2025

An unauthenticated remote command execution vulnerability exists in Samsung WLAN AP WEA453e firmware prior to version 5.

The Restrict File Access plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and inc

The Companion Auto Update plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘update_delay_days’

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7, FortiOS

The improper default setting in JiranSoft CrossEditor4 on Windows, Linux, Unix (API modules) potentaily allows Stored XS

Vulnerabilities* in ActADUR local server product, developed and maintained by ProTNS, allows Remote Code Inclusion on ho

The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Testimonial Custom Fie

The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder plugin for WordPress is vulnerab

The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder plugin for WordPress is vulnerab

The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder plugin for WordPress is vulnerab

The Alone – Charity Multipurpose Non-profit WordPress Theme theme for WordPress is vulnerable to arbitrary file uploads

The Alone – Charity Multipurpose Non-profit WordPress Theme theme for WordPress is vulnerable to arbitrary file deletion

A path traversal vulnerability in the file_upload-cgi CGI program of Zyxel NWA50AX PRO firmware version 7.10(ACGE.2) and

The timelineofficial/Time-Line- repository contains the source code for the TIME LINE website. A vulnerability was found

pyload is an open-source Download Manager written in pure Python. An unsafe JavaScript evaluation vulnerability in pyLoa

Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.12.0 and prior to

Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.0.0 and prior to

Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.0.0 and prior to

Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.0.0 and prior to

DRACOON is a file sharing service, and the DRACOON Branding Service allows customers to customize their DRACOON interfac

XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) int

XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) int

Caido is a web security auditing toolkit. A reflected cross-site scripting (XSS) vulnerability was discovered in Caido’s

LaRecipe is an application that allows users to create documentation with Markdown inside a Laravel app. Versions prior

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to version 0.24.3, an unauthenticated preview deplo

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cro

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Versions prior

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cro

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. An Open Redirec

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cro

Nix is a package manager for Linux and other Unix systems. Builds with Nix 2.30.0 on macOS were executed with elevated p

GitHub Kanban MCP Server is a Model Context Protocol (MCP) server for managing GitHub issues in Kanban board format and

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.12.14, the Python par

Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Startin

MeterSphere is an open source continuous testing platform. Prior to version 3.6.5-lts, the sortField parameter in certai

The Job Iteration API is an an extension for ActiveJob that make jobs interruptible and resumable Versions prior to 1.11

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.

A vulnerability was found in YiJiuSmile kkFileViewOfficeEdit up to 5fbc57c48e8fe6c1b91e0e7995e2d59615f37abd. It has been

A vulnerability was found in YiJiuSmile kkFileViewOfficeEdit up to 5fbc57c48e8fe6c1b91e0e7995e2d59615f37abd and classifi

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-0

Tenda CP3 Pro Firmware V22.5.4.93 contains a hardcoded root password hash in the /etc/passwd file and /etc/passwd-. An a

A vulnerability has been found in YiJiuSmile kkFileViewOfficeEdit up to 5fbc57c48e8fe6c1b91e0e7995e2d59615f37abd and cla

A vulnerability, which was classified as critical, was found in YiJiuSmile kkFileViewOfficeEdit up to 5fbc57c48e8fe6c1b9

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the lgid parameter at SEMCMS_Products.php.

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMS_Products.php.

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMS_InquiryView.php.

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the lgid parameter at SEMCMS_Link.php.

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMS_Link.php.