2025

Cross-site scripting vulnerability exists in MZK-DP300N firmware versions 1.05 and earlier. If an attacker logs in to th

Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successfu

Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successfu

Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successfu

Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successfu

Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successfu

Integer overflow vulnerability during glTF model loading in the 3D engine module Impact: Successful exploitation of this

Buffer overflow vulnerability in the component driver module Impact: Successful exploitation of this vulnerability may a

Privilege escalation vulnerability in the Account module Impact: Successful exploitation of this vulnerability may affec

Vulnerability of improper access control in the home screen widget module Impact: Successful exploitation of this vulner

Startup control vulnerability in the ability module Impact: Successful exploitation of this vulnerability may cause feat

The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Information Exposure in a

The Slotti Ajanvaraus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slotti-embed-g

The Easy Form Builder – WordPress plugin form builder: contact form, survey form, payment form, and custom form builder

The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification and ret

The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Remote Code Execution in version 3.0.

Vulnerability of improper permission control in the window management module Impact: Successful exploitation of this vul

Vulnerability of variables not being initialized in the notification module Impact: Successful exploitation of this vuln

Instruction authentication bypass vulnerability in the Findnetwork module Impact: Successful exploitation of this vulner

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability

Vulnerability of native APIs not being implemented in the NFC service module Impact: Successful exploitation of this vul

Race condition vulnerability in the Bastet module Impact: Successful exploitation of this vulnerability may affect servi

Permission control vulnerability in the Connectivity module Impact: Successful exploitation of this vulnerability may ca

Access control vulnerability in the identity authentication module Impact: Successful exploitation of this vulnerability

Vulnerability of improper memory address protection in the HUKS module Impact: Successful exploitation of this vulnerabi

Vulnerability of input parameters not being verified in the widget framework module Impact: Successful exploitation of t

Race condition vulnerability in the distributed notification module Impact: Successful exploitation of this vulnerabilit

Improper Input Validation vulnerability in Management Program in TXOne Networks Portable Inspector and Portable Inspecto

Dell PowerScale OneFS versions 8.2.2.x through 9.9.0.0 contain an uncontrolled resource consumption vulnerability. A rem

Vulnerability of improper authentication in the ANS system service module Impact: Successful exploitation of this vulner

Vulnerability of improper permission control in the Gallery module Impact: Successful exploitation of this vulnerability

Path traversal vulnerability in the Medialibrary module Impact: Successful exploitation of this vulnerability will affec

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability

Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability

UAF vulnerability in the device node access module Impact: Successful exploitation of this vulnerability may cause servi

An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996. Due to the improper neutraliza

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to an information disclosure vulner

This issue is fixed in SCSSU-201801. A potential stack based buffer overflow existed in GemaltoKeyHandle.cpp.

WeGIA is a web manager for charitable institutions. Prior to 3.2.8, a critical vulnerability was identified in the /WeGI

WeGIA is a web manager for charitable institutions. A Cross-Site Scripting (XSS) vulnerability was identified in the fil

When batch jobs are executed by pgAgent, a script is created in a temporary directory and then executed. In versions of

IceWarp Server 10.2.1 is vulnerable to Cross Site Scripting (XSS) via the meta parameter.

I, Librarian before and including 5.11.1 is vulnerable to Server-Side Request Forgery (SSRF) due to improper input valid

Bangkok Medical Software HOSxP XE v4.64.11.3 was discovered to contain a hardcoded IDEA Key-IV pair in the HOSxPXE4.exe

An XML External Entity (XXE) injection vulnerability in Intersec Geosafe-ea 2022.12, 2022.13, and 2022.14 allows attacke

An issue was discovered in SuiteCRM 7.12.7. Authenticated users can recover an arbitrary field of a database.

An issue was discovered in SuiteCRM 7.12.7. Authenticated users can use CRM functions to upload malicious files. Then, d

An issue was discovered in Ovidentia 8.3. The file upload feature does not prevent the uploading of executable files. A

An issue was discovered in EyesOfNetwork (EON) through 5.3.11. Privilege escalation can be accomplished on the server be