2025

There is a vulnerability in ActiveSupport if the new bytesplice method is called on a SafeBuffer with untrusted user inp

There is a denial of service vulnerability in the header parsing component of Rack.

There is a deserialization of untrusted data vulnerability in the Kredis JSON deserialization code

There is a potential DOM based cross-site scripting issue in rails-ujs which leverages the Clipboard API to target HTML

A vulnerability was found in donglight bookstore电商书城系统说明 1.0.0. It has been classified as critical. This affects the fun

A vulnerability was found in Sucms 1.0 and classified as critical. Affected by this issue is some unknown functionality

A vulnerability has been found in SEMCMS up to 4.8 and classified as critical. Affected by this vulnerability is an unkn

A vulnerability, which was classified as critical, has been found in ZeroWdd myblog 1.0. This issue affects the function

Certain Teradata account-handling code through 2024-11-04, used with SUSE Enterprise Linux Server, mismanages groups. Sp

A vulnerability classified as critical was found in ZeroWdd myblog 1.0. This vulnerability affects unknown code of the f

An issue was discovered in GitLab CE/EE affecting all versions starting from 15.5 before 17.5.5, 17.6 before 17.6.3, and

WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified

An issue was discovered in GitLab CE/EE affecting all versions starting from 17.4 prior to 17.5.5, starting from 17.6 pr

WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified

composio >=0.5.40 is vulnerable to Command Execution in composio_openai, composio_claude, and composio_julep via the han

A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been rated as critical. Affected by this

A malformed 802.15.4 packet causes a buffer overflow to occur leading to an assert and a denial of service. A watchdog r

In the Linux kernel, the following vulnerability has been resolved: soc: imx8m: Probe the SoC driver as platform driver

In the Linux kernel, the following vulnerability has been resolved: MIPS: Loongson64: DTS: Really fix PCIe port nodes f

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_socket: remove WARN_ON_ONCE on maxim

In the Linux kernel, the following vulnerability has been resolved: ACPI: x86: Add adev NULL check to acpi_quirk_skip_s

In the Linux kernel, the following vulnerability has been resolved: quota: flush quota_release_work upon quota writebac

In the Linux kernel, the following vulnerability has been resolved: drm/sti: avoid potential dereference of error point

In the Linux kernel, the following vulnerability has been resolved: drm/sti: avoid potential dereference of error point

In the Linux kernel, the following vulnerability has been resolved: drm/sti: avoid potential dereference of error point

In the Linux kernel, the following vulnerability has been resolved: btrfs: add a sanity check for btrfs root in btrfs_s

In the Linux kernel, the following vulnerability has been resolved: kunit: Fix potential null dereference in kunit_devi

In the Linux kernel, the following vulnerability has been resolved: mtd: spinand: winbond: Fix 512GW, 01GW, 01JW and 02

A vulnerability in the web-based management interface of Cisco Common Services Platform Collector (CSPC) could allow an

A vulnerability in the web-based management interface of Cisco Common Services Platform Collector (CSPC) could allow an

A vulnerability in the web-based management interface of Cisco Common Services Platform Collector (CSPC) could allow an

In the Linux kernel, the following vulnerability has been resolved: net/sched: netem: account for backlog updates from

An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar fi

A vulnerability was found in Kingsoft WPS Office 6.14.0 on macOS. It has been declared as critical. Affected by this vul

A vulnerability in certification validation routines of Cisco ThousandEyes Endpoint Agent for macOS and RoomOS could all

Multiple vulnerabilities in the web-based management interface of Cisco Crosswork Network Controller could allow an auth

The Shipping via Planzer for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘p

The PDF Flipbook, 3D Flipbook—DearFlip plugin for WordPress is vulnerable to Stored Cross-Site Scripting via outline set

The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to unauthorized modification of data due to a mis

The AdForest theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on

The MAS Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions

The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored

VMware Aria Automation contains a server-side request forgery (SSRF) vulnerability. A malicious actor with "Organization

A vulnerability has been found in VIWIS LMS 9.11 and classified as problematic. Affected by this vulnerability is an unk

The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ha_cmc_text' p

The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) plugin for

The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress is vulnerable to Sensitive Information Exposure

The Property Hive WordPress plugin before 2.1.1 does not sanitise and escape a parameter before outputting it back in th

The InfiniteWP Client plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.13.0

The Auto iFrame WordPress plugin before 2.0 does not validate and escape some of its shortcode attributes before outputt