2025

The Forminator Forms WordPress plugin before 1.38.3 does not sanitise and escape some of its settings, which could allo

The Return Refund and Exchange For WooCommerce – Return Management System, RMA Exchange, Wallet And Cancel Order Feature

The Return Refund and Exchange For WooCommerce – Return Management System, RMA Exchange, Wallet And Cancel Order Feature

The Sensly Online Presence WordPress plugin through 0.6 does not sanitise and escape some of its settings, which could a

Out-of-bounds read vulnerability caused by improper checking of TCP MSS option values exists in Cente middleware TCP/IP

Docker daemon in Brocade SANnav before SANnav 2.3.1b runs without auditing. The vulnerability could allow a remote authe

musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv

Under certain error conditions at time of SANnav installation or upgrade, the encryption key can be written into and obt

IBM DevOps Deploy 8.0 through 8.0.1.4, 8.1 through 8.1.0.0 / IBM UrbanCode Deploy 7.0 through 7.0.5.25, 7.1 through 7.1.

CalInvocationHandler in Brocade SANnav before 2.3.1b logs sensitive information in clear text. The vulnerability could

A critical remote code execution (RCE) vulnerability exists in the web-based management interface of GatesAir Maxiva UAX

A critical information disclosure vulnerability exists in the web-based management interface of GatesAir Maxiva UAXT, VA

A session hijacking vulnerability exists in the web-based management interface of GatesAir Maxiva UAXT, VAXT transmitter

An issue in Docker-proxy v18.09.0 allows attackers to cause a denial of service.

In Perfex Crm < 3.2.1, an authenticated attacker can send a crafted HTTP POST request to the affected upload_sales_file

Monica 4.1.2 is vulnerable to Cross Site Scripting (XSS). A malicious user can create a malformed contact and use that c

A Stack buffer overflow in the arguments parameter in Immunity Inc. Immunity Debugger v1.85 allows attackers to execute

A Structured Exception Handler based buffer overflow vulnerability exists in Effectmatrix Total Video Converter Command

A stack-based buffer overflow vulnerability exists in Effectmatrix Total Video Converter Command Line (TVCC) 2.50 when a

An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6. A possible type confusion exists in the user

An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6 through 2021. A possible NULL pointer derefer

An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6. A possible heap buffer overflow exists in th

An issue was discovered in Mercedes Benz NTG (New Telematics Generation) 6 through 2021. A possible stack buffer overflo

ZF Roll Stability Support Plus (RSSPlus) is vulnerable to an authentication bypass vulnerability targeting determinist

An issue was discovered on Mercedes Benz NTG 6. A possible integer overflow exists in the user data import/export functi

Mercedes-Benz head-unit NTG6 has Ethernet pins on Base Board to connect module CSB. Attacker can connect to these pins a

Mercedes-Benz head-unit NTG6 has Ethernet pins on Base Board to connect module CSB. Attacker can connect to this pins an

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Inside file is encapsulat

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Inside profile folder the

The Mojave Inverter uses the GET method for sensitive information.

An attacker may modify the URL to discover sensitive information about the target network.

Zulip is an open source team chat application. A weekly cron job (added in 50256f48314250978f521ef439cafa704e056539) dem

mySCADA myPRO Manager is vulnerable to an OS command injection which could allow a remote attacker to execute arbitrar

The administrative web interface of mySCADA myPRO Manager can be accessed without authentication which could allow an

An attacker may inject commands via specially-crafted post requests.

With a specially crafted Python script, an attacker could send continuous startMeasurement commands over an unencrypted

An attacker could obtain firmware files and reverse engineer their intended use leading to loss of confidentiality and

mySCADA myPRO Manager is vulnerable to cross-site request forgery (CSRF), which could allow an attacker to obtain sens

mySCADA myPRO Manager stores credentials in cleartext, which could allow an attacker to obtain sensitive information.

The Qardio Arm iOS application exposes sensitive data such as usernames and passwords in a plist file. This allows an a

The Dingtian DT-R0 Series is vulnerable to an exploit that allows attackers to bypass login requirements by directly na

Wazuh SIEM version 4.8.2 is affected by a broken access control vulnerability. This issue allows the unauthorized creati

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. In case of parsing file,

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Some values of this table

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Some values of this table

Mercedes Benz head-unit NTG 6 contains functions to import or export profile settings over USB. During parsing you can t

The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user and/or modify the co

Integer Overflow or Wraparound vulnerability in Lexmark International CX, XC, CS, et. Al. (Postscript interpreter module

: Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Lexmark International CX, XC, CS, et. A

A heap-based memory vulnerability has been identified in the Postscript interpreter in various Lexmark devices. The vuln