2025

An XSS issue was discovered in the Bootstrap 5 Lite theme before 1.x-1.0.3 for Backdrop CMS. It doesn't sufficiently san

An XSS issue was discovered in the Link iframe formatter module before 1.x-1.1.1 for Backdrop CMS. It doesn't sufficient

An issue was discovered in the Mail Disguise module before 1.x-1.0.5 for Backdrop CMS. It enables a website to obfuscate

An issue was discovered in the Masquerade module before 1.x-1.0.1 for Backdrop CMS. It allows people to temporarily swit

An issue in Docmosis Tornado v.2.9.7 and before allows a remote attacker to execute arbitrary code via a crafted script

Trimble SketchUp SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows

The UI performs the wrong action in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing

Python JSON Logger is a JSON Formatter for Python Logging. Between 30 December 2024 and 4 March 2025 Python JSON Logger

XWiki Confluence Migrator Pro helps admins to import confluence packages into their XWiki instance. The homepage of the

IBM Aspera Shares 1.9.9 through 1.10.0 PL7 is vulnerable to an XML external entity injection (XXE) attack when processin

A command injection vulnerability has been reported to affect QHora. If exploited, the vulnerability could allow remote

An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, t

A double free vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulner

An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, t

A server-side request forgery (SSRF) vulnerability has been reported to affect QuLog Center. If exploited, the vulnerabi

A buffer overflow vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability co

A time-of-check time-of-use (TOCTOU) race condition vulnerability has been reported to affect several product versions.

An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP o

A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the

An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP o

An improper certificate validation vulnerability has been reported to affect Helpdesk. If exploited, the vulnerability c

A command injection vulnerability has been reported to affect QHora. If exploited, the vulnerability could allow remote

A files or directories accessible to external parties vulnerability has been reported to affect File Station 5. If explo

An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, t

An exposure of sensitive information vulnerability has been reported to affect product. If exploited, the vulnerability

A buffer overread can occur in the CPC application when operating in full duplex SPI upon receiving an invalid packet ov

IBM Control Center 6.2.1 through 6.3.1 is vulnerable to an external service interaction attack, caused by improper valid

IBM Control Center 6.2.1 through 6.3.1 is vulnerable to HTTP header injection, caused by improper validation of input by

XWiki Confluence Migrator Pro helps admins to import confluence packages into their XWiki instance. A user that doesn't

Vue I18n is the internationalization plugin for Vue.js. @intlify/message-resolver and @intlify/vue-i18n-core are vulnera

Cognita is a RAG (Retrieval Augmented Generation) Framework for building modular, open source applications for productio

Cognita is a RAG (Retrieval Augmented Generation) Framework for building modular, open source applications for productio

axios is a promise based HTTP client for the browser and node.js. The issue occurs when passing absolute URLs rather tha

Incorrect Access Control in Unifiedtransform 2.X leads to Privilege Escalation allowing teachers to create syllabus.

A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by this is

A vulnerability has been found in StarSea99 starsea-mall 1.0/2.X and classified as critical. Affected by this vulnerabil

A vulnerability, which was classified as critical, was found in PHPGurukul Pre-School Enrollment System up to 1.0. Affec

A vulnerability, which was classified as problematic, has been found in StarSea99 starsea-mall 1.0. This issue affects s

A vulnerability classified as problematic was found in StarSea99 starsea-mall 1.0. This vulnerability affects unknown co

A vulnerability classified as problematic has been found in StarSea99 starsea-mall 1.0. This affects an unknown part of

A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been classified as p

SMB forced authentication vulnerability in versions prior to 2025.35.000 of Sage 200 Spain. This vulnerability allows an

Pass-Back vulnerability in versions prior to 2025.35.000 of Sage 200 Spain. This vulnerability allows an authenticated a

The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to blind SQL Injection via the 'search' parameter in a

The Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins plugin for WordPress i

The Reservit Hotel WordPress plugin before 3.0 does not sanitise and escape some of its settings, which could allow high

The WPGet API – Connect to any external REST API plugin for WordPress is vulnerable to Server-Side Request Forgery in al

The Advanced File Manager — Ultimate WordPress File Manager and Document Library Plugin plugin for WordPress is vulnerab

The WordPress Activity O Meter WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting i

The VK Blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including,