2025

U-Office Force developed by e-Excellence has a SQL Injection vulnerability, allowing authenticated remote attacker to in

U-Office Force developed by e-Excellence has a SQL Injection vulnerability, allowing authenticated remote attacker to in

A security flaw has been discovered in rymcu forest up to de53ce79db9faa2efc4e79ce1077a302c42a1224. Impacted is the func

The Alex Reservations: Smart Restaurant Booking plugin for WordPress is vulnerable to arbitrary file uploads due to miss

The Mail Mint plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the pr

The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to PHP Object

The Better Find and Replace – AI-Powered Suggestions plugin for WordPress is vulnerable to Limited Code Injection in all

The Smart Auto Upload Images plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type valid

The Asgaros Forum plugin for WordPress is vulnerable to SQL Injection via the '$_COOKIE['asgarosforum_unread_exclude']'

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Versions 0.6.224 and

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. In versions 0.6.34 an

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Versions 8.9.0

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Versions 7.14.

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Versions 7.14.

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. In versions 7.

Insufficient validation of untrusted input in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker

Improper Authorization in Elastic Cloud Enterprise can lead to Privilege Escalation where the built-in readonly user can

A Local File Inclusion (LFI) vulnerability has been identified in tQuadra CMS 4.2.1117. The issue exists in the "/styles

IBM Db2 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) under specific configurations co

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerabili

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. In versions 4.2.

Apollo Router Core is a configurable Rust graph router written to run a federated supergraph using Apollo Federation 2.

AstrBot Project v3.5.22 contains a directory traversal vulnerability. The handler function install_plugin_upload of the

A Broken Object Level Authorization (BOLA) vulnerability was discovered in the tRPC project mutation APIs (update, delet

A cross-site request forgery (CSRF) vulnerability has been reported to affect QuLog Center. The remote attackers can the

A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker, they can then exploit

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 564 - SQL Injection: Hiberna

(conda) Constructor is a tool that enables users to create installers for conda package collections. In versions 3.12.2

The IDonate – Blood Donation, Request And Donor Management System plugin for WordPress is vulnerable to Privilege Escala

FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. In versions 17.0.2.36 and abov

Dosage is a comic strip downloader and archiver. When downloading comic images in versions 3.1 and below, Dosage constru

The LC Wizard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check in the ghl-wi

Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to traverse directories

Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to traverse directories

Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to cause a denial-of-se

Out of bounds memory access in V8 in Google Chrome prior to 141.0.7390.122 allowed a remote attacker to perform out of b

Use after free in Safe Browsing in Google Chrome prior to 141.0.7390.107 allowed a remote attacker who had compromised t

Use after free in Storage in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to execute arbitrary code vi

Heap buffer overflow in Sync in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to perform an out of boun

Out of bounds read in Media in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform out

Inappropriate implementation in Omnibox in Google Chrome on Android prior to 141.0.7390.54 allowed a remote attacker to

Heap buffer overflow in Video in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform a

Heap buffer overflow in WebGPU in Google Chrome prior to 141.0.7390.54 allowed a remote attacker who had compromised the

A flaw was found in the 3scale Developer Portal. When creating or updating an account in the Developer Portal UI it is p

Apollo Router Core is a configurable graph router written in Rust to run a federated supergraph using Apollo Federation

runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7, 1.3.2 and

A flaw was found in Rubygem MQTT. By default, the package used to not have hostname validation, resulting in possible Ma

evernote-mcp-server openBrowser Command Injection Privilege Escalation Vulnerability. This vulnerability allows local at

Heimdall Data Database Proxy Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote

runc is a CLI tool for spawning and running containers according to the OCI specification. Versions 1.0.0-rc3 through 1.