2025

Memory corruption while registering a buffer from user-space to kernel-space using IOCTL calls.

Missing Authorization vulnerability in Realwebcare Image Gallery – Responsive Photo Gallery awesome-responsive-photo-gal

Missing Authorization vulnerability in AmentoTech Private Limited WPGuppy wpguppy-lite allows Exploiting Incorrectly Con

Missing Authorization vulnerability in theme funda Setup Default Featured Image setup-default-feature-image allows Explo

Insertion of Sensitive Information Into Sent Data vulnerability in Greys Korea for WooCommerce korea-for-woocommerce all

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in RealMag777 WOLF bulk-edi

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nitesh Awesome Tim

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in digitalzoomstudio

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in robertkay MLL Audi

Missing Authorization vulnerability in hemnathmouli WC Wallet wc-wallet allows Accessing Functionality Not Properly Cons

Server-Side Request Forgery (SSRF) vulnerability in shinetheme Traveler Layout Essential For Elementor traveler-layout-e

Authorization Bypass Through User-Controlled Key vulnerability in NirWp Team Nirweb support nirweb-support.This issue af

Missing Authorization vulnerability in Dotstore Hide Shipping Method For WooCommerce hide-shipping-method-for-woocommerc

Missing Authorization vulnerability in WesternDeal CF7 Google Sheets Connector cf7-google-sheets-connector allows Exploi

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Notifi

Missing Authorization vulnerability in Xfinitysoft Content Cloner super-seo-content-cloner allows Exploiting Incorrectly

Missing Authorization vulnerability in UIUX Lab Uix Shortcodes uix-shortcodes allows Exploiting Incorrectly Configured A

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Felipe Peixoto Pow

Missing Authorization vulnerability in Marcus (aka @msykes) Meta Tag Manager meta-tag-manager.This issue affects Meta Ta

Missing Authorization vulnerability in averta Shortcodes and extra features for Phlox theme auxin-elements allows Exploi

SourceCodester Packers and Movers Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in Users.php. An at

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valha

The Essential WP Real Estate WordPress plugin through 1.1.3 does not escape generated URLs before outputting them in att

libarchiveplugin.cpp in KDE ark before 24.12.0 can extract to an absolute path from an archive.

An XSS issue was discovered in Backdrop CMS 1.28.x before 1.28.5 and 1.29.x before 1.29.3. It does not sufficiently vali

An XSS issue was discovered in Backdrop CMS 1.28.x before 1.28.5 and 1.29.x before 1.29.3. It doesn't sufficiently isola

In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri

In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri

In DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclo

In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri

In DA, there is a possible read of uninitialized heap data due to uninitialized data. This could lead to local informati

In secmem, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In Bluetooth FW, there is a possible reachable assertion due to improper exception handling. This could lead to remote d

In V5 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In V5 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

A vulnerability was determined in MaxD Lightning Module 4.43/4.44 on OpenCart. This issue affects some unknown processin

A vulnerability classified as critical was found in CmsEasy 7.7.7.9. This vulnerability affects the function backAll_act

A vulnerability was found in Zenvia Movidesk up to 25.01.22. It has been declared as problematic. Affected by this vulne

A vulnerability was found in code-projects Chat System 1.0 and classified as critical. This issue affects some unknown p

NVIDIA GPU kernel driver for Windows and Linux contains a vulnerability where a potential user-mode attacker could read

A vulnerability was found in itsourcecode Tailoring Management System 1.0 and classified as critical. This issue affects

A vulnerability has been found in itsourcecode Tailoring Management System 1.0 and classified as critical. This vulnerab

A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System 1.0. This affec

A vulnerability, which was classified as critical, has been found in itsourcecode Tailoring Management System 1.0. Affec

A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. Affected by this vulne

A vulnerability classified as critical has been found in itsourcecode Tailoring Management System 1.0. Affected is an un

A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been rated as critical. This issue aff

The WooCommerce Support Ticket System plugin for WordPress is vulnerable to unauthorized access and loss of data due to

The Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress is vu