2025

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected de

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). Affected devices contain hardcod

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected de

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected de

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected de

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected de

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected de

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected de

The ZoomSounds - WordPress Wave Audio Player with Playlist plugin for WordPress is vulnerable to Arbitrary File Read in

SAP S4CORE OData meta-data property is vulnerable to data tampering, due to which entity set could be externally modifie

Due to insecure file permissions in SAP BusinessObjects Business Intelligence Platform, an attacker who has local access

SAP NetWeaver allows an attacker to bypass authorization checks, enabling them to view portions of ABAP code that would

SAP Landscape Transformation (SLT) allows an attacker with user privileges to exploit a vulnerability in the function mo

Due to a missing authorization check, an authenticated attacker could upload a file as a template for solution documenta

SAP Financial Consolidation allows an unauthenticated attacker to gain unauthorized access to the Admin account. The vul

Due to incorrect memory address handling in ABAP SQL of SAP NetWeaver and ABAP Platform (Application Server ABAP), an au

SAP Capital Yield Tax Management has directory traversal vulnerability due to insufficient path validation. This could a

SAP ERP BW Business Content is vulnerable to OS Command Injection through certain function modules. These function modul

The GreenPay(tm) by Green.Money plugin for WordPress is vulnerable to Sensitive Information Exposure in versions between

A Missing Authorization Check vulnerability exists in the Virus Scanner Interface of SAP NetWeaver Application Server AB

Under specific conditions and prerequisites, an unauthenticated attacker could access customer coupon codes exposed in t

SAP S/4HANA allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. T

Due to directory traversal vulnerability, an authorized attacker could gain access to some critical information by using

SAP KMC WPC allows an unauthenticated attacker to remotely retrieve usernames by a simple parameter query which could ex

SAP Commerce Cloud (Public Cloud) does not allow to disable unencrypted HTTP (port 80) entirely, but instead allows a re

SAP NetWeaver Application Server ABAP does not sufficiently encode user-controlled inputs, leading to Stored Cross-Site

In certain conditions, SAP NetWeaver Application Server ABAP allows an authenticated attacker to craft a Remote Function

The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'printer_text' parameter in all versions up

The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'material_text' parameter in all versions u

The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'coating_text' parameter in all versions up

The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'infill_text' parameter in all versions up

The Team Circle Image Slider With Lightbox plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in

A vulnerability has been found in opplus springboot-admin up to a2d5310f44fd46780a8686456cf2f9001ab8f024 and classified

A vulnerability, which was classified as critical, was found in mymagicpower AIAS 20250308. Affected is an unknown funct

During an annual penetration test conducted on behalf of Axis Communications, Truesec discovered a flaw in the VAPIX Dev

51l3nc3, a member of the AXIS OS Bug Bounty Program, has found that the VAPIX API uploadoverlayimage.cgi did not have su

A vulnerability, which was classified as critical, has been found in mymagicpower AIAS 20250308. This issue affects some

A vulnerability classified as critical was found in mymagicpower AIAS 20250308. This vulnerability affects unknown code

A vulnerability classified as critical has been found in Nothings stb up to f056911. This affects the function stb_inclu

The Simple WP Events plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validat

Improper verification of intent by broadcast receiver vulnerability in Galaxy Store prior to version 4.5.90.7 allows loc

Use of implicit intent for sensitive communication in SamsungNotes prior to version 4.4.26.45 allows local attackers to

Out-of-bounds read in enrollment with cdsp frame secfr trustlet prior to SMR Apr-2025 Release 1 allows local privileged

Improper handling of insufficient permission or privileges in ClipboardService prior to SMR Apr-2025 Release 1 allows lo

Improper handling of exceptional conditions in pairing specific bluetooth devices in Galaxy Watch Bluetooth pairing prio

Improper access control in Galaxy Watch prior to SMR Apr-2025 Release 1 allows local attackers to access sensitive infor

Out-of-bounds read in parsing audio data in libsavsac.so prior to SMR Apr-2025 Release 1 allows local attackers to read

Out-of-bounds write in secfr trustlet prior to SMR Apr-2025 Release 1 allows local privileged attackers to cause memory

Improper Verification of Intent by Broadcast Receiver in DeviceIdService prior to SMR Apr-2025 Release 1 allows local at

Improper access control in InputManager to SMR Apr-2025 Release 1 allows local attackers to access the scancode of speci