2025

The JSP Store Locator WordPress plugin through 1.0 does not sanitize and escape a parameter before using it in a SQL sta

The coreActivity: Activity Logging for WordPress plugin before 1.8.1 does not escape some request data when outputting i

The Advanced Schedule Posts WordPress plugin through 2.1.8 does not sanitise and escape a parameter before outputting it

The WP Dashboard Notes WordPress plugin before 1.0.11 does not validate that the user has access to the post_id paramete

The illi Link Party! WordPress plugin through 1.0 lacks proper access controls, allowing unauthenticated visitors to del

The Marketing Twitter Bot WordPress plugin through 1.11 does not have CSRF check in some places, and is missing sanitisa

The aBitGone CommentSafe WordPress plugin through 1.0.0 does not have CSRF check in some places, and is missing sanitisa

The Travelpayouts: All Travel Brands in One Place WordPress plugin before 1.1.13 does not have CSRF check in place when

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been classified as critical. Affected is a

A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. This issue affects som

A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. This vulnerabilit

Cross-Site Request Forgery (CSRF) vulnerability in Saleswonder Team: Tobias WP2LEADS wp2leads allows Stored XSS.This iss

Dell PowerScale InsightIQ, versions 5.0 through 5.2, contains an improper privilege management vulnerability. An unauthe

Dell PowerScale OneFS, versions 9.4.0.0 through 9.9.0.0, contains an uncontrolled resource consumption vulnerability. A

A vulnerability, which was classified as critical, was found in Campcodes Sales and Inventory System 1.0. This affects a

A vulnerability, which was classified as critical, has been found in Campcodes Sales and Inventory System 1.0. Affected

A vulnerability classified as critical was found in Campcodes Sales and Inventory System 1.0. Affected by this vulnerabi

A vulnerability classified as critical has been found in Campcodes Sales and Inventory System 1.0. Affected is an unknow

A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. This issue affects

A vulnerability was found in projectworlds Online Examination System 1.0. It has been declared as critical. This vulnera

There is a memory corruption vulnerability due to a stack-based buffer overflow in DrObjectStorage::XML_Serialize() when

There is a memory corruption vulnerability due to an out of bounds read in Bitmap::InternalDraw() when using the SymbolE

There is a memory corruption vulnerability due to an out of bounds read in GetSymbolBorderRectSize() when using the Symb

There is a memory corruption vulnerability due to an out of bounds write in CheckPins() when using the SymbolEditor in N

There is a memory corruption vulnerability due to an out of bounds write in Library!DecodeBase64() when using the Symbol

A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13. It has been classified as critical. This

A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Affected by t

A vulnerability has been found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Affected

In DOMPurify through 3.2.5 before 6bc6d60, scripts/server.js does not ensure that a pathname is located under the curren

An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kern

An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kern

An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kern

An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kern

A vulnerability, which was classified as critical, was found in PHPGurukul Vehicle Parking Management System 1.13. Affec

A vulnerability classified as critical was found in PHPGurukul Apartment Visitors Management System 1.0. This vulnerabil

A vulnerability classified as critical has been found in PHPGurukul Directory Management System 2.0. This affects an unk

A vulnerability was found in PHPGurukul Directory Management System 2.0. It has been rated as critical. Affected by this

XXE vulnerability in Hitachi JP1/IT Desktop Management 2 - Smart Device Manager on Windows.This issue affects JP1/IT Des

The File Manager Advanced Shortcode plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, an

The UiPress lite | Effortless custom dashboards, admin themes and pages plugin for WordPress is vulnerable to Remote Cod

The WP Content Security Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the blocked-uri and

Incorrect default permissions in some Intel(R) Gaudi(R) software installers before version 1.18 may allow an authenticat

Jenkins Health Advisor by CloudBees Plugin 374.v194b_d4f0c8c8 and earlier does not escape responses from the Jenkins Hea

WS-WN572HP3 V230525 was discovered to contain a buffer overflow in the component /www/cgi-bin/upload.cgi. This vulnerabi

An issue was discovered in RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 2100, 1280, 2200, 1330,

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 128

Samsung Galaxy Buds and Galaxy Buds 2 audio devices are Bluetooth pairable by default without user input nor a way to st

IBM Semeru Runtime 8.0.302.0 through 8.0.442.0, 11.0.12.0 through 11.0.26.0, 17.0.0.0 through 17.0.14.0, and 21.0.0.0 th

Time-of-check time-of-use race condition in some Zoom Workplace Apps may allow an authenticated user to conduct an escal

A missing exception check in Palo Alto Networks PAN-OS® software with the web proxy feature enabled allows an unauthenti