2025

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/hyper-v: Skip non-canonical addresses duri

The WPLMS theme for WordPress is vulnerable to Privilege Escalation in versions 1.5.2 to 1.8.4.1 via the 'wp_ajax_import

The Work The Flow File Upload plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type vali

A vulnerability, which was classified as problematic, was found in PHPGurukul Apartment Visitors Management System 1.0.

A vulnerability, which was classified as problematic, has been found in PHPGurukul Apartment Visitors Management System

The WP Mobile Detector plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation

The GI-Media Library plugin for WordPress is vulnerable to Directory Traversal in versions before 3.0 via the 'fileid' p

The WPshop 2 – E-Commerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validati

The Simple Backup plugin for WordPress is vulnerable to Arbitrary File Download in versions up to, and including, 2.7.10

The Subscribe to Comments for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.1.2 vi

The Front End Editor plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation vi

The ThemeREX Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versio

In the Linux kernel, the following vulnerability has been resolved: net/sched: Always pass notifications when child cla

The Vchasno Kasa plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on

The Vchasno Kasa plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on th

An incorrect authorisation check in the the 'plant transfer' function of the Growatt cloud service allowed a malicous at

The Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms plugin for WordPress is vulnerable

The Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms plugin for WordPress is vulnerable to

The Avishi WP PayPal Payment Button plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up

The Partnerský systém Martinus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'marti

The Temporarily Hidden Content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'temph

The Live Stream Badger plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'livestream' s

The EPay.bg Payments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'epay' shortcode

In One Identity OneLogin before 2025.2.0, the SQL connection "application name" is set based on the value of an untruste

In wolfSSL release 5.8.2 blinding support is turned on by default for Curve25519 in applicable builds. The blinding conf

A certificate verification error in wolfSSL when building with the WOLFSSL_SYS_CA_CERTS and WOLFSSL_APPLE_NATIVE_CERT_VA

In the OpenSSL compatibility layer implementation, the function RAND_poll() was not behaving as expected and leading to

An incomplete fix has been identified for CVE-2025-23084 in Node.js, specifically affecting Windows device names like CO

The V8 release used in Node.js v24.0.0 has changed how string hashes are computed using rapidhash. This implementation r

A vulnerability classified as critical was found in code-projects Food Ordering Review System 1.0. This vulnerability af

A vulnerability, which was classified as critical, has been found in Tenda FH451 1.0.0.9. This issue affects the functio

A vulnerability classified as critical was found in Tenda FH451 1.0.0.9. This vulnerability affects the function fromSaf

StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Add A New Student module

StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Add A New Course module.

MRCMS v3.1.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/group/save.do

A vulnerability classified as critical has been found in Tenda FH451 1.0.0.9. This affects the function fromPptpUserSett

A vulnerability was found in descreekert wx-discuz up to 12bd4745c63ec203cb32119bf77ead4a923bf277. It has been classifie

qBittorrent before 5.1.2 does not prevent access to a local file that is referenced in a link URL. This affects rsswidge

An issue in Perplexity AI GPT-4 v.2.51.0 allows a remote attacker to obtain sensitive information via the token componen

StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Add A New Teacher module

A vulnerability was found in PHPGurukul Complaint Management System 2.0 and classified as problematic. Affected by this

A vulnerability has been found in BossSoft CRM 6.0 and classified as critical. Affected by this vulnerability is an unkn

A vulnerability classified as problematic was found in cgpandey hotelmis up to c572198e6c4780fccc63b1d3e8f3f72f825fc94e.

A vulnerability classified as critical has been found in Beijing Shenzhou Shihan Technology Multimedia Integrated Busine

CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23, when the DMZ proxy feature is not used, mishandles AS2 validation and

agorum Software GmbH Agorum core open v11.9.2 & v11.10.1 was discovered to contain a reflected cross-site scripting (XSS

A Server-Side Request Forgery (SSRF) in the component TunnelServlet of agorum Software GmbH Agorum core open v11.9.2 & v

StudentManage v1.0 was discovered to contain a SQL injection vulnerability via the component /admin/adminStudentUrl.

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.4 uses a web

A vulnerability was found in GPAC up to 2.4. It has been rated as problematic. Affected by this issue is the function gf