2025

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0. It has been declared as critical. This vulne

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0. It has been classified as critical. This aff

The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to

Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uniniti

Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arb

The does not sanitise and escape some parameters when outputting them back in a page, allowing unauthenticated users th

The Favorites WordPress plugin before 2.3.5 does not sanitise and escape some of its settings, which could allow high pr

The DesignThemes Core Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versi

To exploit the vulnerability, it is necessary:

The WP-Recall WordPress plugin before 16.26.12 does not sanitize and escape a parameter before using it in a SQL statem

SQL Injection can occur in the SirsiDynix Horizon Information Portal (IPAC20) through 3.25_9382; however, a patch is ava

The Stylish Google Sheet Reader 4.0 WordPress plugin before 4.1 does not sanitise and escape a parameter before outputt

The aoa-downloadable WordPress plugin through 0.1.0 lacks authorization and authentication for requests to its download.

The aoa-downloadable WordPress plugin through 0.1.0 doesn't validate a parameter in its download function, allowing unau

The AFI WordPress plugin before 1.100.0 does not sanitise and escape some of its settings, which could allow high privi

The AFI WordPress plugin before 1.100.0 does not sanitise and escape some of its settings, which could allow high privi

The IP Based Login WordPress plugin before 2.4.1 does not have CSRF checks in some places, which could allow attackers t

The Simple Banner WordPress plugin before 3.0.4 does not sanitise and escape some of its settings, which could allow hi

The Smart Maintenance Mode WordPress plugin before 1.5.2 does not sanitise and escape some of its settings, which could

The Product Labels For Woocommerce (Sale Badges) WordPress plugin before 1.5.9 does not sanitize and escape a parameter

The WP Tabs WordPress plugin before 2.2.7 does not sanitise and escape some of its settings, which could allow high pri

The Contact Form & SMTP Plugin for WordPress by PirateForms WordPress plugin before 2.6.0 does not sanitise and escape s

The Contact Form & SMTP Plugin for WordPress by PirateForms WordPress plugin before 2.6.0 does not sanitise and escape s

The Registrations for the Events Calendar WordPress plugin before 2.13.4 does not sanitise and escape some of its setti

The Quiz and Survey Master (QSM) WordPress plugin before 9.2.1 does not sanitise and escape some of its settings, which

The Product Labels For Woocommerce (Sale Badges) WordPress plugin before 1.5.11 does not sanitize and escape a parameter

The Slider by 10Web WordPress plugin before 1.2.62 does not sanitise and escape some of its settings, which could allow

The Slider by 10Web WordPress plugin before 1.2.62 does not sanitise and escape some of its settings, which could allow

The Form Maker by 10Web WordPress plugin before 1.15.30 does not sanitise and escape some of its settings, which could

The WordPress WP-Advanced-Search WordPress plugin before 3.3.9.3 does not sanitise and escape some of its settings, whic

The Stylish Price List WordPress plugin before 7.1.12 does not sanitise and escape some of its settings, which could al

An External Control of File Name or Path vulnerability in the APROL Web Portal used in B&R APROL <4.4-005P may allow an

The Job Postings WordPress plugin before 2.7.11 does not sanitise and escape some of its settings, which could allow hig

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this

A vulnerability has been found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by

A vulnerability, which was classified as critical, was found in PHPGurukul Old Age Home Management System 1.0. Affected

A vulnerability classified as critical has been found in mannaandpoem OpenManus up to 2025.3.13. This affects an unknown

An Improper Handling of Insufficient Permissions or Privileges vulnerability in scripts used in B&R APROL <4.4-00P5 may

An Incorrect Implementation of Authentication Algorithm and Exposure of Data Element to Wrong Ses-sion vulnerability in

An Exposure of Sensitive System Information to an Unauthorized Control Sphere and Initialization of a Resource with an I

An Allocation of Resources Without Limits or Throttling vulnerability in the operating system network configuration used

A Missing Authentication for Critical Function vulnerability in the GRUB configuration used B&R APROL <4.4-01 may allow

An Inclusion of Functionality from Untrusted Control Sphere vulnerability in the SSH server on B&R APROL <4.4-00P1 may a

An Incomplete Filtering of Special Elements vulnerability in scripts using the SSH server on B&R APROL <4.4-00P5 may all

An improper control of generation of code ('Code Injection') vulnerability in the AprolCreateReport component of B&R APR

An Incorrect Permission Assignment for Critical Resource vulnerability in the file system used in B&R APROL <4.4-01 may

An Improper Neutralization of Input During Web Page Generation vulnerability in the APROL Web Portal used in B&R APROL <

A Server-Side Request Forgery vulnerability in the APROL Web Portal used in B&R APROL <4.4-00P5 may allow an authenticat

A Server-Side Request Forgery vulnerability in the APROL Web Portal used in B&R APROL <4.4-00P5 may allow an unauthentic

A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014.