2025

The Reales WP STPT plugin for WordPress is vulnerable to unauthorized user registration in all versions up to, and inclu

A vulnerability has been found in kefaming mayi up to 1.3.9 and classified as critical. This vulnerability affects the f

A vulnerability, which was classified as critical, was found in PHPGurukul Cyber Cafe Management System 1.0. This affect

In sprd ssense service, there is a possible missing permission check. This could lead to local information disclosure wi

A vulnerability, which was classified as critical, has been found in PHPGurukul Human Metapneumovirus Testing Management

A vulnerability classified as critical was found in itsourcecode Content Management System 1.0. Affected by this vulnera

cpp-httplib is a C++ header-only HTTP/HTTPS server and client library. Prior to version 0.20.1, the library fails to enf

Out-of-Bounds Read in Virglrenderer in ChromeOS 16093.57.0 allows a malicious guest VM to achieve arbitrary address acc

A vulnerability classified as critical has been found in itsourcecode Content Management System 1.0. Affected is an unkn

A vulnerability was found in Tenda AC1206 up to 15.03.06.23. It has been rated as critical. This issue affects the funct

A vulnerability was found in Tenda AC1206 up to 15.03.06.23. It has been declared as critical. This vulnerability affect

A vulnerability was found in PHPGurukul Men Salon Management System 2.0. It has been classified as critical. This affect

A vulnerability was found in MRCMS 3.1.3 and classified as problematic. Affected by this issue is some unknown functiona

A vulnerability has been found in MRCMS 3.1.3 and classified as problematic. Affected by this vulnerability is an unknow

A vulnerability, which was classified as critical, was found in IdeaCMS up to 1.6. Affected is the function saveUpload.

A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unk

SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admin_topic.php.

SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admin_manager.php.

SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component phomebak.php. This

A vulnerability classified as critical was found in PCMan FTP Server 2.0.7. This vulnerability affects unknown code of t

A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7. This affects an unknown part of the com

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 12.1.0 through 12.1.1 could allow an authenticat

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 coul

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 un

A vulnerability was found in PyTorch 2.6.0+cu124. It has been rated as problematic. Affected by this issue is the functi

A vulnerability was found in Intelbras InControl up to 2.21.59. It has been classified as problematic. Affected is an un

Discourse is an open-source community platform. A data leak vulnerability affects sites deployed between commits 10df7fd

league/commonmark is a PHP Markdown parser. A cross-site scripting (XSS) vulnerability in the Attributes extension of th

Craft is a content management system. Versions of Craft CMS on the 4.x branch prior to 4.14.13 and on the 5.x branch pri

MobSF is a mobile application security testing tool used. Typically, MobSF is deployed on centralized internal or cloud-

Langroid is a framework for building large-language-model-powered applications. Prior to version 0.53.4, a LLM applicati

Incorrect access control in the component /admin/sys/datasource/ajaxList of jeeweb-mybatis-springboot v0.0.1.RELEASE all

Incorrect access control in the component /user/list of production_ssm v0.0.1-SNAPSHOT allows attackers to access sensit

Incorrect access control in the /admin/** API of brcc v1.2.0 allows attackers to gain access to Admin rights via a craft

Incorrect access control in the /admin/ API of yaoqishan v0.0.1-SNAPSHOT allows attackers to gain access to Admin rights

Incorrect access control in the component /api/user/manager of One v1.0 allows attackers to access sensitive information

Incorrect access control in the component /user/list of Shiro-Action v0.6 allows attackers to access sensitive informati

Incorrect access control in xmall v1.1 allows attackers to bypass authentication via a crafted GET request to /index.

Incorrect access control in the /user/edit/ component of hope-boot v1.0.0 allows attackers to bypass authentication via

Incorrect access control in the component /scheduleLog/info/1 of PassJava-Platform v3.0.0 allows attackers to access sen

Incorrect access control in the doFilter function of kob latest v1.0.0-SNAPSHOT allows attackers to access sensitive inf

Incorrect access control in the /system/user/findUserList API of Xinguan v0.0.1-SNAPSHOT allows attackers to access sens

An issue in the component /manage/ of itranswarp v2.19 allows attackers to bypass authentication via a crafted request.

The BuddyBoss Platform Pro plugin for WordPress is vulnerable to authentication bypass in versions up to, and including,

The AWS Amplify Studio UI component property expressions in the aws-amplify/amplify-codegen-ui package lack input valida

A vulnerability was found in SourceCodester/oretnom23 Stock Management System 1.0 and classified as critical. This issue

The External image replace plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validat

Keystone is a content management system for Node.js. Prior to version 6.5.0, `{field}.isFilterable` access control can b

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.6.

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.6.