2025

Input provided in comment section of Konsola Proget is not sanitized correctly, allowing a high-privileged user to perfo

A low-privileged user can access information about profiles created in Proget MDM (Mobile Device Management), which cont

In Proget MDM, a low-privileged user can access information about changes contained in backups of all devices managed by

In Proget MDM, a low-privileged user can retrieve passwords for managed devices and subsequently use functionalities res

The Glossary by WPPedia – Best Glossary plugin for WordPress plugin for WordPress is vulnerable to PHP Object Injection

The Slim SEO – Fast & Automated WordPress SEO Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting v

The Animated Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'auto-downloader

The DPEPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'dpe' shortcode in all v

The WP YouTube Video Optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ib_yo

The Splitit plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on

There are several scripts in the web interface that are accessible via undocumented hard-coded credentials. The scripts

The `/etc/passwd` and `/etc/shadow` files reveal hard-coded password hashes for the operating system "root" user. The cr

Spring Security Aspects may not correctly locate method security annotations on private methods. This can cause an autho

The Raisely Donation Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's raisely_don

The Network Posts Extended plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘post_height’ param

Several OS command injection vulnerabilities exist in the device firmware in the /var/salia/mqtt.php script. By publishi

The devices do not implement any authentication for the web interface or the MQTT server. An attacker who has network ac

A low-privileged user is able to obtain information about tasks executed on devices controlled by Proget MDM (Mobile Dev

The Affiliate Sales in Google Analytics and other tools plugin for WordPress is vulnerable to Open Redirect in all versi

Argument injection in special agent configuration in Checkmk <2.4.0p1, <2.3.0p32, <2.2.0p42 and 2.1.0 allows authenticat

Stack overflow leading to DoS can be triggered by a malicious authenticated client in Clickhouse before 19.14.3.3.

In Eclipse JGit versions 7.2.0.202503040940-r and older, the ManifestParser class used by the repo command and the Amazo

The Madara – Responsive and modern WordPress theme for manga sites theme for WordPress is vulnerable to Local File Inclu

Yandex Browser for Android prior to version 21.3.0 allows remote attackers to perform IDN homograph attack.

Yandex Browser Lite for Android prior to version 21.1.0 allows remote attackers to cause a denial of service.

Yandex Browser Lite for Android before 21.1.0 allows remote attackers to spoof the address bar.

A vulnerability, which was classified as problematic, was found in HkCms up to 2.3.2.240702. This affects an unknown par

A vulnerability was found in the libsoup package. This flaw stems from its failure to correctly verify the termination o

The DIGITS: WordPress Mobile Number Signup and Login WordPress plugin before 8.4.6.1 does not rate limit OTP validation

A vulnerability classified as problematic was found in moonlightL hexo-boot 4.3.0. This vulnerability affects unknown co

A vulnerability classified as problematic has been found in moonlightL hexo-boot 4.3.0. This affects an unknown part of

A vulnerability was found in projectworlds Online Time Table Generator 1.0. It has been rated as critical. Affected by t

A vulnerability was found in Part-DB up to 1.17.0. It has been declared as problematic. Affected by this vulnerability i

A vulnerability was found in Campcodes Online Shopping Portal 1.0. It has been classified as critical. Affected is an un

A vulnerability was found in projectworlds Online Time Table Generator 1.0 and classified as critical. This issue affect

A vulnerability has been found in projectworlds Online Time Table Generator 1.0 and classified as critical. This vulnera

A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. Th

A vulnerability was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. It has been declared as problematic. Thi

A vulnerability was found in Linksys FGW3000-AH and FGW3000-HK up to 1.0.17.000000. It has been classified as critical.

A vulnerability was found in Linksys FGW3000-AH and FGW3000-HK up to 1.0.17.000000 and classified as critical. Affected

A vulnerability has been found in H3C Magic R200G up to 100R002 and classified as problematic. Affected by this vulnerab

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the theauthName parameter in the web_aaa_logi

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the bytftp_srvip parameter in the web_tool_up

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the bindEditMACName parameter in the web_acl_

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the radDftParamKey parameter in the web_radiu

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the host_ip parameter in the web_snmp_v3host_

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the tacIp parameter in the web_tacplus_server

A command injection vulnerability in the component /cgi-bin/firewall.cgi of Wavlink WL-WN579A3 v1.0 allows attackers to

A command injection vulnerability in the component /cgi-bin/adm.cgi of Wavlink WL-WN579A3 v1.0 allows attackers to execu

A vulnerability, which was classified as problematic, was found in H3C R2+ProG up to 200R004. Affected is the function U