2025

A vulnerability was found in libzvbi up to 0.2.43. It has been declared as problematic. Affected by this vulnerability i

A vulnerability was found in libzvbi up to 0.2.43. It has been classified as problematic. Affected is the function vbi_s

Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: fro

Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: fro

Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: fro

Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: fro

Improper Input Validation vulnerability in ZTE GoldenDB allows Input Data Manipulation.This issue affects GoldenDB: from

The Qubely – Advanced Gutenberg Blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versi

The Coronavirus (COVID-19) Notice Message WordPress plugin through 1.1.2 does not sanitise and escape some of its settin

The Countdown Timer WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in t

The S3Bubble Media Streaming (AWS|Elementor|YouTube|Vimeo Functionality) WordPress plugin through 8.0 does not sanitise

The SEO Tools WordPress plugin through 4.0.7 does not sanitise and escape a parameter before outputting it back in the p

The WP Login Control WordPress plugin through 2.0.0 does not sanitise and escape a parameter before outputting it back i

The Social Share Buttons, Social Sharing Icons, Click to Tweet — Social Media Plugin by Social Snap WordPress plugin thr

The XV Random Quotes WordPress plugin through 1.40 does not have CSRF check in place when updating its settings, which c

The XV Random Quotes WordPress plugin through 1.40 does not sanitise and escape a parameter before outputting it back in

The ProductDyno plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘res’ parameter in all vers

The The WPCS – WordPress Currency Switcher Professional plugin for WordPress is vulnerable to arbitrary shortcode execut

Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: fro

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in a

The Appsero Helper plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including

A post-authentication command injection vulnerability in the ”zyUtilMailSend” function of the Zyxel AX7501-B1 firmware v

A post-authentication command injection vulnerability in the "ZyEE" function of the Zyxel EX5601-T1 firmware version V5.

A post-authentication command injection vulnerability in the "DNSServer” parameter of the diagnostic function in the Zyx

The Manage Bank Statements in SAP S/4HANA does not perform required access control checks for an authenticated user to c

Due to insufficient input validation, SAP Commerce (Swagger UI) allows an unauthenticated attacker to inject the malicio

The Manage Bank Statements in SAP S/4HANA allows authenticated attacker to bypass certain functionality restrictions of

The eDocument Cockpit (Inbound NF-e) in SAP Electronic Invoicing for Brazil allows an authenticated attacker with certai

User management functionality in SAP NetWeaver Application Server Java is vulnerable to Stored Cross-Site Scripting (XSS

Under certain conditions, an SSRF vulnerability in SAP CRM and SAP S/4HANA (Interaction Center) allows an attacker with

Due to missing authorization check, SAP NetWeaver (ABAP Class Builder) allows an attacker to gain higher access levels t

SAP Fiori applications using the posting library fail to properly configure security settings during the setup process,

SAP NetWeaver Application Server ABAP does not sufficiently encode user-controlled inputs, leading to DOM-basedCross-Sit

The Service Layer in SAP Business One, allows attackers to potentially gain unauthorized access and impersonate other us

OData Service in Manage Purchasing Info Records does not perform necessary authorization checks for an authenticated use

SAP Just In Time(JIT) does not perform necessary authorization checks for an authenticated user, allowing attacker to es

SAP BusinessObjects Business Intelligence Platform (Web Intelligence) contains a deprecated web application endpoint tha

SAP Business Warehouse (Process Chains) allows an attacker to manipulate the process execution due to missing authorizat

SAP NetWeaver Application Server ABAP allows malicious scripts to be executed in the application, potentially leading to

SAP NetWeaver Enterprise Portal OBN does not perform proper authentication check for a particular configuration setting.

An authenticated user with low privileges can exploit a missing authorization check in an IBS module of FS-RBD, allowing

Due to improper error handling in SAP Business Objects Business Intelligence Platform, technical details of the applicat

SAP Web Dispatcher and Internet Communication Manager allow an attacker with administrative privileges to enable debuggi

SAP BusinessObjects Business Intelligence Platform allows an attacker to inject JavaScript code in Web Intelligence repo

IBM Common Cryptographic Architecture 7.0.0 through 7.5.51 could allow an authenticated user to cause a denial of servic

IBM Common Cryptographic Architecture 7.0.0 through 7.5.51 could allow an attacker to obtain sensitive information due

IBM Common Cryptographic Architecture 7.0.0 through 7.5.51 could allow a remote attacker to obtain sensitive informa

Crypt::Random Perl package 1.05 through 1.55 may use rand() function, which is not cryptographically strong, for cryptog

In Nintex Automation 5.6 and 5.7 before 5.8, the K2 SmartForms Designer folder has configuration files (web.config) cont

Nintex Automation 5.6 and 5.7 before 5.8 has insecure deserialization of user input.