2025

An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. Th

An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object. This vulnerability was

A vulnerability has been found in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3 and classified as problematic. Affected by

A vulnerability, which was classified as problematic, was found in kanwangzjm Funiture up to 71ca0fb0658b3d839d9e049ac36

A vulnerability classified as critical has been found in projectworlds Student Project Allocation System 1.0. This affec

A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been rated as critical. Affected

A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. It has been declared as critical.

A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. It has been classified as critical

Cocotais Bot is a QQ official robot framework based on qq-bot-sdk. Starting in version 1.5.0-test2-hotfix and prior to v

Donetick an open-source app for managing tasks and chores. Prior to version 0.1.44, the application uses JSON Web Tokens

A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 and classified as critical. This is

A vulnerability has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615 and classified as critical. Th

A vulnerability, which was classified as critical, was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615.

A vulnerability, which was classified as critical, has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.

LibreNMS is PHP/MySQL/SNMP based network monitoring software. LibreNMS v25.4.0 and prior suffers from a Stored Cross-Sit

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path tr

IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 product IBM TCP/IP Connectivity Utilities for i contains a privilege escalation vulner

A vulnerability classified as critical was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. Affected by

A vulnerability, which was classified as critical, was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615.

The MultiVendorX – WooCommerce Multivendor Marketplace Solutions plugin for WordPress is vulnerable to unauthorized loss

RAGFlow through 0.18.1 allows account takeover because it is possible to conduct successful brute-force attacks against

The WP Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpbc shortcod

The Jupiter X Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File inclusion in all versi

The EventON Pro plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability chec

The Wise Chat plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including,

A vulnerability, which was classified as critical, has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.

A vulnerability classified as critical was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. This vulner

A vulnerability classified as critical has been found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. This a

A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. It has been rated as critical. Aff

The WP-Members Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpme

A vulnerability classified as problematic has been found in y_project RuoYi 4.8.0. Affected is an unknown function of th

The Echo RSS Feed Post Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type v

The Crawlomatic Multipage Scraper Post Generator plugin for WordPress is vulnerable to arbitrary file uploads due to mis

The CSV Mass Importer WordPress plugin through 1.2 does not properly validate uploaded files, allowing high privilege us

The WPBot Pro Wordpress Chatbot plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file p

A vulnerability was found in SourceCodester Doctor's Appointment System 1.0. It has been rated as critical. This issue a

A vulnerability was found in Sourcecodester Doctor's Appointment System 1.0. It has been declared as critical. This vuln

A vulnerability was found in SourceCodester Doctor's Appointment System 1.0. It has been classified as critical. This af

The AlT Monitoring plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including

The Audio Comments Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and in

A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this issue

A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kern

Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to read and/or w

A vulnerability, which was classified as critical, was found in PHPGurukul Human Metapneumovirus Testing Management Syst

A vulnerability, which was classified as critical, has been found in PHPGurukul Human Metapneumovirus Testing Management

A vulnerability was found in CodeAstro Pharmacy Management System 1.0. It has been rated as critical. Affected by this i

A vulnerability was found in Tenda AC7 15.03.06.44. It has been declared as critical. Affected by this vulnerability is

A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances vi

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard