2025

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause apps crash through type confusion.

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause apps crash through type confusion.

In the Linux kernel, the following vulnerability has been resolved: can: bcm: add locking for bcm_op runtime updates T

In the Linux kernel, the following vulnerability has been resolved: can: bcm: add missing rcu read protection for procf

In the moPS App through 1.8.618, all users can access administrative API endpoints without additional authentication, re

A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. Th

A vulnerability, which was classified as critical, has been found in Tenda AC9 15.03.02.13. Affected by this issue is th

A vulnerability classified as critical was found in PHPGurukul Employee Record Management System 1.3. Affected by this v

A vulnerability classified as critical has been found in PHPGurukul Employee Record Management System 1.3. Affected is a

A vulnerability was found in Tenda AC9 15.03.02.13. It has been rated as critical. This issue affects the function formS

Skyvern through 0.1.85 is vulnerable to server-side template injection (SSTI) in the Prompt field of workflow blocks suc

The WpEvently plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in all versions

The Social Sharing Plugin – Sassy Social Share plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via

The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for Wo

The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for Wo

The LTL Freight Quotes – Freightview Edition, LTL Freight Quotes – Daylight Edition and LTL Freight Quotes – Day & Ross

Due to a mistake in libcurl's WebSocket code, a malicious server can send a particularly crafted packet which makes libc

The Profiler – What Slowing Down Your WP plugin for WordPress is vulnerable to unauthorized modification of data due to

Missing Authorization vulnerability in Christiaan Pieterse MaxiBlocks maxi-blocks allows Privilege Escalation.This issue

Jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Pr

Kafbat UI is a web user interface for managing Apache Kafka clusters. An unsafe deserialization vulnerability in version

A vulnerability was found in Tenda AC8 16.03.34.09. It has been declared as critical. Affected by this vulnerability is

A vulnerability was found in Tenda AC8 16.03.34.09. It has been classified as critical. Affected is the function fromSet

A vulnerability was found in code-projects Laundry System 1.0 and classified as problematic. This issue affects some unk

A vulnerability has been found in code-projects Laundry System 1.0 and classified as problematic. This vulnerability aff

A vulnerability, which was classified as critical, was found in Tenda AC5 1.0/15.03.06.47. This affects the function fro

A vulnerability, which was classified as critical, has been found in Tenda AC5 15.03.06.47. Affected by this issue is th

Sante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allo

Action1 Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attac

2BrightSparks SyncBackFree Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local atta

GIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers t

Allegra extractFileFromZip Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote att

70mai A510 Use of Default Password Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attac

A vulnerability, which was classified as critical, was found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. Affected is an

A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. This issue

A vulnerability classified as critical was found in TOTOLINK X15 1.0.0-B20230714.1105. This vulnerability affects unknow

A vulnerability classified as critical has been found in TOTOLINK X15 1.0.0-B20230714.1105. This affects an unknown part

SpiceDB is an open source database for storing and querying fine-grained authorization data. Prior to version 1.44.2, on

CoreDNS is a DNS server that chains plugins. In versions prior to 1.12.2, a Denial of Service (DoS) vulnerability exists

A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been rated as critical. Affected by this issue is

A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. Affected by this vulne

A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been classified as critical. Affected is an unkno

Huawei EG8141A5 devices through V5R019C00S100, EG8145V5 devices through V5R019C00S100, and EG8145V5-V2 devices through V

A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This issue affects some unkno

A vulnerability has been found in PHPGurukul Employee Record Management System 1.3 and classified as critical. This vuln

A vulnerability, which was classified as critical, was found in PHPGurukul Employee Record Management System 1.3. This a

WOLFBOX Level 2 EV Charger Management Card Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerabilit

WOLFBOX Level 2 EV Charger tuya_svc_devos_activate_result_parse Heap-based Buffer Overflow Remote Code Execution Vulnera

WOLFBOX Level 2 EV Charger BLE Encryption Keys Uninitialized Variable Authentication Bypass Vulnerability. This vulnerab

WOLFBOX Level 2 EV Charger LAN OTA Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allo