2025

A stored Cross-site Scripting (XSS) vulnerability affecting Requirements in ENOVIA Product Manager from Release 3DEXPERI

The extract_name function in Fluent Bit in_docker input plugin copies container names into a fixed size stack buffer wit

Apache Syncope can be configured to store the user password values in the internal database with AES encryption, though

Integer signedness error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers t

NULL pointer dereference in get_san_or_cn_from_cert() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attacker

NULL pointer dereference in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of servic

An unauthenticated remote attacker can send a specially crafted Modbus read command to the device which leads to a denia

A vulnerability was detected in itsourcecode COVID Tracking System 1.0. This issue affects some unknown processing of th

The Broken Link Manager WordPress plugin through 0.6.5 does not sanitise and escape a parameter before outputting it bac

The WordPress eCommerce Plugin WordPress plugin through 2.9.0 does not sanitise and escape a parameter before outputtin

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to time-based SQL In

A weakness has been identified in code-projects Question Paper Generator 1.0. This affects an unknown part of the file /

A security flaw has been discovered in code-projects Jonnys Liquor 1.0. Affected by this issue is some unknown functiona

A vulnerability has been found in code-projects Library System 1.0. This affects an unknown function of the file /index.

A vulnerability was identified in projectworlds Advanced Library Management System 1.0. This affects an unknown part of

A vulnerability was identified in D-Link DIR-852 1.00. This issue affects some unknown processing of the file /gena.cgi.

A vulnerability was determined in SourceCodester Company Website CMS 1.0. This vulnerability affects unknown code of the

A vulnerability was found in SourceCodester Company Website CMS 1.0. This affects an unknown part of the file /admin/res

A vulnerability has been found in Campcodes Online Polling System 1.0. Affected by this issue is some unknown functional

Incorrect default permissions in AMD StoreMI™ could allow an attacker to achieve privilege escalation potentially result

A DLL hijacking vulnerability in AMD StoreMI™ could allow an attacker to achieve privilege escalation, potentially resul

A flaw has been found in Campcodes Online Polling System 1.0. Affected by this vulnerability is an unknown functionality

A vulnerability was detected in Campcodes School File Management System 1.0. Affected is an unknown function of the file

A security vulnerability has been detected in Campcodes Supplier Management System 1.0. This impacts an unknown function

A weakness has been identified in D-Link DWR-M920 1.1.50. This affects the function sub_41C7FC of the file /boafrm/formP

A security flaw has been discovered in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. The impacted element is

A vulnerability was identified in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. The affected element is an un

A vulnerability was determined in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. Impacted is an unknown functi

A vulnerability was found in D-Link DIR-822K 1.00. This issue affects the function sub_455524 of the file /boafrm/formNt

A vulnerability has been found in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. This vulnerability affects un

A flaw has been found in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. This affects an unknown part of the fi

The OneClick Chat to Order plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to,

The CP Contact Form with PayPal plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and i

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Prior to version 3.26.7, Due to an error

Vulnerability in X25519 constant-time cryptographic implementations due to timing side channels introduced by compiler o

Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt. This issue is hit specifically with a cal

With TLS 1.3 pre-shared key (PSK) a malicious or faulty server could ignore the request for PFS (perfect forward secrecy

The Zegen Core plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload in versions up

MLX is an array framework for machine learning on Apple silicon. Prior to version 0.29.4, there is a segmentation fault

Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to version 4.13.0, a

This vulnerability allowed a site to enter fullscreen, after a user click, without a full-screen notification (toast) ap

In RNP version 0.18.0 a refactoring regression causes the symmetric session key used for Public-Key Encrypted Session K

The S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator plugin for WordPress is vulnerable to arbitra

Vault’s Terraform Provider incorrectly set the default deny_null_bind parameter for the LDAP auth method to false by def

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Iqonic Design Kivi

Deserialization of Untrusted Data vulnerability in Cozmoslabs WP Webhooks wp-webhooks allows Object Injection.This issue

Deserialization of Untrusted Data vulnerability in Icegram Email Subscribers & Newsletters email-subscribers allows Obje

In the Linux kernel, the following vulnerability has been resolved: Revert "NFSD: Remove the cap on number of operation

The WP Directory Kit plugin for WordPress is vulnerable to SQL Injection via the 'columns_search' parameter of the selec

The Simple User Registration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpr_admin_msg' p