2025

A web page could trick a user into setting that site as the default handler for a custom URL protocol. This vulnerabilit

It was possible to interrupt the processing of a RegExp bailout and run additional JavaScript, potentially triggering ga

On 64-bit CPUs, when the JIT compiles WASM i32 return values they can pick up bits from left over memory. This can poten

An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access. Onl

It was possible to cause a use-after-free in the content process side of a WebTransport connection, leading to a potenti

On Windows, a compromised content process could use bad StreamData sent over AudioIPC to trigger a use-after-free in the

A vulnerability classified as problematic was found in Open5GS up to 2.7.2. Affected by this vulnerability is the functi

VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGF

VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trig

VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds w

The Ultimate WordPress Auction Plugin plugin for WordPress is vulnerable to unauthorized access to functionality in all

The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

There is a Hard-coded Cryptographic Key in Docusnap 13.0.1440.24261, and earlier and later versions. This key can be use

The Structured Content (JSON-LD) #wpsc plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin'

The Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations plugin for

The Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations plugin for

The Wallet System for WooCommerce – Wallet, Wallet Cashback, Refunds, Partial Payment, Wallet Restriction plugin for Wor

The Wallet System for WooCommerce – Wallet, Wallet Cashback, Refunds, Partial Payment, Wallet Restriction plugin for Wor

Vulnerability of improper access permission in the process management module Impact: Successful exploitation of this vul

Vulnerability of improper access permission in the HDC module Impact: Successful exploitation of this vulnerability may

Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability

Multi-thread problem vulnerability in the package management module Impact: Successful exploitation of this vulnerabilit

Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability

Permission management vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may

Multi-concurrency vulnerability in the media digital copyright protection module Impact: Successful exploitation of this

Permission verification bypass vulnerability in the notification module Impact: Successful exploitation of this vulnerab

Permission bypass vulnerability in the window module Impact: Successful exploitation of this vulnerability may affect se

NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /

During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Devi

During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the ACAP Appli

Dzmitry Lukyanenka, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API param.cgi was vulnerable to a

51l3nc3, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API mediaclip.cgi did not have a sufficient

Girishunawane, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API dynamicoverlay.cgi did not have a

The Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10 retrieves client IP addresses from potentially untr

A vulnerability has been found in PHPGurukul Restaurant Table Booking System 1.0 and classified as critical. This vulner

A vulnerability, which was classified as problematic, was found in SourceCodester Employee Management System 1.0. This a

A vulnerability, which was classified as problematic, has been found in code-projects Blood Bank System 1.0. Affected by

The Newscrunch theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check in the news

The Newscrunch theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through o

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through u

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through o

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through u

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through u

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through o

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through buffer overflow.

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through buffer overflow.

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.