.3.16.5 allows local privileged attackers to write out-of-b

Improper access control in PushNotification prior to version 13.0.00.15 in Android 12, 14.0.00.7 in Android 13, and 15.1

Improper input validation in Samsung Members prior to version 5.2.00.12 allows physical attackers to access data across

Improper access control in Secure Folder prior to version 1.9.20.50 in Android 14, 1.8.11.0 in Android 13, and 1.7.04.0

Use of implicit intent for sensitive communication in EasySetup prior to version 11.1.18 allows local attackers to acces

Improper access control in Samsung Email prior to version 6.1.97.1 allows physical attackers to access data across multi

Improper access control in NotificationManager prior to SMR Jan-2025 Release 1 allows local attackers to change the conf

Protection Mechanism Failure in bootloader prior to SMR Jan-2025 Release 1 allows physical attackers to allow to execute

Out-of-bounds read in decoding malformed bitstream of video thumbnails in libsthmbc.so prior to SMR Jan-2025 Release 1 a