2025

A vulnerability exists in the VideONet product included in the listed System 800xA versions, where VideONet is used.  A

Improper host validation in the certificate validation component in Devolutions Remote Desktop Manager on 2024.3.19 and

A vulnerability was found in GNU Binutils 2.43 and classified as problematic. Affected by this issue is the function lin

A vulnerability has been found in GNU Binutils 2.43 and classified as problematic. Affected by this vulnerability is the

Missing certificate validation in Devolutions Remote Desktop Manager on macOS, iOS, Android, Linux allows an attacker to

Reflected Cross-Site Scripting (XSS) vulnerability in Kelio Visio 1, Kelio Visio X7 and Kelio Visio X4, in versions betw

Path-Traversal vulnerability in Revolution Pi version 2022-07-28-revpi-buster from KUNBUS GmbH. This vulnerability could

OS Command Injection vulnerability in Revolution Pi version 2022-07-28-revpi-buster from KUNBUS GmbH. This vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Felix Webco

This vulnerability exists in Tapo C500 Wi-Fi camera due to hard-coded RSA private key embedded within the device firmwar

In the Linux kernel, the following vulnerability has been resolved: platform/x86: lenovo-yoga-tab2-pro-1380-fastcharger

In the Linux kernel, the following vulnerability has been resolved: gpio: xilinx: Convert gpio_lock to raw spinlock ir

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Don't enable interrupts in its_

The Super Store Finder plugin for WordPress is vulnerable to SQL Injection via the ‘ssf_wp_user_name’ parameter in all v

The DWT - Directory & Listing WordPress Theme is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up

The WP Directorybox Manager plugin for WordPress is vulnerable to authentication bypass in versions up to, and including

IBM DevOps Deploy 8.0 through 8.0.1.4, 8.1 through 8.1.0.0 and IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 thro

A vulnerability, which was classified as critical, was found in CoinRemitter 0.0.1/0.0.2 on OpenCart. This affects an un

The Simple add pages or posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, a

A vulnerability, which was classified as critical, has been found in Dreamvention Live AJAX Search Free up to 1.0.6 on O

A vulnerability classified as problematic was found in RT-Thread up to 5.1.0. Affected by this vulnerability is the func

Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into

Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into

A vulnerability classified as problematic has been found in newbee-mall 1.0. Affected is the function save of the file /

Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into

SFTPGo is an open source, event-driven file transfer solution. SFTPGo supports execution of a defined set of commands vi

A vulnerability was found in taisan tarzan-cms up to 1.0.0. It has been rated as critical. This issue affects the functi

SQL injection vulnerability in Beijing Guoju Information Technology Co., Ltd JeecgBoot v.3.7.2 allows a remote attacker

An issue in TPLINK TL-WPA 8630 TL-WPA8630(US)_V2_2.0.4 Build 20230427 allows a remote attacker to execute arbitrary code

A reflected Cross-Site Scripting (XSS) vulnerability has been identified in the LDAP User Manager <= ce92321, specifical

A reflected Cross-Site Scripting (XSS) vulnerability exists in /webscan/sqlmap/index.html in QingScan <=v1.8.0. The vuln

An issue in Brainasoft Braina v2.8 allows a remote attacker to obtain sensitive information via the chat window function

An issue in trojan v.2.0.0 through v.2.15.3 allows a remote attacker to escalate privileges via the initialization inter

vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Maliciously constructed statements

pimcore/admin-ui-classic-bundle provides a Backend UI for Pimcore. In affected versions an error message discloses exist

An error when handling authorization related to the import / export interfaces on the RISC Platform prior to the saas-20

An error related to the 2-factor authorization (2FA) on the RISC Platform prior to the saas-2021-12-29 release can poten

Utilization of a module presented a security risk by allowing the deserialization of untrusted/user supplied data. This

A vulnerability classified as critical has been found in CmsEasy 7.7.7.9. This affects the function deletedir_action/res

A vulnerability was found in SiberianCMS 4.20.6. It has been rated as problematic. Affected by this issue is some unknow

A vulnerability has been found in D-Link DHP-W310AV 1.04 and classified as critical. This vulnerability affects unknown

The WP ALL Export Pro plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege

An improper access control vulnerability may allow privilege escalation.This issue affects:  * ELI 380 Resting Elect

A use of hard-coded password vulnerability may allow authentication abuse.This issue affects ELI 380 Resting Electrocard

The WP All Import Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4

The WP All Import Pro plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includ

The WP ALL Export Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including,

An issue in DataEase v1 allows an attacker to execute arbitrary code via the user account and password components.

Incorrect Access Control in the Preview Function of Gleamtech FileVista 9.2.0.0 allows remote attackers to gain unauthor

Directory Traversal in File Upload in Gleamtech FileVista 9.2.0.0 allows remote attackers to achieve Code Execution, Inf