2025

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SCAND MultiMailer

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPMinds Simple WP Events

Incorrect Privilege Assignment vulnerability in Rankology Rankology SEO – On-site SEO rankology-seo-all-in-one-seo-analy

Deserialization of Untrusted Data vulnerability in PickPlugins Job Board Manager job-board-manager allows Object Injecti

Deserialization of Untrusted Data vulnerability in PickPlugins Accordion accordions allows Object Injection.This issue a

OS command injection vulnerability exists in Deco BE65 Pro firmware versions prior to "Deco BE65 Pro(JP)_V1_1.1.2 Build

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in N-Media Bulk Produ

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Lisandro Martinez

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in programphases Inse

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in danbwb Oppso Unit

Missing Authorization vulnerability in AnyTrack AnyTrack Affiliate Link Manager anytrack-affiliate-link-manager allows E

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Huseyin Berberoglu

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dolby_uk Mobile Sm

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

There is a Heap-based Buffer Overflow vulnerability in QTextMarkdownImporter. This requires an incorrectly formatted mar

The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Local File Inclusion in all v

When using the ch-go library, under a specific condition when the query includes a large, uncompressed malicious externa

CodeLit CourseLit before 0.57.5 allows Parameter Tampering via a payment plan associated with the wrong entity.

Dell PowerProtect Cyber Recovery, versions prior to 19.18.0.2, contains an Insertion of Sensitive Information Into Sent

A denial-of-service (DoS) vulnerability in the Simple Certificate Enrollment Protocol (SCEP) authentication feature of P

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypas

When configured using SAML, a session fixation vulnerability in the GlobalProtect™ login enables an attacker to imperson

An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® softwar

An authenticated file deletion vulnerability in the Palo Alto Networks PAN-OS® software enables an authenticated attacke

A denial-of-service (DoS) vulnerability in Palo Alto Networks Prisma® SD-WAN ION devices enables an unauthenticated atta

A null pointer dereference vulnerability in the Palo Alto Networks Cortex® XDR agent on Windows devices allows a low-pri

A vulnerability with a privilege management mechanism in the Palo Alto Networks GlobalProtect™ app on Windows devices al

IBM QRadar WinCollect Agent 10.0 through 10.1.13 could allow a remote attacker to cause a denial of service by interrupt

W. W. Norton InQuizitive through 2025-04-08 allows students to conduct stored XSS attacks against educators via a bonus

W. W. Norton InQuizitive through 2025-04-08 allows students to insert arbitrary records of their quiz performance into t

A path traversal vulnerability in FusionDirectory before 1.5 allows remote attackers to read arbitrary files on the host

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. A

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Th

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Da

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Th

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation AbuseFilter. This vulne

Vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation Parsoid.This issue affects MediaWiki: before 1.39.

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnera

Improper Preservation of Permissions vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated w

Improper Preservation of Permissions vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated w

An Improper Link Resolution Before File Access ('Link Following') vulnerability in SonicWall NetExtender Windows (32 and

A local privilege escalation vulnerability in SonicWall NetExtender Windows (32 and 64 bit) client which allows an attac

An improper privilege management vulnerability in the SonicWall NetExtender Windows (32 and 64 bit) client allows a low

Spring Cloud Config Server may not use Vault token sent by clients using a X-CONFIG-TOKEN header when making requests to

Mattermost versions 9.11.x <= 9.11.8  fail to enforce proper access controls on the /api/v4/audits endpoint, allowing us

Metabase is an open source Business Intelligence and Embedded Analytics tool. When admins change Snowflake connection de

Yii is an open source PHP web framework. Prior to 1.1.31, yiisoft/yii is vulnerable to Reflected XSS in specific scenari