2025

cpdf through 2.8 allows stack consumption via a crafted PDF document.

The Themesflat Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the TF E Slide

The MDTF – Meta Data and Taxonomies Filter plugin for WordPress is vulnerable to SQL Injection via the 'key' attribute o

Cross-site scripting vulnerability exists in MZK-DP300N firmware versions 1.05 and earlier. If an attacker logs in to th

Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successfu

Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successfu

Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successfu

Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successfu

Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successfu

Buffer overflow vulnerability in the component driver module Impact: Successful exploitation of this vulnerability may a

Privilege escalation vulnerability in the Account module Impact: Successful exploitation of this vulnerability may affec

Vulnerability of improper access control in the home screen widget module Impact: Successful exploitation of this vulner

Startup control vulnerability in the ability module Impact: Successful exploitation of this vulnerability may cause feat

The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Information Exposure in a

The Slotti Ajanvaraus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slotti-embed-g

The Easy Form Builder – WordPress plugin form builder: contact form, survey form, payment form, and custom form builder

Vulnerability of variables not being initialized in the notification module Impact: Successful exploitation of this vuln

Instruction authentication bypass vulnerability in the Findnetwork module Impact: Successful exploitation of this vulner

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability

Vulnerability of native APIs not being implemented in the NFC service module Impact: Successful exploitation of this vul

Race condition vulnerability in the Bastet module Impact: Successful exploitation of this vulnerability may affect servi

Permission control vulnerability in the Connectivity module Impact: Successful exploitation of this vulnerability may ca

Vulnerability of improper memory address protection in the HUKS module Impact: Successful exploitation of this vulnerabi

Vulnerability of input parameters not being verified in the widget framework module Impact: Successful exploitation of t

Race condition vulnerability in the distributed notification module Impact: Successful exploitation of this vulnerabilit

Improper Input Validation vulnerability in Management Program in TXOne Networks Portable Inspector and Portable Inspecto

Dell PowerScale OneFS versions 8.2.2.x through 9.9.0.0 contain an uncontrolled resource consumption vulnerability. A rem

Vulnerability of improper authentication in the ANS system service module Impact: Successful exploitation of this vulner

Vulnerability of improper permission control in the Gallery module Impact: Successful exploitation of this vulnerability

Path traversal vulnerability in the Medialibrary module Impact: Successful exploitation of this vulnerability will affec

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability

UAF vulnerability in the device node access module Impact: Successful exploitation of this vulnerability may cause servi

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to an information disclosure vulner

When batch jobs are executed by pgAgent, a script is created in a temporary directory and then executed. In versions of

IceWarp Server 10.2.1 is vulnerable to Cross Site Scripting (XSS) via the meta parameter.

Cross Site Scripting vulnerability iPublish Media Solutions AdPortal 3.0.39 allows a remote attacker to escalate privile

Multiple functions are vulnerable to Authorization Bypass in AIMS eCrew. The issue was fixed in version JUN23 #190.

In versions 1.0.67 and lower of the Splunk App for SOAR, the Splunk documentation for that app recommended adding the `a

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ali Ali Alpha Pric

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eric McNiece EMC2

Missing Authorization vulnerability in Hermann LAHAMI Allada T-shirt Designer for Woocommerce allada-tshirt-designer-for

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Code Themes Digi S

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FilaThemes Educati

Missing Authorization vulnerability in DearHive Social Media Share Buttons | MashShare.This issue affects Social Media S

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Spencer Haws Link Whisp

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hashthemes Hash El

A vulnerability classified as critical was found in code-projects Online Book Shop 1.0. Affected by this vulnerability i

A vulnerability classified as critical has been found in code-projects Online Book Shop 1.0. Affected is an unknown func

Missing Authorization vulnerability in ThemeSupport Hide Category by User Role for WooCommerce hide-category-by-user-rol