2025

Absolute Path Traversal in Samsung DMS(Data Management Server) allows authenticated attacker (Administrator) to read sen

Deserialization of Untrusted Data in Samsung DMS(Data Management Server) allows attackers to execute arbitrary code via

An execution after redirect in Samsung DMS(Data Management Server) allows attackers to execute limited functions without

The Elementor Website Builder – More Than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Sc

The Brizy – Page Builder plugin for WordPress is vulnerable to limited file uploads due to missing authorization on proc

The Elementor Website Builder – More Than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Sc

The StreamWeasels YouTube Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's

The StreamWeasels Kick Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'd

The StreamWeasels Twitch Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's

An authenticated, read-only user can upload a file and perform a directory traversal to have the uploaded file placed in

An API endpoint that should be limited to web application administrators is hidden from, but accessible by, lower-level

An authenticated, read-only user can kill any processes running on the Xormon Original virtual appliance as the lpar2rrd

An API endpoint that should be limited to web application administrators is hidden from, but accessible by, lower-level

An API endpoint that should be limited to web application administrators is hidden from, but accessible by, lower-level

Polkadot Frontier is an Ethereum and EVM compatibility layer for Polkadot and Substrate. There are various account addre

RevelaCode is an AI-powered faith-tech project that decodes biblical verses, prophecies and global events into accessibl

Polkadot Frontier is an Ethereum and EVM compatibility layer for Polkadot and Substrate. The extrinsic note_min_gas_pric

Polkadot Frontier is an Ethereum and EVM compatibility layer for Polkadot and Substrate. In versions prior to commit 36f

copyparty is a portable file server. In versions up to and including versions 1.18.4, an unauthenticated attacker is abl

A SAML library not dependent on any frameworks that runs in Node. In version 5.0.1, Node-SAML loads the assertion from t

Improper session invalidation in the component /carrental/update-password.php of PHPGurukul Car Rental Project v3.0 allo

Improper session invalidation in the component /crm/change-password.php of PHPGurukul Online Course Registration v3.1 al

An authenticated remote code execution vulnerability in PowerStick Wave Dual-Band Wifi Extender V1.0 allows an attacker

A vulnerability was found in the netavark package, a network stack for containers used with Podman. Due to dns.podman se

There is a defect in the CPython “tarfile” module affecting the “TarFile” extraction and entry enumeration APIs. The tar

Improper session invalidation in the component /bbdms/change-password.php of PHPGurukul Blood Bank & Donor Management Sy

Improper session invalidation in the component /crm/change-password.php of PHPGurukul Small CRM v3.0 allows attackers to

A stored XSS vulnerability in No Boss Testimonials component 1.0.0-3.0.0 and 4.0.0-4.0.2 for Joomla was discovered.

A stored XSS vulnerability in CommentBox component 1.0.0-1.1.0 for Joomla was discovered.

Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allo

Improper session invalidation in the component /banker/change-password.php of PHPGurukul Bank Locker Management System v

Improper session invalidation in the component /srms/change-password.php of PHPGurukul Student Result Management System

Improper session invalidation in the component /library/change-password.php of PHPGurukul Online Library Management Syst

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This

DLL hijacking of all PE32 executables when run on Windows for ARM64 CPU architecture. This allows an attacker to execute

In JetBrains TeamCity before 2025.07 password exposure was possible via command line in the "hg pull" command

In JetBrains TeamCity before 2025.07 user credentials were stored in plain text in memory snapshots

In JetBrains TeamCity before 2025.07 a CSRF was possible on GraphQL endpoint

In JetBrains TeamCity before 2025.07 password reset and email verification tokens were using weak hashing algorithms

In JetBrains TeamCity before 2025.07 reflected XSS was possible on the agentpushPreset page

In JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via VCS configuration

In JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via snapshot dependenc

In JetBrains TeamCity before 2025.07 path traversal was possible via plugin unpacking on Windows

In JetBrains TeamCity before 2025.07 privilege escalation was possible due to incorrect directory permissions

In JetBrains TeamCity before 2025.07 a CSRF was possible in external OAuth login integration

In JetBrains TeamCity before 2025.07 a CSRF was possible in GitHub App connection flow

In JetBrains YouTrack before 2025.2.86935, 2025.2.87167, 2025.3.87341, 2025.3.87344 improper iframe configuration in

Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Car Washing Management System v

Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Doctor Appointment Management S

Improper session invalidation in the component /elms/emp-changepassword.php of PHPGurukul Student Result Management Syst