2025

A vulnerability classified as critical has been found in slackero phpwcms up to 1.9.45/1.10.8. Affected is the function

A vulnerability was found in slackero phpwcms up to 1.9.45/1.10.8. It has been rated as critical. This issue affects the

Foxcms v1.25 has a SQL time injection in the $_POST['dbname'] parameter of installdb.php.

An arbitrary file upload vulnerability in the component /upload/GoodsCategory/image of erupt v1.12.19 allows attackers t

A vulnerability was detected in slackero phpwcms up to 1.9.45/1.10.8. The impacted element is an unknown function of the

A vulnerability was found in Netgear WNR614 1.1.0.28_1.0.1WW. It has been classified as critical. This affects an unknow

Allows arbitrary filesystem writes outside the extraction directory during extraction with filter="data". You are affe

When using a TarFile.errorlevel = 0 and extracting with a filter the documented behavior is that any filtered members wo

Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the

Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the

Allows modifying some file metadata (e.g. last modified) with filter="data" or file permissions (chmod) with filter="tar

The Music Player for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘album_buy_url’

The Profile Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's user_meta and com

The Popup Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘popupID' parameter in all ver

A vulnerability was found in Baison Channel Middleware Product 2.0.1 and classified as critical. Affected by this issue

A vulnerability has been found in D-Link DI-500WF-WT up to 20250511 and classified as critical. Affected by this vulnera

The Shared Files – Frontend File Upload Form & Secure File Sharing plugin for WordPress is vulnerable to Stored Cross-Si

A directory traversal vulnerability exists in the PVMP package unpacking functionality of Parallels Desktop for Mac vers

A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (b

A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (b

A privilege escalation vulnerability exists in the virtual machine archive restoration functionality of Parallels Deskto

The WP Plugin Info Card plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘containerid’ paramete

The Ultimate Gift Cards for WooCommerce plugin for WordPress is vulnerable to boolean-based SQL Injection via the 'defau

The Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site S

The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress is vulner

Incorrect default permissions issue in PC Time Tracer prior to 5.2. If exploited, arbitrary code may be executed with SY

Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in TimeWorks 10.0 to 10.3. I

Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

The Post Slider and Post Carousel with Post Vertical Scrolling Widget WordPress plugin before 3.2.10 does not validate

The FancyBox for WordPress plugin before 3.3.6 does not escape captions and titles attributes before using them to popul

The Newsletter WordPress plugin before 8.8.2 does not sanitise and escape some of its Subscription settings, which coul

In cplog service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial

In cplog service, there is a possible system crash due to null pointer dereference. This could lead to local denial of s

In engineermode service, there is a possible command injection due to improper input validation. This could lead to loca

Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.

memory corruption while processing IOCTL commands, when the buffer in write loopback mode is accessed after being freed.

Transient DOS while processing the tone measurement response buffer when the response buffer is out of range.

Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.

Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC.

Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

Transient DOS while processing the EHT operation IE in the received beacon frame.

Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.

Information disclosure may occur while processing goodbye RTCP packet from network.

Information disclosure may occur while decoding the RTP packet with invalid header extension from network.

Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing so

Memory corruption may occur while processing the OIS packet parser.

Memory corruption while handling test pattern generator IOCTL command.

Memory corruption while processing I2C settings in Camera driver.

Memory corruption while processing IOCTL command to handle buffers associated with a session.

Memory corruption may occur while processing voice call registration with user.