2025

Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to

A vulnerability, which was classified as problematic, was found in xujiangfei admintwo 1.0. This affects an unknown part

A vulnerability, which was classified as problematic, has been found in elunez eladmin 2.7. Affected by this issue is so

aiven-extras is a PostgreSQL extension. This is a privilege escalation vulnerability, allowing elevation to superuser in

gitoxide is an implementation of git written in Rust. Before 0.42.0, gitoxide uses SHA-1 hash implementations without an

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. A Remote Code

A vulnerability classified as critical was found in TOTOLINK A6000R 1.0.1-B20201211.2000. Affected by this vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in noonnoo Gravel all

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AwesomeTOGI Awesom

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hutsixdigital Tige

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in shiptrack Booking

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Introvoke Inc. dba

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Aviplugins Videos allows

Missing Authorization vulnerability in shiptrack Booking Calendar and Notification booking-calendar-and-notification all

The Woffice CRM theme for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.4.21.

Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command injection vulnerab

Missing Authorization vulnerability in enituretechnology Pallet Packaging for WooCommerce pallet-packaging-for-woocommer

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in joshix Simplish si

Incorrect Privilege Assignment vulnerability in Favethemes Homey allows Privilege Escalation.This issue affects Homey: f

Stored Cross-Site Scripting (XSS) in DoWISP in versions prior to 1.16.2.50, which consists of an stored XSS through the

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Oblak Studio Srbtransla

Incorrect Privilege Assignment vulnerability in Tomdever wpForo Forum wpforo allows Privilege Escalation.This issue affe

A vulnerability was found in itsourcecode Library Management System 1.0. It has been rated as critical. Affected by this

A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been declared as cr

A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. This issue a

A vulnerability has been found in PHPGurukul e-Diary Management System 1.0 and classified as critical. This vulnerabilit

A vulnerability, which was classified as problematic, was found in zhangyanbo2007 youkefu up to 4.2.0. This affects an u

A vulnerability, which was classified as critical, has been found in PHPGurukul Online Fire Reporting System 1.2. Affect

A vulnerability classified as critical was found in PHPGurukul Online Fire Reporting System 1.2. Affected by this vulner

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in keksdieb ez Form C

A vulnerability classified as critical has been found in PHPGurukul Online Fire Reporting System 1.2. Affected is an unk

A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been rated as critical. This issue affects some unknown

A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been declared as critical. This vulnerability affects un

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0. It has been classified as critical. This aff

A server-side request forgery (SSRF) vulnerability exists in the Bitdefender GravityZone Update Server when operating in

A vulnerability in the sendMailFromRemoteSource method in Emails.php  as used in Bitdefender GravityZone Console unsafel

A server-side request forgery (SSRF) vulnerability in Bitdefender GravityZone Console allows an attacker to bypass input

The kernel driver, accessible to low-privileged users, exposes a function that fails to properly validate the privileges

A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been rated as critical. This issue affects som

A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. It has been declared as critical. This vuln

A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been declared as critical. Affected by thi

A vulnerability was found in CodeCanyon Perfex CRM 3.2.1. It has been classified as problematic. Affected is an unknown

The Vehica Core plugin for WordPress, used by the Vehica - Car Dealer & Listing WordPress Theme, is vulnerable to privil

A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been declared as critical. This vulnerabil

A vulnerability was found in PHPGurukul e-Diary Management System 1.0. It has been classified as critical. This affects

A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0 and classified as critical. Affected by this

Stored XSS in M-Files Web versions from 25.1.14445.5 to 25.2.14524.4 allows an authenticated user to run scripts

Improper isolation of users in M-Files Server version before 25.3.14549 allows anonymous user to affect other anonymous

The Docker image from acme.sh before 40b6db6 is based on a .github/workflows/dockerhub.yml file that lacks "persist-cred