2025

The Video Share VOD – Turnkey Video Site Builder Script plugin for WordPress is vulnerable to Stored Cross-Site Scriptin

The MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Tokens Wallet plugin for WordPress is vuln

The JSM Screenshot Machine Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's

The ShipWorks Connector for Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions

The Picture Gallery – Frontend Image Uploads, AJAX Photo List plugin for WordPress is vulnerable to Stored Cross-Site Sc

The WP Abstracts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including,

The Podlove Podcast Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Feed Name value

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi

The List category posts WordPress plugin before 0.90.3 does not validate and escape some of its shortcode attributes bef

The Kubio AI Page Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'message' paramet

The Image Source Control Lite – Show Image Credits and Captions plugin for WordPress is vulnerable to Reflected Cross-Si

The Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media plugin for WordPress is vulnerab

Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. This is an remote

Under certain log settings the IAM or CORE service will log credentials in the iam logfile in Fortra Application Hub (Fo

A buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) in various Lexmark devices.

In multiple locations, there is a possible way to read protected files due to a missing permission check. This could lea

In onAttachFragment of ShareIntentActivity.java, there is a possible way for an app to read files in the messages app du

In NlpService, there is a possible way to obtain location information due to a missing permission check. This could lead

In BnDmAgent::onTransact of dm_agent.cpp, there is a possible out of bounds write due to a missing bounds check. This co

In many locations, there is a possible way to access kernel memory in user space due to an incorrect bounds check. This

In ip6_append_data of ip6_output.c, there is a possible way to achieve code execution due to a heap buffer overflow. Thi

In multiple functions of mnh-sm.c, there is a possible way to trigger a heap overflow due to an integer overflow. This c

zot is a production-ready vendor-neutral OCI image registry. The group data stored for users in the boltdb database (met

In onCreate of EmergencyCallbackModeExitDialog.java, there is a possible way to crash the emergency callback mode due to

In multiple functions of Parcel.cpp, there is a possible way to bypass address space layout randomization. This could le

In multiple locations, there is a possible way to bypass KASLR due to an unusual root cause. This could lead to local in

In asn1_ber_decoder of asn1_decoder.c, there is a possible out of bounds read due to a missing bounds check. This could

In multiple functions of WifiServiceImpl.java, there is a possible way to activate Wi-Fi hotspot from a non-owner profil

In multiple functions of MiniThumbFile.java, there is a possible way to view the thumbnails of deleted photos due to a c

In multiple functions of UserDictionaryProvider.java, there is a possible way to add and delete words in the user dictio

In endCallForSubscriber of PhoneInterfaceManager.java, there is a possible way to prevent access to emergency services d

KaTeX is a fast, easy-to-use JavaScript library for TeX math rendering on the web. KaTeX users who render untrusted math

A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unkn

The AWS Cloud Development Kit (AWS CDK) is an open-source software development framework to define cloud infrastructure

nbgrader is a system for assigning and grading notebooks. Enabling frame-ancestors: 'self' grants any JupyterHub user th

Bible Module is a tool designed for ROBLOX developers to integrate Bible functionality into their games. The `FetchVerse

Caido is a web security auditing toolkit. A Cross-Site Scripting (XSS) vulnerability was identified in Caido v0.45.0 due

stats is a macOS system monitor in for the menu bar. The Stats application is vulnerable to a local privilege escalation

A vulnerability has been found in itsourcecode Tailoring Management System 1.0 and classified as critical. This vulnerab

A vulnerability, which was classified as problematic, was found in code-projects Tourism Management System 1.0. Affected

OtCMS <=V7.46 is vulnerable to Server-Side Request Forgery (SSRF) in /admin/read.php, which can Read system files arbitr

WeGIA v3.2.0 is vulnerable to SQL Injection viathe nextPage parameter in /controle/control.php.

WeGIA < 3.2.0 is vulnerable to Cross Site Scripting (XSS) via the dados_addInfo parameter of documentos_funcionario.php.

A new feature to prevent Firmware downgrades was recently added to some Lexmark products. A method to override this dow

Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

A vulnerability, which was classified as problematic, has been found in code-projects Car Rental Management System 1.0.

A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. This vulner

Cross Site Scripting vulnerability in InformationPush master version allows a remote attacker to obtain sensitive inform