2025

A vulnerability was found in D-Link DCS-932L 2.18.01. It has been declared as critical. Affected by this vulnerability i

A vulnerability was found in D-Link DCS-932L 2.18.01. It has been classified as critical. Affected is the function setSy

A vulnerability was found in IdeaCMS up to 1.7 and classified as critical. This issue affects the function Article/Goods

The File Provider WordPress plugin through 1.2.3 does not have CSRF check in place when updating its settings, which cou

The File Provider WordPress plugin through 1.2.3 does not properly sanitise and escape a parameter before using it in a

kro (Kube Resource Orchestrator) 0.1.0 before 0.2.1 allows users (with permission to create or modify ResourceGraphDefin

A vulnerability classified as critical has been found in PHPGurukul Notice Board System 1.0. This affects an unknown par

A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0. It has been rated as critical. Affected by

A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0. It has been declared as critical. Affected

The Simple Contact Form Plugin for WordPress – WP Easy Contact plugin for WordPress is vulnerable to Stored Cross-Site S

Improper authorization in Smart Switch installed on non-Samsung Device prior to version 3.7.64.10 allows local attackers

Improper handling of insufficient permission in ClientProvider in Samsung Internet installed on non-Samsung Device prior

Improper handling of insufficient permission in SyncClientProvider in Samsung Internet installed on non-Samsung Device p

Out-of-bounds write in libsecimaging.camera.samsung.so prior to SMR Jun-2025 Release 1 allows local attackers to write o

Out-of-bound read in libsecimaging.camera.samsung.so prior to SMR Feb-2025 Release 1 allows local attackers to read out-

Improper export of Android application components in Bluetooth prior to SMR Jun-2025 Release 1 allows local attackers to

Improper logging in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to get a hmac

Out-of-bounds read in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to read out

Improper access control in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to get

Improper access control in ScreenCapture for Galaxy Watch prior to SMR Jun-2025 Release 1 allows local attackers to take

Improper privilege management in ThemeManager prior to SMR Jun-2025 Release 1 allows local privileged attackers to reuse

Incorrect default permission in Samsung Cloud for Galaxy Watch prior to SMR Jun-2025 Release 1 allows local attackers to

Improper access control in AudioService prior to SMR Jun-2025 Release 1 allows local attackers to access sensitive infor

An improper verification of a loaded library in Zscaler Client Connector on Mac < 4.2.0.241 may allow a local attacker t

A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0. It has been classified as critical. Affecte

A vulnerability was found in PHPGurukul Teacher Subject Allocation Management System 1.0 and classified as critical. Thi

A vulnerability has been found in PHPGurukul Teacher Subject Allocation Management System 1.0 and classified as critical

A vulnerability, which was classified as critical, was found in PHPGurukul Teacher Subject Allocation Management System

The Campus Directory – Faculty, Staff & Student Directory Plugin for WordPress plugin for WordPress is vulnerable to Sto

The Employee Directory – Staff Listing & Team Directory Plugin for WordPress plugin for WordPress is vulnerable to Store

A vulnerability, which was classified as critical, has been found in PHPGurukul Rail Pass Management System 1.0. Affecte

A vulnerability classified as critical was found in PHPGurukul Rail Pass Management System 1.0. Affected by this vulnera

A vulnerability was found in ChestnutCMS up to 15.1. It has been declared as critical. This vulnerability affects unknow

billboard.js before 3.15.1 was discovered to contain a prototype pollution via the function generate, which could allow

A vulnerability was found in FreeFloat FTP Server 1.0. It has been classified as critical. This affects an unknown part

A vulnerability was found in FreeFloat FTP Server 1.0 and classified as critical. Affected by this issue is some unknown

A vulnerability has been found in FreeFloat FTP Server 1.0 and classified as critical. Affected by this vulnerability is

A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. Affected is an unknown functio

A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0. This issue affects some u

A vulnerability classified as critical was found in PHPGurukul Daily Expense Tracker System 1.1. This vulnerability affe

A vulnerability classified as problematic has been found in aaluoxiang oa_system up to 5b445a6227b51cee287bd0c7c33ed94b8

A vulnerability was found in aaluoxiang oa_system up to 5b445a6227b51cee287bd0c7c33ed94b801a82a5. It has been rated as p

A vulnerability was found in TOTOLINK X2000R 1.0.0-B20230726.1108. It has been declared as problematic. Affected by this

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Versions 1.46.0 through 2.1.6 have an issue that affects AES-

A vulnerability was found in TOTOLINK X2000R 1.0.0-B20230726.1108. It has been classified as problematic. Affected is an

A vulnerability was found in Tenda RX3 16.03.13.11_multi_TDE01. It has been rated as critical. This issue affects the fu

DataEase is an open source business intelligence and data visualization tool. Versions prior to version 2.10.10 have a f

DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.10, secret verificat

InvenTree is an Open Source Inventory Management System. Prior to version 0.17.13, the skip field in the built-in `label

DataEase is an open source business intelligence and data visualization tool. A bypass of CVE-2025-46566's patch exists