2025

NVIDIA Display Driver for Linux and Windows contains a vulnerability in the kernel mode driver, where an attacker could

NVIDIA Installer for Windows contains a vulnerability where an attacker may be able to escalate privileges. A successful

A vulnerability, which was classified as critical, has been found in projectworlds Online Admission System 1.0. This iss

A vulnerability classified as critical was found in SourceCodester Online Hotel Reservation System 1.0. This vulnerabili

A vulnerability classified as critical has been found in SourceCodester Online Hotel Reservation System 1.0. This affect

A vulnerability was found in code-projects Wazifa System 1.0. It has been rated as critical. Affected by this issue is s

The Brave Conversion Engine (PRO) plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and

The Ocean Social Sharing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via social icon titles in all

A vulnerability was found in code-projects Wazifa System 1.0. It has been declared as critical. Affected by this vulnera

The Ultimate Addons for Elementor (Formerly Elementor Header & Footer Builder) plugin for WordPress is vulnerable to una

The BitFire Security – Firewall, WAF, Bot/Spam Blocker, Login Security plugin for WordPress is vulnerable to Sensitive I

A vulnerability was found in code-projects Online Farm System 1.0. It has been classified as critical. Affected is an un

The Image Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and includ

The Mmm Unity Loader plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘attributes’ parameter in

The Magic Edge – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘height’ parameter in al

The All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier plugin for WordPress is vulnerable to Refl

The Custom Word Cloud plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘angle’ parameter in all

The Medical Addon for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Typew

The WP CTA – Call To Action Plugin, Sticky CTA, Sticky Buttons plugin for WordPress is vulnerable to unauthorized modifi

The SEO Metrics plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization checks in both t

The ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization plugin for WordPress is vulnerable to Stored Cross-

The 360 Photo Spheres plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sphere' shortc

The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's TypeOut T

The Woffice Core plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation

Partner Software's Partner Software application and Partner Web application allows an authenticated user to add notes on

Partner Software's Partner Software Product and corresponding Partner Web application use the same default username and

Partner Software's Partner Software application and Partner Web application do not sanitize files uploaded on the "repor

Copyparty is a portable file server. Versions prior to 1.18.9, the filter parameter for the "Recent Uploads" page allows

Files is a module for managing files inside spaces and user profiles. In versions 0.16.9 and below, Files does not have

Files is a module for managing files inside spaces and user profiles. In versions 0.16.9 and below, the File Move functi

Nest is a framework for building scalable Node.js server-side applications. In versions 0.2.0 and below, a critical Remo

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. When debugging is enabled for Himmelbla

Traefik is an HTTP reverse proxy and load balancer. In versions 2.11.27 and below, 3.0.0 through 3.4.4 and 3.5.0-rc1, a

Cursor is a code editor built for programming with AI. In versions 1.2.4 and below, attackers can achieve remote and per

Cursor is a code editor built for programming with AI. In versions 1.17 through 1.2, there is a UI information disclosur

LocalSend is an open-source app to securely share files and messages with nearby devices over local networks without nee

1Panel is a web interface and MCP Server that manages websites, files, containers, databases, and LLMs on a Linux server

Cursor is a code editor built for programming with AI. In versions below 1.3, Mermaid (which is used to render diagrams)

Cursor is a code editor built for programming with AI. In versions below 1.3, an attacker can bypass the allow list in a

A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as problematic. Affected by this vulnerability is

A path traversal vulnerability exists in the Netgear SPH200D Skype phone firmware versions <= 1.0.4.80 in its embedded w

A directory traversal vulnerability exists in Linksys router's web interface (tested on the E1500 model firmware version

An authenticated OS command injection vulnerability exists in Netgear routers (tested on the DGN1000B model firmware ver

An authenticated OS command injection vulnerability exists in Netgear routers (tested on the DGN2200B model) firmware ve

An authenticated OS command injection vulnerability exists in various D-Link routers (tested on DIR-615H1 running firmwa

An authenticated OS command injection vulnerability exists in various Linksys router models (tested on WRT160Nv2) runnin

A stack-based buffer overflow vulnerability exists in Synactis PDF In-The-Box ActiveX control (PDF_IN_1.ocx), specifical

An unauthenticated arbitrary file upload vulnerability exists in Havalite CMS version 1.1.7 (and possibly earlier) in th

A remote command execution vulnerability exists in ZPanel version 10.0.0.2 in its htpasswd module. When creating .htacce

A remote PHP code execution vulnerability exists in InstantCMS version 1.6 and earlier due to unsafe use of eval() withi