2025

A vulnerability was found in thinkgem JeeSite up to 5.12.0. It has been classified as critical. This affects the functio

A vulnerability has been found in D-Link DIR-816L up to 2.06B01 and classified as critical. Affected by this vulnerabili

A vulnerability, which was classified as problematic, was found in PHPGurukul Complaint Management System 2.0. Affected

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/hyper-v: Skip non-canonical addresses duri

The ThemeREX Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versio

The Vchasno Kasa plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on

The Vchasno Kasa plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on th

The Avishi WP PayPal Payment Button plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up

The Partnerský systém Martinus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'marti

The Temporarily Hidden Content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'temph

The Live Stream Badger plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'livestream' s

The EPay.bg Payments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'epay' shortcode

In One Identity OneLogin before 2025.2.0, the SQL connection "application name" is set based on the value of an untruste

In wolfSSL release 5.8.2 blinding support is turned on by default for Curve25519 in applicable builds. The blinding conf

StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Add A New Student module

StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Add A New Course module.

MRCMS v3.1.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/group/save.do

qBittorrent before 5.1.2 does not prevent access to a local file that is referenced in a link URL. This affects rsswidge

StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Add A New Teacher module

A vulnerability classified as critical has been found in Beijing Shenzhou Shihan Technology Multimedia Integrated Busine

A Server-Side Request Forgery (SSRF) in the component TunnelServlet of agorum Software GmbH Agorum core open v11.9.2 & v

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.4 uses a web

A vulnerability was found in GPAC up to 2.4. It has been rated as problematic. Affected by this issue is the function gf

Incorrect access control in the dynawebservice component of agorum Software GmbH Agorum core open v11.9.2 & v11.10.1 all

Incorrect access control in Software GmbH Agorum core open v11.9.2 & v11.10.1 allows authenticated attackers to escalate

agorum Software GmbH Agorum core open v11.9.2 & v11.10.1 was discovered to contain an XML External Entity (XXE) via the

StudentManage v1.0 was discovered to contain Cross-Site Request Forgery (CSRF).

Weak authentication in Azure Machine Learning allows an authorized attacker to elevate privileges over a network.

Insecure permissions in Splashin iOS v2.0 allow unauthorized attackers to access location data for specific users.

Splashin iOS v2.0 fails to enforce server-side interval restrictions for location updates for free-tier users.

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cro

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cro

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cro

melange allows users to build apk packages using declarative pipelines. Starting in version 0.23.0 and prior to version

A vulnerability has been found in Xuxueli xxl-job up to 3.1.1 and classified as critical. Affected by this vulnerability

A vulnerability, which was classified as critical, was found in Xuxueli xxl-job up to 3.1.1. Affected is the function ht

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.

An arbitrary file upload vulnerability in the component /rsc/filemanager.rsc.class.php of Filemanager commit c75b914 v.2

A flaw was found in the Keycloak identity and access management system when Fine-Grained Admin Permissions(FGAPv2) are e

An issue in Filemanager v2.5.0 and below allows attackers to execute a directory traversal via sending a crafted HTTP re

Authorization Bypass Through User-Controlled Key vulnerability in Vidco Software VOC TESTER allows Forceful Browsing. T

A vulnerability classified as problematic was found in thinkgem JeeSite up to 5.12.0. This vulnerability affects the fun

Mattermost versions 10.8.x <= 10.8.1, 10.7.x <= 10.7.3, 10.5.x <= 10.5.7, 9.11.x <= 9.11.16 fail to sanitize input paths

Mattermost versions 10.5.x <= 10.5.6, 10.8.x <= 10.8.1, 10.7.x <= 10.7.3, 9.11.x <= 9.11.16 fail to verify authorization

An open redirect vulnerability has been identified in Grafana OSS organization switching functionality. Prerequisites

An improper access control vulnerability [CWE-284] in FortiIsolator version 2.4.4, version 2.4.3, 2.3 all versions loggi

An insufficient session expiration vulnerability [CWE-613] in FortiSandbox FortiSandbox version 4.4.4 and below, version

The Malcure Malware Scanner — #1 Toolset for WordPress Malware Removal plugin for WordPress is vulnerable to Arbitrary F

The Block Editor Gallery Slider plugin for WordPress is vulnerable to unauthorized modification of data due to a missing

The Terms descriptions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versi