2025

A vulnerability was found in PbootCMS 3.2.5. It has been classified as problematic. Affected is an unknown function of t

The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin

A vulnerability was found in Tenda AC15 up to 15.03.05.19 and classified as critical. This issue affects the function fr

A vulnerability has been found in D-Link DWR-M961 1.1.36 and classified as critical. This vulnerability affects unknown

The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versi

An improper authentication control vulnerability exists in AiCloud. This vulnerability can be triggered by a crafted req

In the Linux kernel, the following vulnerability has been resolved: md/raid10: wait barrier before returning discard re

In the Linux kernel, the following vulnerability has been resolved: iio: light: Add check for array bounds in veml6075_

In the Linux kernel, the following vulnerability has been resolved: objtool, spi: amd: Fix out-of-bounds stack access i

In the Linux kernel, the following vulnerability has been resolved: x86/mce: use is_copy_from_user() to determine copy-

In the Linux kernel, the following vulnerability has been resolved: ASoC: simple-card-utils: Don't use __free(device_no

In the Linux kernel, the following vulnerability has been resolved: objtool, nvmet: Fix out-of-bounds stack access in n

In the Linux kernel, the following vulnerability has been resolved: staging: gpib: Fix cb7210 pcmcia Oops The pcmcia_

In the Linux kernel, the following vulnerability has been resolved: jfs: fix slab-out-of-bounds read in ea_get() Durin

In the Linux kernel, the following vulnerability has been resolved: clk: samsung: Fix UBSAN panic in samsung_clk_init()

In the Linux kernel, the following vulnerability has been resolved: nfsd: allow SC_STATUS_FREEABLE when searching via n

In the Linux kernel, the following vulnerability has been resolved: net_sched: skbprio: Remove overly strict queue asse

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use aead_request_free to match aead_request_

In the Linux kernel, the following vulnerability has been resolved: dmaengine: fsl-edma: free irq correctly in remove p

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: dp: drm_err => dev_err in HPD path to

In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Clear table_sz when rproc_shutdow

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Replace Mutex with Spinlock for RLCG re

In the Linux kernel, the following vulnerability has been resolved: x86/resctrl: Fix allocation of cleanest CLOSID on p

In the Linux kernel, the following vulnerability has been resolved: jfs: reject on-disk inodes of an unsupported type

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Fix off-by-one error in build_prolo

In the Linux kernel, the following vulnerability has been resolved: sfc: fix NULL dereferences in ef100_process_design_

In the Linux kernel, the following vulnerability has been resolved: ext4: fix OOB read when checking dotdot dir Mounti

A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. Aff

The Coupon Affiliates – Affiliate Plugin for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scri

The MapPress Maps for WordPress plugin before 2.94.10 does not sanitise and escape some of its settings, which could all

Insecure default settings have been found in recorder products provided by Yokogawa Electric Corporation. The default se

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in pantherius Modal S

Path Traversal: '.../...//' vulnerability in ThimPress Ivy School ivy-school allows PHP Local File Inclusion.This issue

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pantherius Modal S

Active! mail 6 BuildInfo: 6.60.05008561 and earlier contains a stack-based buffer overflow vulnerability. Receiving a sp

The Avatar plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in a f

The Login Manager – Design Login Page, View Login Activity, Limit Login Attempts plugin for WordPress is vulnerable to S

The Piotnet Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'PAFE Before

A stored cross-site scripting (XSS) vulnerability in the upnp.htm page of the web Interface in TP-Link WR841N v14/v14.6/

Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data ou

A Remote Code Execution (RCE) vulnerability was identified in GitHub Enterprise Server that allowed attackers to execute

An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed cross-site scr

A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a user to see the names of

An issue in a-blogcms 3.1.15 allows a remote attacker to obtain sensitive information via the /bid/1/admin/entry-edit/ p

An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Add Mycode function. NOTE: the

An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Mail function. NOTE: the Suppli

An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Change Avatar function. NOTE: t

An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Import a Theme function. NOTE:

An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive in

An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive in