2025

An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authentic

IBM App Connect Enterprise Certified Container 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.

An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authent

An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authent

An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authentic

The WP Image Uploader plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'file' parameter in a

The The Contact Form & SMTP Plugin for WordPress by PirateForms plugin for WordPress is vulnerable to arbitrary shortcod

The Clinked Client Portal plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'clinked-lo

The Simple:Press Forum plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all

A vulnerability in the NetExtender Windows client log export function allows unauthorized access to sensitive Windows sy

Dell NetWorker, version(s) prior to 19.11.0.3, all versions of 19.10 & prior versions contain(s) an Unquoted Search Path

The VR-Frases (collect & share quotes) plugin for WordPress is vulnerable to SQL Injection via several parameters in all

The VR-Frases (collect & share quotes) plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via several

Privilege escalation vulnerability has been found in Wondershare Dr.Fone version 13.5.21. This vulnerability could allow

The CP Contact Form with PayPal plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to,

The Responsive Blocks – WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via

The WooCommerce Wishlist (High customization, fast setup,Free Elementor Wishlist, most features) plugin for WordPress is

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site S

The Stratum – Elementor Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image

The Event Tickets and Registration plugin for WordPress is vulnerable to Insecure Direct Object Reference in all version

The EthereumICO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ethereum-ico shortcod

The Bulk Me Now! WordPress plugin through 2.0 does not have CSRF checks in some places, which could allow attackers to m

The Bulk Me Now! WordPress plugin through 2.0 does not validate and escape some of its shortcode attributes before outpu

The Bulk Me Now! WordPress plugin through 2.0 does not sanitise and escape a parameter before outputting it back in the

The tourmaster WordPress plugin before 5.3.5 does not escape generated URLs before outputting them in attributes, leadin

The goodlayers-core WordPress plugin before 2.1.3 allows users with a subscriber role and above to upload SVGs containin

The Tracking Code Manager WordPress plugin before 2.4.0 does not sanitise and escape some of its metabox settings when o

Dell Networking Switches running Enterprise SONiC OS, version(s) prior to 4.4.1 and 4.2.3, contain(s) an Insertion of Se

In some cases, the ktrace facility will log the contents of kernel structures to userspace. In one such case, ktrace du

When etcupdate encounters conflicts while merging files, it saves a version containing conflict markers in /var/db/etcup

On 64-bit systems, the implementation of VOP_VPTOFH() in the cd9660, tarfs and ext2fs filesystems overflows the destinat

A vulnerability classified as critical has been found in CampCodes School Management Software 1.0. Affected is an unknow

A vulnerability was found in Tenda A18 up to 15.13.07.09. It has been rated as critical. This issue affects the function

A vulnerability was found in 1000 Projects Employee Task Management System 1.0. It has been declared as critical. This v

A vulnerability was found in 1000 Projects Employee Task Management System 1.0. It has been classified as critical. This

A vulnerability was found in needyamin Library Card System 1.0. It has been declared as problematic. Affected by this vu

Authentication bypass by spoofing in Azure AI Face Service allows an authorized attacker to elevate privileges over a ne

Missing authorization in Microsoft Account allows an unauthorized attacker to elevate privileges over a network.

A vulnerability was found in needyamin Library Card System 1.0. It has been classified as critical. Affected is an unkno

JFinalCMS 1.0 is vulnerable to SQL Injection in rc/main/java/com/cms/entity/Content.java. The cause of the vulnerability

A path traversal issue in ZipUtils.unzip and TarUtils.untar in Deep Java Library (DJL) on all platforms allows a bad act

A vulnerability was found in needyamin Library Card System 1.0 and classified as critical. This issue affects some unkno

A floating-point exception (FPE) vulnerability exists in the AP4_TfraAtom::AP4_TfraAtom function in Bento4.

Buffer Overflow vulnerability in Bento4 mp42avc v.3bdc891602d19789b8e8626e4a3e613a937b4d35 allows a local attacker to ex

Buffer Overflow vulnerability in Bento4 mp42avc v.3bdc891602d19789b8e8626e4a3e613a937b4d35 allows a local attacker to ex

Password Vulnerability in Safety production process management system v1.0 allows a remote attacker to escalate privileg

When LDAP connection is activated in Teedy versions between 1.9 to 1.12, the username field of the login form is vulnera

Teedy <= 1.12 is vulnerable to Cross Site Request Forgery (CSRF), due to the lack of CSRF protection.

HTML Injection vulnerability in Celk Sistemas Celk Saude v.3.1.252.1 allows a remote attacker to inject arbitrary HTML c

Reflected XSS vulnerability in Celk Sistemas Celk Saude v.3.1.252.1 allows a remote attacker to inject arbitrary JavaScr