2025

The Homey theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.4.3. This

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized access of data

A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been classified as critical. Af

A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0 and classified as critical. This issue

A vulnerability has been found in PHPGurukul Apartment Visitors Management System 1.0 and classified as critical. This v

A vulnerability classified as critical was found in PHPGurukul User Registration & Login and User Management System 3.3.

Privilege escalation in Installer and Recovery image handling in Google ChromeOS version 15786.48.2 on device allows an

A vulnerability classified as problematic has been found in code-projects Blood Bank System 1.0. Affected is an unknown

A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been classified as problematic. This a

ImageSharp is a 2D graphics API. An Out-of-bounds Write vulnerability has been found in the ImageSharp gif decoder, allo

A vulnerability was found in SourceCodester Best Employee Management System 1.0 and classified as critical. Affected by

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. Affected

A vulnerability was found in LinZhaoguan pb-cms 1.0.0 and classified as critical. This issue affects some unknown proces

A vulnerability has been found in huang-yk student-manage 1.0 and classified as problematic. This vulnerability affects

A vulnerability, which was classified as critical, has been found in s-a-zhd Ecommerce-Website-using-PHP 1.0. Affected b

crmeb CRMEB-KY v5.4.0 and before has a SQL Injection vulnerability at getRead() in /system/SystemDatabackupServices.php

The pairing API request handler in Microsoft HoloLens 1 (Windows Holographic) through 10.0.17763.3046 and HoloLens 2 (Wi

A vulnerability classified as critical was found in zhijiantianya ruoyi-vue-pro 2.4.1. Affected by this vulnerability is

A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. Affected is an

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been rated as critical. This issue a

An issue in account management interface in Netsweeper Server v.8.2.6 and earlier (fixed in v.8.2.7) allows unauthorized

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. This vuln

A vulnerability was found in s-a-zhd Ecommerce-Website-using-PHP 1.0. It has been classified as critical. This affects a

FastGPT is a knowledge-based platform built on the LLMs. Since the web crawling plug-in does not perform intranet IP ver

fleetdm/fleet is an open source device management, built on osquery. In vulnerable versions of Fleet, an attacker could

NocoDB is software for building databases as spreadsheets. The API endpoint related to the password reset function is vu

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap

Buffalo LS520D 4.53 is vulnerable to Arbitrary file read, which allows unauthenticated attackers to access the NAS web U

Incorrect access control in the KSRTC AWATAR app of Karnataka State Road Transport Corporation v1.3.0 allows to view sen

An arbitrary file upload vulnerability in the component /cms/CmsWebFileAdminController.java of PublicCMS v4.0.202406 all

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway

Group-Office is an enterprise CRM and groupware tool. This Stored XSS vulnerability exists where user input in the Name

Collabora Online is a collaborative online office suite based on LibreOffice. Macro support is disabled by default in Co

An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480

A vulnerability was found in s-a-zhd Ecommerce-Website-using-PHP 1.0 and classified as critical. Affected by this issue

A vulnerability has been found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by th

An issue was discovered in NRMM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990,

An issue was discovered in NRMM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990,

A vulnerability, which was classified as critical, was found in code-projects Blood Bank Management System 1.0. Affected

A vulnerability classified as problematic was found in ChestnutCMS 1.5.2. This vulnerability affects the function rename

In the Linux kernel, the following vulnerability has been resolved: seccomp: passthrough uretprobe systemcall without f

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE T

In the Linux kernel, the following vulnerability has been resolved: block: don't revert iter for -EIOCBQUEUED blkdev_r

In the Linux kernel, the following vulnerability has been resolved: PCI: Avoid putting some root ports into D3 on TUXED

In the Linux kernel, the following vulnerability has been resolved: landlock: Handle weird files A corrupted filesyste

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x17

ServiceNow has addressed an authorization bypass vulnerability that was identified in the Washington release of the Now

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Stop active perfmon if it is being destroy

In the Linux kernel, the following vulnerability has been resolved: tomoyo: don't emit warning in tomoyo_write_control(

In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: scm: Fix missing read barrier in qc