2025

The Nautic Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'np_marinetraffic_ma

Certain build processes for libuv and Node.js for 32-bit systems, such as for the nodejs binary package through nodejs_2

The Team Members – Best WordPress Team Plugin with Team Slider, Team Showcase & Team Builder plugin for WordPress is vul

A vulnerability classified as critical has been found in PHPGurukul Online Birth Certificate System 1.0. Affected is an

A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0. It has been rated as critical. This issue a

The WP Maps WordPress plugin before 4.7.2 does not sanitise and escape some of its Map settings, which could allow high

The WP Maps WordPress plugin before 4.7.2 does not sanitise and escape some of its Map settings, which could allow high

The WP Maps WordPress plugin before 4.7.2 does not sanitise and escape some of its Map settings, which could allow high

The Calculated Fields Form WordPress plugin before 5.2.62 does not sanitise and escape some of its settings, which could

A vulnerability was found in Netgear EX6200 1.0.3.94. It has been declared as critical. This vulnerability affects the f

The List Children plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'list_children' sho

The Projectopia – WordPress Project Management plugin for WordPress is vulnerable to unauthorized modification of data t

The Gravity Forms WebHooks plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and

A vulnerability was found in Netgear EX6200 1.0.3.94. It has been classified as critical. This affects the function sub_

A vulnerability was found in Netgear EX6200 1.0.3.94 and classified as critical. Affected by this issue is the function

The Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Produc

The NewsBlogger theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.

The NewsBlogger theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the new

The Page View Count plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of

A vulnerability has been found in Netgear EX6200 1.0.3.94 and classified as critical. Affected by this vulnerability is

A vulnerability, which was classified as critical, was found in Netgear EX6200 1.0.3.94. Affected is the function sub_41

A vulnerability, which was classified as critical, has been found in Netgear EX6200 1.0.3.94. This issue affects the fun

PKCE was implemented in the OAuth implementation in workers-oauth-provider that is part of MCP framework https://github

The OAuth implementation in workers-oauth-provider that is part of MCP framework https://github.com/cloudflare/workers-

A vulnerability has been found in Netgear EX6200 1.0.3.94 and classified as critical. This vulnerability affects the fun

A vulnerability, which was classified as critical, was found in Netgear EX6200 1.0.3.94. This affects the function sub_3

A vulnerability, which was classified as critical, has been found in Netgear EX6120 1.0.3.94. Affected by this issue is

Improper access control of endpoint in HCL Domino Leap allows certain admin users to import applications from the server

Multiple vectors in HCL Domino Volt and Domino Leap allow client-side script injection in the authoring environment and

Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the

Insufficient default configuration in HCL Leap allows anonymous access to directory information.

Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap allow script injection through query parameters.

Missing "no cache" headers in HCL Leap permits sensitive data to be cached.

Improper sanitization of SVG files in HCL Domino Volt allows client-side script injection in deployed applications.

A vulnerability classified as critical was found in Netgear EX6120 1.0.0.68. Affected by this vulnerability is the funct

A buffer overflow was addressed with improved input validation. This issue is fixed in AirPlay audio SDK 2.7.1 and AirPl

The issue was addressed with improved memory handling. This issue is fixed in AirPlay audio SDK 2.7.1 and AirPlay video

Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript

Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript

A vulnerability was found in Weitong Mall 1.0.0. It has been classified as critical. This affects an unknown part of the

Tesla Model 3 VCSEC Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent att

base-x is a base encoder and decoder of any given alphabet using bitcoin style leading zero compression. Versions 4.0.0,

Tesla Model S Iris Modem ql_atfwd Command Injection Code Execution Vulnerability. This vulnerability allows local attack

Tesla Model S oFono AT Command Heap-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows local

Tesla Model S oFono Unnecessary Privileges Sandbox Escape Vulnerability. This vulnerability allows local attackers to es

Tesla Model S Iris Modem Race Condition Firewall Bypass Vulnerability. This vulnerability allows network-adjacent attack

Tesla Model S Iris Modem QCMAP_ConnectionManager Improper Input Validation Sandbox Escape Vulnerability. This vulnerabil

XWiki Contrib's Syntax Markdown allows importing Markdown content into wiki pages and creating wiki content in Markdown.

XWiki is a generic wiki platform. In versions starting from 15.3-rc-1 to before 15.10.14, from 16.0.0-rc-1 to before 16.

XWiki is a generic wiki platform. In versions starting from 1.8.1 to before 14.10.22, from 15.0-rc-1 to before 15.10.12,