2025

CWE-20: Improper Input Validation vulnerability exists that could cause Denial of Service when an authenticated maliciou

CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause Denial of Service when an authenticated

In CVE-2023-25194, we announced the RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration in Kafka Co

A possible security vulnerability has been identified in Apache Kafka. This requires access to a alterConfig to the clus

A possible arbitrary file read and SSRF vulnerability has been identified in Apache Kafka Client. Apache Kafka Clients a

The Axle Demo Importer WordPress plugin through 1.0.3 does not validate files to be uploaded, which could allow authenti

The inprosysmedia-likes-dislikes-post WordPress plugin through 1.0.0 does not properly sanitise and escape a parameter b

An improper input validation discovered in Avaya Call Management System could allow an unauthorized remote command v

A vulnerability, which was classified as critical, has been found in Zend.To up to 6.10-6 Beta. This issue affects the f

A vulnerability was found in Open5GS up to 2.7.3. It has been declared as problematic. Affected by this vulnerability is

The Elementor Website Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘button_text

A vulnerability was found in Netgear EX3700 up to 1.0.0.88. It has been classified as critical. Affected is the function

The Bunny’s Print CSS plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includ

A vulnerability was found in PHPGurukul Vehicle Record Management System 1.0. It has been rated as critical. This issue

A vulnerability was found in D-Link DIR-632 FW103B08. It has been declared as critical. This vulnerability affects the f

The "RH - Real Estate WordPress Theme" theme for WordPress is vulnerable to Privilege Escalation in all versions up to,

The Abandoned Cart Pro for WooCommerce plugin contains an authenticated arbitrary file upload vulnerability due to missi

A vulnerability was found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713 and classified as critical. Affected by this

A vulnerability has been found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713 and classified as critical. Affected by

A vulnerability, which was classified as critical, was found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713. Affected

A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713. This

A vulnerability classified as critical was found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713. This vulnerability af

A vulnerability classified as critical has been found in code-projects Laundry System 1.0. This affects an unknown part

The security settings in the SAP Business One Integration Framework are not adequately checked, allowing attackers to by

SAP MDM Server allows an attacker to gain control of existing client sessions and execute certain functions without havi

SAP MDM Server Read function allows an attacker to send specially crafted packets which could trigger a memory read acce

SAP MDM Server ReadString function allows an attacker to send specially crafted packets which could trigger a memory rea

Due to a missing authorization check vulnerability in SAP S/4HANA (Enterprise Event Enablement), an attacker with access

SAP S/4HANA (Bank Account Application) does not perform necessary authorization checks. This allows an authenticated 'ap

Unprotected SAPUI5 applications allow an attacker with basic privileges to inject malicious HTML code into a webpage, wi

RFC inbound processing�does not perform necessary authorization checks for an authenticated user, resulting in escalatio

Under certain conditions, SAP Business Objects Business Intelligence Platform allows an unauthenticated attacker to enum

SAP Manage Processing Rules (For Bank Statement) allows an attacker with basic privileges to edit shared rules of any us

SAP S/4HANA Manage Central Purchase Contract does not perform necessary authorization checks for an authenticated user.

SAP Business Warehouse and SAP Plug-In Basis allows an authenticated attacker to drop arbitrary SAP database tables, pot

SAP GRC allows a non-administrative user to access and initiate transaction which could allow them to modify or control

SAP NetWeaver Visual Composer contains a Directory Traversal vulnerability caused by insufficient validation of input pa

Due to a Cross-Site Scripting vulnerability in SAP NetWeaver (ABAP Keyword Documentation), an unauthenticated attacker c

SAP BusinessObjects Business Intelligence (BI Workspace) allows an unauthenticated attacker to craft and store malicious

A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been rated as critical. Affected by this issue is the fun

A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been declared as critical. Affected by this vulnerability

A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been classified as critical. Affected is the function set

In AMD Versal Adaptive SoC devices, the lack of address validation when executing PLM runtime services through the PLM f

In AMD Versal Adaptive SoC devices, the incorrect configuration of the SSS during runtime (post-boot) cryptographic oper

A vulnerability was found in TOTOLINK T10 4.1.8cu.5207 and classified as critical. This issue affects the function setUp

A vulnerability has been found in TOTOLINK T10 4.1.8cu.5207 and classified as critical. This vulnerability affects the f

CyberData 011209 Intercom could allow an authenticated attacker to upload arbitrary files to multiple locations within

CyberData 011209 Intercom could allow an unauthenticated user to gather sensitive information through blind SQL injectio

CyberData 011209 Intercom does not properly store or protect web server admin credentials.

CyberData  011209 Intercom exposes features that could allow an unauthenticated to gain access and cause a denial-of