2025

Deserialization of Untrusted Data vulnerability in Scott Reilly Preserve Code Formatting preserve-code-formatting allows

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Path Traversal: '.../...//' vulnerability in CocoBasic Blanka - One Page WordPress Theme blanka-wp allows PHP Local File

Cross-Site Request Forgery (CSRF) vulnerability in ZIPANG Simple Stripe simple-stripe allows Stored XSS.This issue affec

Cross-Site Request Forgery (CSRF) vulnerability in andriassundskard wpNamedUsers wpnamedusers allows Stored XSS.This iss

Cross-Site Request Forgery (CSRF) vulnerability in Norbert Slick Google Map slick-google-map allows Stored XSS.This issu

Cross-Site Request Forgery (CSRF) vulnerability in nitinmaurya12 Block Country block-country allows Stored XSS.This issu

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Path Traversal: '.../...//' vulnerability in Mikado-Themes Wanderland wanderland allows PHP Local File Inclusion.This is

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bingu replyMail re

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in axiomthemes smart

An argument injection vulnerability exists in the affected product that could allow an attacker to execute arbitrary cod

Improper preservation of permissions in Elastic Defend on Windows hosts can lead to arbitrary files on the system being

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Proliz Soft

Improper authentication in the API authentication middleware of HCL DevOps Loop allows authentication tokens to be accep

Improper handling of the authentication token in the Amazon WorkSpaces client for Linux, versions 2023.0 through 2024.8,

A Stored Cross-Site Scripting (XSS) vulnerability in the chat functionality of the SelfBest platform 2023.3 allows authe

An arbitrary code execution vulnerability exists in multiple WSO2 products due to insufficient restrictions in the Graal

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.

An arbitrary file upload vulnerability exists in multiple WSO2 products due to insufficient validation of uploaded conte

DWSurvey 6.14.0 is vulnerable to Incorrect Access Control. When deleting a questionnaire, replacing the questionnaire ID

Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user with known password can run comma

Dell Command Monitor (DCM), versions prior to 10.12.3.28, contains an Execution with Unnecessary Privileges vulnerabilit

Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user with known password can run comma

A vulnerability in the RADIUS setting Reject RADIUS requests from clients with repeated failures on Cisco Identity Servi

An Incorrect Access Control vulnerability in the user management component of ZwiiCMS up to v13.6.07 allows a remote, au

An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. NFKC normalization in Python is s

MDaemon Mail Server 23.5.2 validates SPF, DKIM, and DMARC using the email enclosed in angle brackets (<>) in the From: h

A denial of service vulnerability exists in the lasso_node_init_from_message_with_format functionality of Entr&#39;ouver

A denial of service vulnerability exists in the g_assert_not_reached functionality of Entr&#39;ouvert Lasso 2.5.1 and 2.

A denial of service vulnerability exists in the lasso_provider_verify_saml_signature functionality of Entr&#39;ouvert La

The Premium Portfolio Features for Phlox theme plugin for WordPress is vulnerable to Local File Inclusion in all version

A flaw was found in Red Hat Satellite (Foreman component). This vulnerability allows an authenticated user with edit_set

The Document Embedder – Embed PDFs, Word, Excel, and Other Files plugin for WordPress is vulnerable to unauthorized acce

The File Manager for Google Drive – Integrate Google Drive with WordPress plugin for WordPress is vulnerable to sensitiv

Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary URL

Use of insufficiently random value of secretKey in Smart Switch prior to version 3.7.68.6 allows adjacent attackers to a

The The Events Calendar plugin for WordPress is vulnerable to blind SQL Injection via the 's' parameter in versions 6.15

Cursor is a code editor built for programming with AI. In versions 1.7.23 and below, a logic bug allows a malicious agen

Cursor is a code editor built for programming with AI. In versions and below, a vulnerability in the Cursor CLI Beta all

Cursor is a code editor built for programming with AI. In versions 1.7.44 and below, various NTFS path quirks allow a pr

Cursor is a code editor built for programming with AI. In versions 1.7.52 and below, manipulating internal settings may

Cursor is a code editor built for programming with AI. In versions 1.7.28 and below, an input validation flaw in Cursor'

CVE-2025-59595 is an internally discovered denial of service vulnerability in versions of Secure Access prior to 14.12.

Redis is an open source, in-memory database that persists on disk. In versions 8.2.0 and above, a user can run the XACKD

Xibo is an open source digital signage platform with a web content management system (CMS). Versions 4.3.0 and below con

Tencent Docs Desktop 3.9.20 and earlier suffers from Missing SSL Certificate Validation in the update component.