2025

A vulnerability has been found in CmsEasy 7.7.7.9 and classified as problematic. Affected by this vulnerability is the f

A vulnerability, which was classified as problematic, was found in CmsEasy 7.7.7.9. Affected is the function deleteimg_a

DataSourceResource.java in the SpagoBI API support in Knowage Server in KNOWAGE before 8.1.30 does not ensure that java:

libarchive through 3.7.7 has a heap-based buffer over-read in header_gnu_longlink in archive_read_support_format_tar.c v

A vulnerability has been found in FastCMS up to 0.1.5 and classified as problematic. This vulnerability affects unknown

The Web GUI configuration panel of Hirsch (formerly Identiv and Viscount) Enterphone MESH through 2024 ships with defaul

The Responsive Plus – Starter Templates, Advanced Features and Customizer Settings for Responsive Theme plugin for WordP

Bit Assist plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.5.2 via the file

The WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts plugin for Wo

The LTL Freight Quotes – Estes Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropship_edit_id' an

The Team – Team Members Showcase Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capab

The DirectoryPress Frontend plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Imag

The WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts plugin for Wo

The s2Member Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 241216

A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.3 for Joomla allows authenticated attackers (admi

A SQL injection vulnerability in the JS Jobs plugin versions 1.1.5-1.4.3 for Joomla allows authenticated attackers (admi

The Media Library Folders plugin for WordPress is vulnerable to unauthorized plugin settings change due to a missing cap

The Front End Users plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's forgot-password s

The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in

The Oliver POS – A WooCommerce Point of Sale (POS) plugin for WordPress is vulnerable to Sensitive Information Exposure

The Maps Plugin using Google Maps for WordPress WordPress plugin before 1.9.4 does not sanitise and escape some of its

The Maps Plugin using Google Maps for WordPress WordPress plugin before 1.9.4 does not sanitise and escape some of its

Versions of the package jsonpath-plus before 10.3.0 are vulnerable to Remote Code Execution (RCE) due to improper input

Use after free in Navigation in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentially exploit he

Inappropriate implementation in Browser UI in Google Chrome on Android prior to 133.0.6943.98 allowed a remote attacker

Use after free in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentially exploit heap corru

Monero through 0.18.3.4 before ec74ff4 does not have response limits on HTTP server connections.

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

If Brocade Fabric OS before Fabric OS 9.2.0 configuration settings are not set to encrypt SNMP passwords, then the SNMP

Implementation of the Simple Network Management Protocol (SNMP) operating on the Brocade 6547 (FC5022) embedded switch

Brocade SANnav OVA before SANnav 2.3.1b enables SHA1 deprecated setting for SSH for port 22.

Brocade SANnav before SANnav 2.3.1b enables weak TLS ciphers on ports 443 and 18082. In case of a successful exploit,

The vulnerability may allow a remote low priviledged attacker to run arbitrary shell commands by using lower-level funct

The vulnerability may allow a remote low priviledged attacker to run arbitrary shell commands by manipulating the firmwa

For a brief summary of Xapi terminology, see: https://xapi-project.github.io/xen-api/overview.html#object-model-over

Unprotected alternative channel of return branch target prediction in some Intel(R) Processors may allow an authorized u

Generation of weak initialization vector in an Intel(R) IPP Cryptography software library before version 2021.5 may allo

Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization design

Label Studio is an open source data labeling tool. Prior to version 1.16.0, Label Studio's S3 storage integration featur

Label Studio is an open source data labeling tool. Prior to version 1.16.0, Label Studio's `/projects/upload-example` en

@octokit/request sends parameterized requests to GitHub’s APIs with sensible defaults in browsers and Node. Starting in

@octokit/request-error is an error class for Octokit request errors. Starting in version 1.0.0 and prior to version 6.1.

@octokit/plugin-paginate-rest is the Octokit plugin to paginate REST API endpoint responses. For versions starting in 1.

@octokit/endpoint turns REST API endpoints into generic request options. Starting in version 4.1.0 and prior to version

Mattermost versions 9.11.x <= 9.11.6 fail to filter out DMs from the deleted channels endpoint which allows an attacker

Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remot

Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remot

Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remot

A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the manage-employee.php page of Kashipara Online Att