2025

A vulnerability has been found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This vulnerability affec

A vulnerability, which was classified as problematic, was found in code-projects Traffic Offense Reporting System 1.0. T

A predefined administrative account is not documented and cannot be deactivated. This account cannot be misused from the

A vulnerability, which was classified as critical, was found in code-projects Health Center Patient Record Management Sy

A vulnerability classified as critical was found in SourceCodester Open Source Clinic Management System 1.0. This vulner

A vulnerability classified as problematic has been found in SourceCodester Student Result Management System 1.0. This af

The StageShow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘anchor’ parameter in all versio

The Developer Formatter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom CSS in all vers

The Paged Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gallery' shortcode

The WordPress Ajax Load More and Infinite Scroll plugin for WordPress is vulnerable to Stored Cross-Site Scripting via t

The Hide It plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'hideit' shortcode in all

The WP-Addpub plugin for WordPress is vulnerable to SQL Injection via the 'wp-addpub' shortcode in all versions up to, a

The Runners Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'runnerslog' shortcod

The BNS Featured Category plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bnsfc' sho

The Freemind Viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'freemind' shortc

The ESV Bible Shortcode for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's

The Knowledge Base plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'kbalert' shortcod

The WP Email Debug plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the W

The Hive Support | AI-Powered Help Desk, Live Chat & AI Chat Bot Plugin for WordPress plugin for WordPress is vulnerable

The Hive Support plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing cap

The WP Online Users Stats plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and in

The WP Online Users Stats plugin for WordPress is vulnerable to time-based SQL Injection via the ‘table_name’ parameter

Vulnerability of improper permission assignment in the note sharing module Impact: Successful exploitation of this vulne

Buffer overflow vulnerability in the DFile module Impact: Successful exploitation of this vulnerability may affect avail

Bypass vulnerability in the device management channel Impact: Successful exploitation of this vulnerability may affect s

Ability Auto Startup service vulnerability in the foundation process Impact: Successful exploitation of this vulnerabili

Deserialization vulnerability in the IPC module Impact: Successful exploitation of this vulnerability may affect availab

Authentication bypass vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may aff

Wasm exception capture vulnerability in the arkweb v8 module Impact: Successful exploitation of this vulnerability may c

Vulnerability that cards can call unauthorized APIs in the FRS process Impact: Successful exploitation of this vulnerabi

Permission bypass vulnerability in the media library module Impact: Successful exploitation of this vulnerability may af

Vulnerability of uncontrolled system resource applications in the setting module Impact: Successful exploitation of this

The Anti-Spam: Spam Protection | Block Spam Users, Comments, Forms plugin for WordPress is vulnerable to Cross-Site Requ

Resource allocation control failure vulnerability in the ArkUI framework Impact: Successful exploitation of this vulnera

A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been rated as problematic. Affe

A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as problematic. A

A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been classified as problematic.

The Art Theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'arttheme_them

The BM Content Builder plugin for WordPress is vulnerable to unauthorized modification of data to a missing capability c

The Short URL WordPress plugin through 1.6.8 does not properly sanitise and escape a parameter before using it in SQL st

A vulnerability was found in SourceCodester Student Result Management System 1.0 and classified as problematic. This iss

A vulnerability has been found in SourceCodester Student Result Management System 1.0 and classified as problematic. Thi

Cross-site request forgery vulnerability exists in surveillance cameras provided by i-PRO Co., Ltd.. If a user views a c

The Modern Events Calendar Lite plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and in

A vulnerability, which was classified as problematic, was found in SourceCodester Student Result Management System 1.0.

The wallet has an authentication bypass vulnerability that allows access to specific pages.

A vulnerability classified as critical has been found in SourceCodester Open Source Clinic Management System 1.0. Affect

A vulnerability was found in Signal App 7.41.4 on Android. It has been declared as problematic. This vulnerability affec

A vulnerability was found in SoluçõesCoop iSoluçõesWEB up to 20250516. It has been classified as problematic. This affec

SystemUI has an incorrect component protection setting, which allows access to specific information.