2025

The HT Event – WordPress Event Manager Plugin for Elementor plugin for WordPress is vulnerable to Sensitive Information

The WP MediaTagger WordPress plugin through 4.1.1 does not sanitise and escape a parameter before outputting it back in

The WP MediaTagger WordPress plugin through 4.1.1 does not validate and escape some of its shortcode attributes before o

The OPSI Israel Domestic Shipments WordPress plugin through 2.6.3 does not sanitise and escape a parameter before output

The Zalomení WordPress plugin through 1.5 does not sanitise and escape some of its settings, which could allow high priv

The Ninja Tables WordPress plugin before 5.0.17 does not sanitize and escape a parameter before outputting it back in t

The Canvasflow for WordPress plugin through 1.5.5 does not sanitise and escape a parameter before outputting it back in

The Contact Form and Calls To Action by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

The Ticketmeo – Sell Tickets – Event Ticketing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to Limit

The Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for WordPress is vulnerable t

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Reflected

Software installed and run as a non-privileged user may conduct improper GPU system calls to access OOB kernel memory.

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kern

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kern

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kern

The SeatReg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'seatreg' shortcode in al

Software installed and run as a non-privileged user may conduct improper read/write operations on imported/exported DMA

The Live2DWebCanvas plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validati

The Gosign – Posts Slider Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'posts-slider-

The WPRadio – WordPress Radio Streaming Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

The Frictionless plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'frictionless_form'

An authenticated user who has read access to the juju controller model, may construct a remote request to download an ar

Ubuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default.

gdbus setgid privilege escalation

This vulnerability allows network-adjacent attackers to create arbitrary files on affected installations of Pioneer DMH-

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint

Users can consume unlimited disk space in /var/crash

SXF Common Library handles input data improperly. If a product using the library reads a crafted file, the product may b

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Silicon Labs

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Silicon Labs

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint

This vulnerability allows network-adjacent attackers to compromise transport security on affected installations of Charg

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine Halo9

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Alpine Halo9 d

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sili

This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations o

This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected i

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6 prior to 16.9.7, starting from 16

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.5 prior to 16.9.7, starting from 16

pwn.college is an education platform to learn about, and practice, core cybersecurity concepts in a hands-on fashion. In

pwn.college is an education platform to learn about, and practice, core cybersecurity concepts in a hands-on fashion. Mi

A vulnerability was found in code-projects Chat System up to 1.0. It has been declared as critical. Affected by this vul

A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unkn

A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unkn

Sante PACS Server URL path Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote attackers

Sante PACS Server DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability. This vulnerability allows rem