2025

An issue has been discovered in GitLab CE/EE affecting all versions starting from 17.1 prior to 17.9.8, from 17.10 prior

A flaw was found in Rust's Ring package. A panic may be triggered when overflow checking is enabled. In the QUIC protoco

SourceCodester Client Database Management System 1.0 is vulnerable to Remote code execution via Arbitrary file upload in

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in user_order_customer_update.php vi

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in superadmin_phpmyadmin.php.

Tenda FH451 V1.0.0.9 has a stack overflow vulnerability in the function.P2pListFilter.

Victure RX1800 EN_V1.0.0_r12_110933 was discovered to contain a command injection vulnerability.

Incorrect access control in Victure RX1800 EN_V1.0.0_r12_110933 allows attackers to enable SSH and Telnet services witho

An issue in Victure RX1800 EN_V1.0.0_r12_110933 allows physically proximate attackers to execute arbitrary code or gain

Victure RX1800 EN_V1.0.0_r12_110933 was discovered to utilize a weak default password which includes the last 8 digits o

Link Following Local Privilege Escalation Vulnerability in System Speedup Service in Avira Operations GmbH Avira Prime V

Link Following Local Privilege Escalation Vulnerability in TuneupSvc in Gen Digital Inc. Avast Cleanup Premium Version 2

Link Following Local Privilege Escalation Vulnerability in TuneupSvc in Avast Cleanup Premium Version 24.2.16593.17810 o

Link Following Local Privilege Escalation Vulnerability in TuneUp Service in AVG TuneUp Version 23.4 (build 15592) on Wi

Link Following Local Privilege Escalation Vulnerability in TuneupSvc.exe in AVG TuneUp 24.2.16593.9844 on Windows allows

Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate Version 24.2.

Local Privilege Escalation in Avira.Spotlight.Service.exe in Avira Prime 1.1.96.2 on Windows 10 x64  allows local attack

Yifang CMS v2.0.2 is vulnerable to Server-Side Request Forgery (SSRF) in /api/file/getRemoteContent.

PHPGURUKUL Vehicle Parking Management System v1.13 is vulnerable to SQL injection in the /vpms/users/login.php file. Att

EnerSys AMPA versions 24.04 through 24.16, inclusive, are vulnerable to command injection leading to privileged remote s

EnerSys AMPA 22.09 and prior versions are vulnerable to command injection leading to privileged remote shell access.

A flaw was found in systems utilizing LUKS-encrypted disks with GRUB configured for TPM-based auto-decryption. When GRUB

The WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg plugin for WordPress is vulner

The EUCookieLaw plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 2.7.2 vi

A flaw was found in the Mirror Registry. The quay-app container shipped as part of the Mirror Registry for OpenShift has

Kong Insomnia Desktop Application before 11.0.2 contains a template injection vulnerability that allows attackers to exe

Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x. There are a number of issues in Ap

The Drag and Drop Multiple File Upload for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads in a

The Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode plugin for Wor

A vulnerability was found in code-projects Departmental Store Management System 1.0. It has been classified as critical.

A vulnerability, which was classified as critical, has been found in code-projects Jewelery Store Management system 1.0.

A vulnerability classified as problematic was found in SourceCodester Online Student Clearance System 1.0. Affected by t

A vulnerability classified as problematic has been found in SourceCodester Online Student Clearance System 1.0. Affected

A vulnerability was found in SourceCodester Online Student Clearance System 1.0. It has been rated as critical. This iss

A vulnerability was found in SourceCodester Online Student Clearance System 1.0. It has been declared as critical. This

The Frontend Login and Registration Blocks plugin for WordPress is vulnerable to privilege escalation via account takeov

The 1 Click WordPress Migration Plugin – 100% FREE for a limited time plugin for WordPress is vulnerable to unauthorized

In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Consistently treat platform_max as contr

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_

In the Linux kernel, the following vulnerability has been resolved: pds_core: handle unsupported PDS_CORE_CMD_FW_CONTRO

In the Linux kernel, the following vulnerability has been resolved: pds_core: make wait_context part of q_info Make th

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Reset IRTE to host control if *new* route

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix deadlock between rcu_tasks_trace and event

In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Add check for get_zeroed_page() Add che

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix isochronous Ring Underrun/Overrun ev

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed: Add NULL pointer check in ast_

In the Linux kernel, the following vulnerability has been resolved: um: work around sched_yield not yielding in time-tr

In the Linux kernel, the following vulnerability has been resolved: 9p/net: fix improper handling of bogus negative rea

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix WARN_ON(!ctx) in __free_event() for

In the Linux kernel, the following vulnerability has been resolved: iommu: Clear iommu-dma ops on cleanup If iommu_dev