2025

jose v6.0.10 was discovered to contain weak encryption. NOTE: this is disputed by a third party because the claim of "do

CSC Pay Mobile App 2.19.4 (fixed in version 2.20.0) contains a vulnerability allowing users to bypass payment authorizat

Hangzhou Shunwang Rentdrv2 before 2024-12-24 allows local users to terminate EDR processes and possibly have unspecified

CRLF Injection vulnerability in Limesurvey v2.65.1+170522.  This vulnerability could allow a remote attacker to inject a

SQL Injection vulnerability in Limesurvey v2.65.1+170522. This vulnerability allows an attacker to retrieve, create, upd

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The

The Sina Extension for Elementor (Header Builder, Footer Builter, Theme Builder, Slider, Gallery, Form, Modal, Data Tabl

The BlockSpare: Gutenberg Blocks & Patterns for Blogs, Magazines, Business Sites – Post Grids, Sliders, Carousels, Count

A vulnerability was found in code-projects Online Medicine Guide 1.0 and classified as critical. Affected by this issue

A null pointer dereference vulnerability exists in the IOMap64.sys driver of ASUS AI Suite 3. The vulnerability can be t

A vulnerability has been found in code-projects Online Medicine Guide 1.0 and classified as critical. Affected by this v

A vulnerability, which was classified as critical, was found in code-projects Online Medicine Guide 1.0. Affected is an

A vulnerability, which was classified as critical, has been found in code-projects Wazifa System 1.0. This issue affects

A vulnerability classified as critical was found in code-projects Wazifa System 1.0. This vulnerability affects unknown

A vulnerability classified as critical has been found in code-projects Kitchen Treasure 1.0. This affects an unknown par

The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPre

It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts

A vulnerability was found in projectworlds Online Admission System 1.0. It has been rated as critical. Affected by this

The SureForms WordPress plugin before 1.7.2 does not sanitise and escape a parameter before outputting it back in the p

LiteSpeed QUIC (LSQUIC) Library before 4.3.1 has an lsquic_engine_packet_in memory leak.

In bootloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of

A vulnerability was found in code-projects Online Movie Streaming 1.0. It has been declared as critical. Affected by thi

The Stratum – Elementor Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Advan

The Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Str

The BerqWP – Automated All-In-One Page Speed Optimization for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript p

The IDonate – Blood Donation, Request And Donor Management System plugin for WordPress is vulnerable to unauthorized acc

A vulnerability was found in code-projects Online Movie Streaming 1.0. It has been classified as critical. Affected is a

A vulnerability was found in code-projects Document Management System 1.0 and classified as critical. This issue affects

The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via authentication bypass in all

In Sipwise rtpengine before 13.4.1.1, an origin-validation error in the endpoint-learning logic of the media-relay core

Quantum SuperLoader 3 V94.0 005E.0h devices allow attackers to access the hardcoded fa account because there are only 65

The Service Finder SMS System plugin for WordPress is vulnerable to privilege escalation via account takeover in all ver

A vulnerability has been found in PHPGurukul Boat Booking System 1.0 and classified as critical. This vulnerability affe

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the

pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is disputed by the Supplier because the key length i

NVIDIA Omniverse Launcher for Windows and Linux contains a vulnerability in the launcher logs, where a user could cause

A vulnerability has been identified in the Linux kernel's ksmbd component (kernel SMB/CIFS server). A security control d

The affected products expose an unauthenticated Telnet-based command line interface that could allow an attacker to modi

Archer 6.11.00204.10014 allows attackers to execute arbitrary code via crafted system inputs that would be exported into

jwt v5.4.3 was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key lengths a

php-jwt v6.11.0 was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key leng

A vulnerability was discovered in the storage policy for certain sets of encryption keys in the HPE Telco Network Functi

A vulnerability was discovered in the storage policy for certain sets of authentication keys in the HPE Telco Network Fu

A vulnerability was discovered in the storage policy for certain sets of sensitive credential information in the HPE Tel