2025

A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker

Frappe is a full-stack web application framework. Prior to versions 14.89.0 and 15.51.0, making crafted requests could l

Frappe is a full-stack web application framework. Prior to versions 14.91.0 and 15.52.0, a system user was able to creat

Frappe is a full-stack web application framework. An SQL Injection vulnerability has been identified in Frappe Framework

Luxion KeyShot USDC File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote at

Luxion KeyShot DAE File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allow

Luxion KeyShot DAE File Parsing Access of Uninitialized Pointer Remote Code Execution Vulnerability. This vulnerability

The GLPI Inventory Plugin handles various types of tasks for GLPI agents, including network discovery and inventory (SNM

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GhozyLab Gallery f

Appsmith is a platform to build admin panels, internal tools, and dashboards. Users invited as "App Viewer" should not h

In Tiny MoxieManager PHP before 4.0.0, remote code execution can occur in the installer command. This vulnerability allo

A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrar

VMware Tools for Windows contains an authentication bypass vulnerability due to improper access control. A malicious act

SQL injection vulnerability in the authentication module in Convivance StandVoice 4.5 through 6.2 allows remote attacker

In JetBrains GoLand before 2025.1 an XXE during debugging was possible

The TRMTracker web application is vulnerable to reflected Cross-site scripting attack. The application allows client-sid

A Host Header Injection vulnerability in TRMTracker application may allow an attacker by modifying the host header value

The TRMTracker web application is vulnerable to LDAP injection attack potentially allowing an attacker to inject code in

A vulnerability exists in RTU IEC 61850 client and server functionality that could impact the availability if renegotiat

A vulnerability exists in RTU500 IEC 60870-5-104 controlled station functionality and IEC 61850 functionality, that allo

A vulnerability exists in RTU500 IEC 60870-4-104 controlled station functionality, that allows an authenticated and auth

A vulnerability exists in the RTU500 web server component that can cause a denial of service to the RTU500 CMU applicati

accountsservice no longer drops permissions when writting .pam_environment

The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Server-Side Request For

A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects t

A vulnerability classified as critical has been found in Open Asset Import Library Assimp 5.4.3. This affects the functi

The Digital License Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remov

The Your Simple SVG Support plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in al

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache VCL in the

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache VCL. Users

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as critical. Affected by this iss

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been declared as critical. Affected by this

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as critical. Affected is the

A flaw was found in Keycloak. When the configuration uses JWT tokens for authentication, the tokens are cached until exp

The Frndzk Expandable Bottom Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'text' parameter

The EZ SQL Reports Shortcode Widget and DB Backup plugin for WordPress is vulnerable to Cross-Site Request Forgery in ve

The Alert Box Block – Display notice/alerts in the front end. plugin for WordPress is vulnerable to Stored Cross-Site Sc

The Estatebud – Properties & Listings plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions u

The WP Church Donation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several donation form submi

A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects th

A vulnerability has been found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This vulnerabili

A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the

A vulnerability, which was classified as critical, was found in zhijiantianya ruoyi-vue-pro 2.4.1. Affected is an unknow

A vulnerability, which was classified as problematic, has been found in zhijiantianya ruoyi-vue-pro 2.4.1. This issue af

A vulnerability classified as critical was found in zhijiantianya ruoyi-vue-pro 2.4.1. This vulnerability affects unknow

A vulnerability classified as critical has been found in PHPGurukul Old Age Home Management System 1.0. Affected is an u

The Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Sensit

The teachPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 9.

The DICOM Support plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'dcm' shortcode in

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0. It has been rated as critical. This issue af