2025

An authenticated user who has read access to the juju controller model, may construct a remote request to download an ar

This vulnerability allows network-adjacent attackers to compromise transport security on affected installations of Charg

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Alpine Halo9 d

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sili

This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations o

This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected i

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6 prior to 16.9.7, starting from 16

A vulnerability was found in code-projects Chat System up to 1.0. It has been declared as critical. Affected by this vul

A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unkn

A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unkn

Sante PACS Server DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability. This vulnerability allows rem

Sante PACS Server Web Portal DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability. This vulnerability

Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability. This vulnerability allo

Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability. This vulnerability allo

Untrusted search path in the installer for some Zoom Workplace Apps for Windows may allow an authorized user to conduct

Out-of-bounds write in the Zoom Workplace App for Linux before version 6.2.5 may allow an unauthorized user to conduct a

Cleartext storage of sensitive information in the Zoom Jenkins Marketplace plugin before version 1.4 may allow an authen

Vulnerabilities in the algorithms used by Fuchsia to populate network protocol header fields, specifically the TCP ISN,

Weaknesses in the generation of TCP/UDP source ports and some other header values in Google's gVisor allowed them to be

A weak hashing algorithm and small sizes of seeds/secrets in Google's gVisor allowed for a remote attacker to calculate

In its default configuration, Contec Health CMS8000 Patient Monitor transmits plain-text patient data to a hard-coded p

The Cloud MQTT service of the affected products supports wildcard topic subscription which could allow an attacker to o

A vulnerability, which was classified as critical, has been found in code-projects Simple Plugins Car Rental Management

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Vent

A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. Affected by this vulne

In versions 3.1.0 and lower of the Splunk Supporting Add-on for Active Directory, also known as SA-ldapsearch, a vulnera

kubewarden-controller is a Kubernetes controller that allows you to dynamically register Kubewarden admission policies.

kubewarden-controller is a Kubernetes controller that allows you to dynamically register Kubewarden admission policies.

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. A vulnerability was discovered in Argo CD that

VMware Aria Operation for Logs contains a stored cross-site scripting vulnerability. A malicious actor with admin privil

VMware Aria Operations for Logs contains a privilege escalation vulnerability. A malicious actor with non-administrative

VMware Aria Operations for Logs contains a stored cross-site scripting vulnerability. A malicious actor with non-adminis

A vulnerability classified as critical has been found in itsourcecode Tailoring Management System 1.0. Affected is an un

A flaw was found in the Wildfly Server Role Based Access Control (RBAC) provider. When authorization to control manageme

DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user u

DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass.

A command injection vulnerability in the video thumbnail rendering component of Karl Ward's files.gallery v0.3.0 through

The Elementor Website Builder Pro plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions u

The zStore Manager Basic plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability che

The StageShow plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg wi

The Embed Swagger UI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpsgui' shortco

The Music Sheet Viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'pn_msv' short

The WP Post List Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpb_post_list

The Table Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wptableeditor_vtabs

The ECPay Ecommerce for WooCommerce plugin for WordPress is vulnerable to unauthorized loss of data due to a missing cap

The WordPress Survey & Poll – Quiz, Survey and Poll Plugin for WordPress plugin for WordPress is vulnerable to SQL Injec

The All Bootstrap Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the "Accordion" widget in

The Wonder FontAwesome plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and inclu

The WE – Testimonial Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Testimonial Author Nam

The Kona Gallery Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the "Kona: Instagram for Gu