2025

A vulnerability has been found in code-projects Point of Sales and Inventory Management System 1.0 and classified as cri

An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0. A medium-severity vulnerability exists in the C

An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0. A medium-severity vulnerability exists in the C

An issue was discovered in Optimizely EPiServer.CMS.Core before 12.22.0. A high-severity Stored Cross-Site Scripting (XS

An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity issue exists in requests fo

An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity session issue exists in the

An issue was discovered in Optimizely Configured Commerce before 5.2.2408. For newly created accounts, the Commerce B2B

An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity issue concerning business l

An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity input validation issue exis

A vulnerability, which was classified as critical, was found in code-projects Point of Sales and Inventory Management Sy

IBM PowerHA SystemMirror for i 7.4 and 7.5 does not set the secure attribute on authorization tokens or session cookie

IBM PowerHA SystemMirror for i 7.4 and 7.5 contains improper restrictions when rendering content via iFrames.  This vuln

The Photo Gallery Slideshow & Masonry Tiled Gallery plugin for WordPress is vulnerable to Server-Side Request Forgery in

The The WordPress Popular Posts plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up t

In Net::OAuth::Client in the Net::OAuth package before 0.29 for Perl, the default nonce is a 32-bit integer generated fr

A vulnerability was found in Roxy-WI up to 8.1.3. It has been declared as critical. Affected by this vulnerability is th

A vulnerability, which was classified as critical, has been found in code-projects Point of Sales and Inventory Manageme

Next.js is a React framework for building full-stack web applications. Starting in version 13.0.0 and prior to versions

A vulnerability classified as critical was found in code-projects Point of Sales and Inventory Management System 1.0. Th

A vulnerability classified as critical has been found in code-projects Point of Sales and Inventory Management System 1.

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0. It has been rated as crit

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Versions prior to 3.7.0, 2.3.5, 2.1.6, and 1.

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Versions prior to 3.7.0, 2.3.5, 2.1.6, and 1.

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Versions prior to 3.7.0, 2.3.5, 2.1.6, and 1.

FFmpeg n6.1.1 has a vulnerability in the DXA demuxer of the libavformat library allowing for an integer overflow, potent

FFmpeg version n6.1.1 has a double-free vulnerability in the fftools/ffmpeg_mux_init.c component of FFmpeg, specifically

Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Versions prior to 2.1.12 are vulnerable to

SiYuan is self-hosted, open source personal knowledge management software. SiYuan Note version 3.1.18 has an arbitrary f

Karmada is a Kubernetes management system that allows users to run cloud-native applications across multiple Kubernetes

Karmada is a Kubernetes management system that allows users to run cloud-native applications across multiple Kubernetes

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Versions prior to 3.7.0, 2.3.5, 2.1.6, and 1.

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Versions prior to 3.7.0, 2.3.5, 2.1.6, and 1.

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Versions prior to 3.7.0, 2.3.5, 2.1.6, and 1.

PhpSpreadsheet is a PHP library for reading and writing spreadsheet files. Versions prior to 3.7.0, 2.3.5, 2.1.6, and 1.

GoCD is a continuous deliver server. GoCD versions prior to 24.4.0 can allow GoCD "group admins" to abuse ability to edi

GoCD is a continuous deliver server. GoCD versions 16.7.0 through 24.4.0 (inclusive) can allow GoCD admins to abuse a hi

GoCD is a continuous deliver server. GoCD versions 18.9.0 through 24.4.0 (inclusive) can allow GoCD admins to abuse the

GoCD is a continuous deliver server. GoCD versions prior to 24.5.0 are vulnerable to admin privilege escalation due to i

An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the delete_e

IBM Jazz Foundation 7.0.2, 7.0.3, and 7.1.0 could allow a remote attacker to obtain sensitive information when a detaile

An arbitrary file upload vulnerability in the component /adminUser/updateImg of WukongCRM-11.0-JAVA v11.3.3 allows attac

SQL Injection vulnerability in Silverpeas 6.4.1 allows a remote attacker to obtain sensitive information via the ViewTyp

IBM Jazz Foundation 7.0.2, 7.0.3, and 7.1.0 could could allow a physical user to obtain sensitive information due to n

Moxa’s cellular routers, secure routers, and network security appliances are affected by a critical vulnerability, CVE-2

Moxa’s cellular routers, secure routers, and network security appliances are affected by a high-severity vulnerability,

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to

iTerm2 3.5.6 through 3.5.10 before 3.5.11 sometimes allows remote attackers to obtain sensitive information from termina

In cc_SendCcImsInfoIndMsg of cc_MmConManagement.c, there is a possible out of bounds write due to a missing bounds check

In startListeningForDeviceStateChanges, there is a possible Permission Bypass due to a confused deputy. This could lead

there is a possible biometric bypass due to an unusual root cause. This could lead to local escalation of privilege with