2025

The SupportCandy – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Insecure Direct Objec

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: avoid garbage value in panthor_ioctl_d

In the Linux kernel, the following vulnerability has been resolved: amdkfd: properly free gang_ctx_bo when failed to in

In the Linux kernel, the following vulnerability has been resolved: cpufreq/amd-pstate: Fix cpufreq_policy ref counting

In the Linux kernel, the following vulnerability has been resolved: thermal/netlink: Prevent userspace segmentation fau

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Load DR6 with guest value only before ent

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: core: flush gadget workqueue after dev

In the Linux kernel, the following vulnerability has been resolved: io_uring/kbuf: reallocate buf lists on upgrade IOR

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_midi: fix MIDI Streaming descriptor

The InWave Jobs plugin for WordPress is vulnerable to privilege escalation via password reset in all versions up to, and

The Eventer - WordPress Event & Booking Manager Plugin plugin for WordPress is vulnerable to SQL Injection via the reg_i

The School Management System for Wordpress plugin for WordPress is vulnerable to privilege escalation via account takeov

The Platform.ly for WooCommerce plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions

The Hero Maps Premium plugin for WordPress is vulnerable to SQL Injection via several AJAX actions in all versions up to

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Ref

The Golo - City Travel Guide WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeo

The School Management System for Wordpress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the

The School Management System for Wordpress plugin for WordPress is vulnerable to unauthorized loss of data due to a miss

The School Management System for Wordpress plugin for WordPress is vulnerable to SQL Injection via the 'view-attendance'

The School Management System for Wordpress plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of

The CS Framework plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 6.9 via

The CS Framework plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation

The Ultimate Video Player WordPress & WooCommerce Plugin plugin for WordPress is vulnerable to Directory Traversal in al

A vulnerability was discovered in the Arctera InfoScale 7.0 through 8.0.2 where a .NET remoting endpoint can be exploite

Dell ThinOS 2411 and prior, contains an Improper Neutralization of Special Elements used in a Command ('Command Injectio

The UiPress lite | Effortless custom dashboards, admin themes and pages plugin for WordPress is vulnerable to unauthoriz

The Flexmls® IDX Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'idx_frame' s

The Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress plugin for WordPress is vulnerable to

Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory.

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger a crash of the FW r

The WPCOM Member plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.7.5

The Flex Mag - Responsive WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data th

The CURCY - WooCommerce Multi Currency - Currency Switcher plugin for WordPress is vulnerable to SQL Injection via the '

The Wishlist plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wishlist_button' shortc

ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation, resulting in out-of-bounds acc

ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.

A vulnerability was found in projectworlds Life Insurance Management System 1.0 and classified as critical. This issue a

A vulnerability has been found in projectworlds Life Insurance Management System 1.0 and classified as critical. This vu

A vulnerability, which was classified as critical, was found in projectworlds Life Insurance Management System 1.0. This

A vulnerability, which was classified as critical, has been found in projectworlds Life Insurance Management System 1.0.

A vulnerability classified as critical was found in projectworlds Life Insurance Management System 1.0. Affected by this

A vulnerability classified as critical has been found in projectworlds Life Insurance Management System 1.0. Affected is

A vulnerability was found in code-projects Online Ticket Reservation System 1.0. It has been declared as problematic. Th

A vulnerability was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. It has been classified as critical. This

There is a configuration defect vulnerability in ZTELink 5.4.9 for iOS. This vulnerability is caused by a flaw in the Wi

A vulnerability was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0 and classified as critical. Affected by th

A vulnerability has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0 and classified as critical. Affected

A vulnerability, which was classified as critical, was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affect

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. Affected

The Homey theme for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.4.3. This is du