2025

A vulnerability was found in code-projects Online Book Shop 1.0. It has been declared as critical. This vulnerability af

Memory safety bugs present in Firefox 133 and Thunderbird 133. Some of these bugs showed evidence of memory corruption a

When using an invalid protocol scheme, an attacker could spoof the address bar. *Note: This issue only affected Android

Under certain circumstances, a user opt-in setting that Focus should require authentication before use could have been b

When redirecting to an invalid protocol scheme, an attacker could spoof the address bar. *Note: This issue only affecte

Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 128.5, and Thunderbird 128.5. Some of these bugs

Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 115.18, Firefox ESR 128.5, Thunderbird 115.18, a

When segmenting specially crafted text, segmentation would corrupt memory leading to a potentially exploitable crash. Th

Parsing a JavaScript module as JSON could, under some circumstances, cause cross-compartment access, which may result in

When using Alt-Svc, ALPN did not properly validate certificates when the original server is redirecting to an insecure s

Assuming a controlled failed memory allocation, an attacker could have caused a use-after-free, leading to a potentially

The WebChannel API, which is used to transport various information across processes, did not check the sending principal

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kmfoysal06 SimpleC

A vulnerability in Crater Invoice allows an unauthenticated attacker with knowledge of the APP_KEY to achieve remote com

JATOS 3.9.4 contains a denial-of-service (DoS) vulnerability in the authentication system, where an attacker can prevent

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

An authenticated arbitrary file upload vulnerability in Car Rental Management System v1.0 to v1.3 allows attackers to ex

matrix-rust-sdk is an implementation of a Matrix client-server library in Rust. Versions of the matrix-sdk-crypto Rust c

Vehicle Management System 1.0 is vulnerable to SQL Injection. A guest user can exploit vulnerable POST parameters in var

An XML External Entity (XXE) vulnerability in Elspec Engineering G5 Digital Fault Recorder Firmware v1.2.1.12 allows att

An issue was discovered in Elspec G5 digital fault recorder version 1.2.1.12 and earlier. An XML External Entity (XXE) v

Elspec Engineering G5 Digital Fault Recorder Firmware v1.2.1.12 was discovered to contain a buffer overflow.

An issue in the validate_email function in CTFd/utils/validators/__init__.py of CTFd 3.7.3 allows attackers to cause a R

IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow an unauthorized user to obtain valid t

IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 is vulnerable to exposure of Artifactory API keys.

IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain sensitive

IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain sensitive

IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain sensitive

A vulnerability was found in code-projects Online Book Shop 1.0. It has been classified as critical. This affects an unk

A vulnerability was found in code-projects Online Book Shop 1.0 and classified as problematic. Affected by this issue is

A malicious or compromised MacPorts mirror can execute arbitrary commands as root on the machine of a client running por

A vulnerability has been found in SourceCodester Home Clean Services Management System 1.0 and classified as critical. A

IBM Security ReaQta 3.12 returns sensitive information in an HTTP response that could be used in further attacks against

IBM Security ReaQta 3.12 could allow a privileged user to cause a denial of service by sending multiple administration r

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is v

Exposure of Environmental Variables and arbitrary INI file values to an Unauthorized Actor vulnerability in The Document

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to

IBM Concert Software 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, and 1.0.3  could allow a remote attacker to obtain sensitive informa

IBM Concert Software 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, and 1.0.3 could allow an authenticated user to inject malicious inf

IBM Concert Software 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, and 1.0.3 could disclose sensitive system information to an unauthori

IBM Concert Software 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, and 1.0.3 could allow a remote attacker to obtain sensitive informati

The RSVP and Event Management plugin for WordPress is vulnerable to unauthorized access due to a missing capability chec

The BWD Elementor Addons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The Document Foundation

The Jupiter X Core plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check o

The Jupiter X Core plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the sy

The Quill Forms | The Best Typeform Alternative | Create Conversational Multi Step Form, Survey, Quiz, Cost Estimation o

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Daniel Bakovic WPA

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pjfc SyncFields sy