2025

open_actions.py in kitty before 0.41.0 does not ask for user confirmation before running a local executable file that ma

In Infodraw Media Relay Service (MRS) 7.1.0.0, the MRS web server (on port 12654) allows reading arbitrary files via ../

GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to create lists via the /mailman/cr

GNU Mailman 2.1.39, as bundled in cPanel (and WHM), in certain external archiver configurations, allows unauthenticated

GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to read arbitrary files via ../ dir

SSL.com before 2025-04-19, when domain validation method 3.2.2.4.14 is used, processes certificate requests such that a

mystrtod in mjson 1.2.7 requires more than a billion iterations during processing of certain digit strings such as 88911

cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a": true, "b": [ null,999999999999999

A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644) and classified as critical. Affected by this

7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later

7-Zip 22.01 does not report an error for certain invalid xz files, involving block flags and reserved bits. Some later v

A vulnerability has been found in PHPGurukul Men Salon Management System 1.0 and classified as critical. Affected by thi

A vulnerability, which was classified as critical, was found in webpy web.py 0.70. Affected is the function PostgresDB._

In Pritunl Client before 1.3.4220.57, an administrator with access to /Applications can escalate privileges after uninst

A vulnerability, which was classified as critical, has been found in SourceCodester Online Eyewear Shop 1.0. This issue

A vulnerability classified as critical was found in westboy CicadasCMS 2.0. This vulnerability affects unknown code of t

A vulnerability has been found in zhenfeng13 My-BBS 1.0 and classified as problematic. This vulnerability affects unknow

A vulnerability, which was classified as critical, was found in zhenfeng13 My-BBS 1.0. This affects the function Upload

A vulnerability, which was classified as problematic, has been found in dazhouda lecms up to 3.0.3. Affected by this iss

A vulnerability classified as critical was found in sarrionandia tournatrack up to 4c13a23f43da5317eea4614870a7a8510fc54

A vulnerability classified as critical has been found in thautwarm vscode-diana 0.0.1. Affected is an unknown function o

A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644). It has been rated as critical. This issue af

A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644). It has been declared as critical. This vulne

A vulnerability was found in songquanpeng one-api up to 0.6.10. It has been classified as problematic. This affects an u

A vulnerability has been found in WCMS 11 and classified as critical. Affected by this vulnerability is an unknown funct

A vulnerability, which was classified as critical, was found in WCMS 11. Affected is an unknown function of the file app

A vulnerability, which was classified as critical, has been found in WCMS 11. This issue affects the function sub of the

The SB Chart block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘className’ parameter in al

The Download Manager plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validat

The Wordpress Plugin Smart Product Review plugin for WordPress is vulnerable to arbitrary file uploads due to missing fi

A vulnerability classified as critical was found in SeaCMS up to 13.3. This vulnerability affects unknown code of the fi

The Debug Log Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the auto-refresh debug log i

The Insert Headers And Footers plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, a

The WP-Syntax WordPress plugin through 1.2 does not properly handle input, allowing an attacker to create a post contain

The CLEVER - HTML5 Radio Player With History - Shoutcast and Icecast - Elementor Widget Addon plugin for WordPress is vu

The Themesflat Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the TF E Slide

The Element Pack Addons for Elementor – Free Templates and Widgets for Your WordPress Websites plugin for WordPress is v

The AIHub theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the generat

The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vuln

The UrbanGo Membership plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.0.

The JobWP – Job Board, Job Listing, Career Page and Recruitment Plugin plugin for WordPress is vulnerable to SQL Injecti

NSSCryptoSignBackend.cc in Poppler before 25.04.0 does not verify the adbe.pkcs7.sha1 signatures on documents, resulting

A vulnerability classified as critical has been found in PHPGurukul Men Salon Management System 1.0. This affects an unk

z80pack is a mature emulator of multiple platforms with 8080 and Z80 CPU. In version 1.38 and prior, the `makefile-ubunt

An issue in Qimou CMS v.3.34.0 allows a remote attacker to execute arbitrary code via the upgrade.php component.

An issue in the login page of Seclore v3.27.5.0 allows attackers to bypass authentication via a brute force attack.

A vulnerability was found in DaiCuo 1.3.13. It has been rated as problematic. Affected by this issue is some unknown fun

In Nessus versions prior to 10.8.4, a non-authenticated attacker could alter Nessus logging entries by manipulating http

Rasa Pro is a framework for building scalable, dynamic conversational AI assistants that integrate large language models

Crawl4AI <=0.4.247 is vulnerable to SSRF in /crawl4ai/async_dispatcher.py.