2025

The Subscribe2 – Form, Email Subscribers & Newsletters plugin for WordPress is vulnerable to Stored Cross-Site Scripting

A vulnerability was found in Synway SMG Gateway Management Software up to 20250204. It has been rated as critical. This

In barebox before 2025.01.0, ext4fs_read_symlink has an integer overflow for zalloc (adding one to an le32 variable) via

In barebox before 2025.01.0, request2size in common/dlmalloc.c has an integer overflow, a related issue to CVE-2024-5725

A vulnerability was found in kasuganosoras Pigeon 1.0.177. It has been declared as critical. This vulnerability affects

The Booking Package plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the locale parameter in all

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.

Rufus is a utility that helps format and create bootable USB flash drives. A DLL hijacking vulnerability in Rufus 4.6.22

A NULL pointer dereference in the component /libsrc/dcrleccd.cc of DCMTK v3.6.9+ DEV allows attackers to cause a Denial

DCMTK v3.6.9+ DEV was discovered to contain a buffer overflow via the component /dcmimgle/diinpxt.h.

FFmpeg git master before commit c08d30 was discovered to contain a memory leak in the avformat_free_context function in

A buffer overflow in DCMTK git master v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DCM

FFmpeg git master before commit fd1772 was discovered to contain a NULL pointer dereference via the component libavforma

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To

A heap buffer overflow vulnerability in FFmpeg before commit 4bf784c allows attackers to trigger a memory corruption via

A reachable assertion in FFmpeg git-master commit N-113007-g8d24a28d06 allows attackers to cause a Denial of Service (Do

sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for s

Integer overflows in memory allocation in Das U-Boot before 2025.01-rc1 occur for a crafted squashfs filesystem via sbrk

A stack consumption issue in sqfs_size in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with de

An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 var

An integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem wi

An integer overflow in sqfs_inode_size in Das U-Boot before 2025.01-rc1 occurs in the symlink size calculation via a cra

The Wonder Video Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wonderplugin_v

A buffer overflow vulnerability was discovered in D-Link DSL-3782 v1.01 via the destination, netmask, and gateway parame

An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the public_type parameter. This vulner

An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the samba_wg and samba_nbn parameters.

An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the inIP, insPort, inePort, exsPort, e

A buffer overflow vulnerability was discovered in D-Link DSL-3782 v1.01 via the sstartip, sendip, dstartip, and dendip p

A buffer overflow vulnerability was discovered in D-Link DSL-3782 v1.01, triggered by the destination, netmask and gatew

FFmpeg git-master before commit d5873b was discovered to contain a memory leak in the component libavutil/iamf.c.

FFmpeg git-master before commit d5873b was discovered to contain a memory leak in the component libavutil/mem.c.

Insufficient tracking and releasing of allocated used memory in libx264 git master allows attackers to execute arbitrary

FFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain a segmentation violation via the component /libavcodec/

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleID

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerab

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Path Traversal vulnera

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Path Traversal vulnera

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerab

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. An OS Command Injection

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerab

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerab

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerab

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerab

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerab

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerab

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerab

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerab

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in awsm.in Drivr Lite

Missing Authorization vulnerability in QuanticaLabs MediCenter - Health Medical Clinic medicenter allows Exploiting Inco

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metada