2025

An issue was discovered in Samsung Mobile Processor Exynos 9820, 9825, 980, 990, 850, 1080, 2100, and 1280. Lack of a le

Venki Supravizio BPM through 18.0.1 was discovered to contain an arbitrary file upload vulnerability. An authenticated a

A malformed packet can cause a buffer overflow in the APS layer of the Ember ZNet stack and lead to an assert

Code-Projects Online Car Rental System 1.0 is vulnerable to Cross Site Scripting (XSS) via the vehicalorcview parameter

In Code-Projects Online Car Rental System 1.0, the file upload feature does not validate file extensions or MIME types a

MonicaHQ v4.1.2 was discovered to contain a Client-Side Injection vulnerability via the last_name parameter the General

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 108

An issue was discovered in Samsung Mobile Processor Exynos 9820, 9825, 980, 990, 850, 1080, 2100, and 1280. Lack of a le

Pega Platform versions 8.1 to Infinity 24.2.0 are affected by an Stored XSS issue with profile.

Teedy through 1.11 allows CSRF for account takeover via POST /api/user/admin.

An improper array index validation vulnerability exists in the determineMinMax functionality of OFFIS DCMTK 3.6.8. A spe

An improper array index validation vulnerability exists in the nowindow functionality of OFFIS DCMTK 3.6.8. A specially

Missing Authorization vulnerability in Saad Iqbal Post SMTP post-smtp allows Exploiting Incorrectly Configured Access Co

Deserialization of Untrusted Data vulnerability in StellarWP GiveWP give allows Object Injection.This issue affects Give

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in intelligence_lab S

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dstoever WPEX Repl

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in anshulsojatia Scan

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marcus Downing Sit

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mdjekic Inline Twe

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GrandSlambert Feat

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in arete-it Post And

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in trustist TRUSTist

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yamna Khawaja KNR

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Smart Agenda Smart

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FAKTOR VIER F4 Pos

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in N3wNormal LucidLMS

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in timmcdaniels Media

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in infosoftplugin Ord

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Scripts Food St

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in enituretechnology

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saleswonder Team:

CloudStack users can add and read comments (annotations) on resources they are authorised to access.  Due to an access

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to subvert recons

Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data ou

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to write data out

Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data ou

Software installed and run as a non-privileged user may conduct improper GPU system calls resulting in platform instabil

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to read data outs

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to read data outs

The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of its Workfl

The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of its form s

The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of form setti

The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin before 1.1.23 export settings functional

The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of its Text B

Luxion KeyShot Viewer KSP File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows

A vulnerability classified as critical was found in liujianview gymxmjpa 1.0. This vulnerability affects the function Me

A vulnerability classified as critical has been found in liujianview gymxmjpa 1.0. This affects the function MembertypeD

A vulnerability was found in liujianview gymxmjpa 1.0. It has been rated as critical. Affected by this issue is the func

A vulnerability was found in liujianview gymxmjpa 1.0. It has been declared as critical. Affected by this vulnerability

A vulnerability was found in liujianview gymxmjpa 1.0. It has been classified as critical. Affected is the function Subj