2025

The IndieBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘kind’ parameter in all versio

The Telegram for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions

The Digital Marketing and Agency Templates Addons for Elementor plugin for WordPress is vulnerable to Cross-Site Request

The WP2HTML plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2

The WP Sliding Login/Dashboard Panel plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up

The Link Shield plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0

The ACF Onyx Poll plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘class’ parameter in all ver

Acer ControlCenter contains Remote Code Execution vulnerability. The program exposes a Windows Named Pipe that uses a cu

The REST API | Custom API Generator For Cross Platform And Import Export In WP plugin for WordPress is vulnerable to Pri

The Color Palette plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘hex’ parameter in all versi

The Contact Us Page – Contact People plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘style’ p

The IRM Newsroom plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'irmcalendarview' sh

The IRM Newsroom plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'irmflat' shortcode

The IRM Newsroom plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'irmeventlist' short

Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an authorize

Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network.

An improper neutralization of wildcards vulnerability in the log collection feature of Palo Alto Networks GlobalProtect™

A command injection vulnerability in Palo Alto Networks PAN-OS® enables an authenticated administrative user to perform

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypas

An incorrect privilege assignment vulnerability in Palo Alto Networks Cortex® XDR Broker VM allows an authenticated admi

An insufficient implementation of cache vulnerability in Palo Alto Networks Prisma® Access Browser enables users to bypa

Description In Spring Framework, versions 6.0.x as of 6.0.5, versions 6.1.x and 6.2.x, an application is vulnerable to

Description: VMware AVI Load Balancer contains an authenticated blind SQL Injection vulnerability. VMware has evaluated

PCSX2 is a free and open-source PlayStation 2 (PS2) emulator. A stack-based buffer overflow exists in the Kprintf_HLE fu

yangyouwang crud v1.0.0 is vulnerable to Cross Site Scripting (XSS) via the role management function.

Dell iDRAC Tools, version(s) prior to 11.3.0.0, contain(s) an Improper Access Control vulnerability. A low privileged at

Amazon Cloud Cam is a home security camera that was deprecated on December 2, 2022, is end of life, and is no longer act

User names used to access the web management interface are limited to the device identifier, which is a numerical ident

A username and password are required to authenticate to the central SinoTrack device management interface. The username

An improper validation of integrity check value vulnerability exists in AVEVA PI Connector for CygNet Versions 1.6.14

A cross-site scripting vulnerability exists in AVEVA PI Connector for CygNet Versions 1.6.14 and prior that, if exploi

AVEVA PI Data Archive products are vulnerable to an uncaught exception that, if exploited, could allow an authenticated

AVEVA PI Data Archive products are vulnerable to an uncaught exception that, if exploited, could allow an authenticate

A cross-site scripting vulnerability exists in AVEVA PI Web API version 2023 SP1 and prior that, if exploited, could al

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. All system messages in menu headings

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. Various date messages returned by `La

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. Various preferences messages are inse

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. The citizen-search-noresults-title an

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. Multiple system messages are inserted

There is an insufficient input validation vulnerability in the warehouse component of Absolute Secure Access prior to se

vantage6 is an open-source infrastructure for privacy preserving analysis. The JWT secret key in the vantage6 server is

vantage6 is an open source framework built to enable, manage and deploy privacy enhancing technologies like Federated Le

An issue has been discovered in GitLab EE affecting all versions from 12.0 before 17.10.8, 17.11 before 17.11.4, and 18.

There is a memory management vulnerability in Absolute Secure Access server versions 9.0 to 13.54. Attackers with networ

Improper input validation was discovered in UsbCoreDxe in Insyde InsydeH2O kernel 5.4 before 05.47.01, 5.5 before 05.55.

Multiple SQL injection vulnerabilities in the EuroInformation MoneticoPaiement module before 1.1.1 for PrestaShop allow

A SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla was discovered. The extension i

Buffer Overflow vulnerability in Tenda AC6 v.15.03.05.16 allows a remote attacker to cause a denial of service via the o

Dell Smart Dock Firmware, versions prior to 01.00.08.01, contain an Insertion of Sensitive Information into Log File vul

pg-promise before 11.5.5 is vulnerable to SQL Injection due to improper handling of negative numbers.