2025

The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to generic SQL Injection

The Survey Maker plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on

The Welcart e-Commerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability che

The Survey Maker plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability che

The SureForms plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including,

The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Insecure Direct Object

The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient

Frappe Learning is a learning system that helps users structure their content. Starting in version 2.0.0 and prior to ve

Frappe Learning is a learning system that helps users structure their content. Starting in version 2.0.0 and prior to ve

A flaw has been found in code-projects Responsive Hotel Site 1.0. The affected element is an unknown function of the fil

A vulnerability was detected in code-projects Responsive Hotel Site 1.0. Impacted is an unknown function of the file /ad

sudo-rs is a memory safe implementation of sudo and su written in Rust. With `Defaults targetpw` (or `Defaults rootpw`)

cups-filters contains backends, filters, and other software required to get the cups printing service working on operati

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap Community Editio

DuckDB is a SQL database management system. DuckDB implemented block-based encryption of DB on the filesystem starting w

A stored cross-site scripting (XSS) vulnerability exists in pH7Software pH7-Social-Dating-CMS 17.9.1 in the application'

IBM QRadar SIEM 7.5 through 7.5.0 UP14 stores user credentials in configuration files in source control which can be rea

IBM OpenPages 9.0 and 9.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST hea

A vulnerability was detected in itsourcecode Online Voting System 1.0. This impacts an unknown function of the file /ind

An improper default permission vulnerability was reported in Lenovo Dock Manager that, under certain conditions during i

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap Community Editio

IBM OpenPages 9.0 and 9.1 is vulnerable to information disclosure of sensitive information due to a weaker than expected

A weakness has been identified in SourceCodester Alumni Management System 1.0. The impacted element is an unknown functi

A vulnerability was reported in the Lenovo Scanner pro application during an internal security assessment that, under ce

Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Control of Generation of Code ('Code Inj

A heap-use-after-free vulnerability exists in airpig2011 IEC104 thru Commit be6d841 (2019-07-08). During multi-threaded

A stored cross-site scripting (XSS) in the Business Line Management module of Xxl-api v1.3.0 attackers to execute arbitr

A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Impacted is an unknown function o

Mintty is a terminal emulator for Cygwin, MSYS, and WSL. In versions 2.3.6 through 3.7.4, several escape sequences can c

A Cross-Site Request Forgery (CSRF) in xxl-api v1.3.0 allows attackers to arbitrarily add users to the management module

Omnissa Workspace ONE UEM contains an observable response discrepancy vulnerability. A malicious actor may be able to en

Cross Site Scripting (XSS) vulnerability in CrushFTP 11.3.6_48. The Web-Based Server has a feature where users can share

Cross Site Scripting vulnerability in CentralSquare Community Development 19.5.7 via form fields.

If an attacker causes kdcproxy to connect to an attacker-controlled KDC server (e.g. through server-side request forgery

Cross-site scripting (XSS) vulnerability in the generate report functionality in Rarlab WinRAR 7.11, allows attackers to

In the Linux kernel, the following vulnerability has been resolved: usbnet: Fix using smp_processor_id() in preemptible

The Specific Content For Mobile – Customize the mobile version without redirections plugin for WordPress is vulnerable t

Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an att

Reflected cross-site scripting vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.03. Users

Origin Validation Error in Kibana can lead to Server-Side Request Forgery via a forged Origin HTTP header processed by t

An out-of-bounds Write vulnerability in Apache OpenOffice could allow an attacker to craft a document that would crash t

Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an att

The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to unauthorized access of sen

The a+HRD and a+HCM developed by aEnrich has a Stored Cross-Site Scripting vulnerability, allowing authenticated remote

The a+HRD developed by aEnrich has a Stored Cross-Site Scripting vulnerability, allowing remote attackers with administr

The Alt Text Generator AI – Auto Generate & Bulk Update Alt Texts For Images plugin for WordPress is vulnerable to unaut

The MembershipWorks – Membership, Events & Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting v

The Asgaros Forum plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including,

The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to

The Wishlist and Save for later for Woocommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference i