2025

Cross-Site Request Forgery (CSRF) vulnerability in Iqonic Design WPBookit wpbookit allows Stored XSS.This issue affects

Unifiedtransform 2.0 is vulnerable to Cross Site Scripting (XSS) in the Create assignment function.

Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation, which allows teachers to update the pers

Cleartext Storage of Sensitive Information in an Environment Variable, Weak Password Recovery Mechanism for Forgotten Pa

A vulnerability, which was classified as critical, was found in HDF5 1.14.6. Affected is the function H5SM_delete of the

A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. This issue

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Apache OFBiz. This issue affects

Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows students to modify rules for exams. The aff

Unifiedtransform 2.0 is vulnerable to Incorrect Access Control which allows viewing attendance list for all class sectio

A vulnerability, that could result in Remote Code Execution (RCE), has been found in PlotAI. Lack of validation of LLM-g

An issue in redoxOS relibc before commit 98aa4ea5 allows a local attacker to cause a denial of service via the round_up_

A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects t

A vulnerability was found in PyTorch 2.6.0+cu124. It has been rated as problematic. Affected by this issue is the functi

A vulnerability was found in PyTorch 2.6.0+cu124. It has been declared as critical. Affected by this vulnerability is th

picklescan before 0.0.23 fails to detect malicious pickle files inside PyTorch model archives when certain ZIP file flag

picklescan before 0.0.23 is vulnerable to a ZIP archive manipulation attack that causes it to crash when attempting to e

A vulnerability was found in Beijing Zhide Intelligent Internet Technology Modern Farm Digital Integrated Management Sys

A vulnerability in OTRS Application Server allows session hijacking due to missing attributes for sensitive cookie sett

The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an im

The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an im

Insufficient Verification of Data Authenticity vulnerability in GE Vernova UR IED family devices allows an authenticated

Missing Authentication for Critical Function vulnerability in GE Vernova Enervista UR Setup application allows Authentic

Use of Hard-coded Credentials vulnerability in GE Vernova EnerVista UR Setup allows Privilege Escalation. The local user

CWE-282 "Improper Ownership Management" in GE Vernova EnerVista UR Setup allows Authentication Bypass.  The software's s

A CWE-15 "External Control of System or Configuration Setting" in GE Vernova UR IED family devices from version 7.0 up t

The C&Cm@il from HGiga has a Stored Cross-Site Scripting (XSS) vulnerability, allowing remote attackers with regular pri

The Gtbabel WordPress plugin before 6.6.9 does not ensure that the URL to perform code analysis upon belongs to the blog

The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Cross-Site Request For

Improper Certificate Validation (CWE-295) in the Gallagher Milestone Integration Plugin (MIP) permits unauthenticated me

Improper Certificate Validation (CWE-295) in the Gallagher Command Centre SALTO integration allowed an attacker to spoof

A vulnerability classified as problematic was found in ftcms 2.1. Affected by this vulnerability is an unknown functiona

A vulnerability classified as critical has been found in ftcms 2.1. Affected is an unknown function of the file /admin/i

A vulnerability was found in dayrui XunRuiCMS up to 4.6.3. It has been rated as problematic. This issue affects some unk

A vulnerability was found in OpenXE up to 1.12. It has been declared as problematic. This vulnerability affects unknown

A vulnerability was found in Mage AI 0.9.75. It has been classified as problematic. This affects an unknown part. The ma

A vulnerability was found in JoomlaUX JUX Real Estate 3.4.0 on Joomla. It has been classified as problematic. Affected i

A vulnerability was found in JoomlaUX JUX Real Estate 3.4.0 on Joomla and classified as critical. This issue affects som

A vulnerability has been found in Control iD RH iD 25.2.25.0 and classified as problematic. This vulnerability affects u

A vulnerability, which was classified as problematic, was found in Control iD RH iD 25.2.25.0. This affects an unknown p

A vulnerability, which was classified as problematic, has been found in GeSHi up to 1.0.9.1. Affected by this issue is t

A vulnerability classified as problematic was found in Thinkware Car Dashcam F800 Pro up to 20250226. Affected by this v

Bypass/Injection vulnerability in Apache Camel components under particular conditions. This issue affects Apache Camel:

A vulnerability classified as critical has been found in Thinkware Car Dashcam F800 Pro up to 20250226. Affected is an u

A vulnerability was found in Thinkware Car Dashcam F800 Pro up to 20250226. It has been rated as problematic. This issue

A vulnerability was found in Thinkware Car Dashcam F800 Pro up to 20250226. It has been declared as problematic. This vu

A vulnerability was found in Quantico Tecnologia PRMV 6.48. It has been classified as critical. This affects an unknown

A vulnerability was found in Beijing Founder Electronics Founder Enjoys All-Media Acquisition and Editing System 3.0 and

A vulnerability has been found in Beijing Founder Electronics Founder Enjoys All-Media Acquisition and Editing System 3.

A vulnerability, which was classified as critical, was found in zzskzy Warehouse Refinement Management System 3.1. Affec

The Contact Us By Lord Linus WordPress plugin through 2.6 does not have CSRF check in some places, and is missing saniti