2025

The DesignThemes Core Features plugin for WordPress is vulnerable to unauthorized access of data due to a missing capabi

The WooCommerce Recover Abandoned Cart plugin for WordPress is vulnerable to PHP Object Injection in all versions up to,

The ZoomSounds - WordPress Wave Audio Player with Playlist plugin for WordPress is vulnerable to PHP Object Injection in

The WordPress Awesome Import & Export Plugin - Import & Export WordPress Data plugin for WordPress is vulnerable arbitra

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Configuration Fi

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Debug Bundle Con

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Driver Unrestric

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Remote Network

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Insufficient CS

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Local Privilege

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0.2614 allows Privilege Esca

Out of bounds read in Media in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out

Out of bounds read in PDFium in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform ou

Use after free in Profiles in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a

Improper Limitation of a Pathname to a Restricted Directory in DevTools in Google Chrome on Windows prior to 134.0.6998.

Out of bounds read in V8 in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to perform out of bounds memo

A vulnerability classified as critical was found in PHPGurukul Pre-School Enrollment System 1.0. Affected by this vulner

NVIDIA Hopper HGX for 8-GPU contains a vulnerability in the HGX Management Controller (HMC) that may allow a malicious a

A vulnerability classified as critical has been found in projectworlds Online Hotel Booking 1.0. Affected is an unknown

A vulnerability was found in projectworlds Online Hotel Booking 1.0. It has been rated as critical. This issue affects s

A vulnerability was found in projectworlds Online Hotel Booking 1.0. It has been declared as critical. This vulnerabilit

A vulnerability was found in projectworlds Online Hotel Booking 1.0. It has been classified as critical. This affects an

A vulnerability, which was classified as critical, was found in Codezips Gym Management System 1.0. Affected is an unkno

yshopmall <=v1.9.0 is vulnerable to SQL Injection in the image listing interface.

A vulnerability classified as critical has been found in code-projects Shopping Portal 1.0. This affects an unknown part

A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been declared as cri

Maharashtra State Electricity Distribution Company Limited Mahavitran IOS Application 16.1 application till version 16.1

Wondershare filmora 9.2.11 is affected by Trojan Dll hijacking leading to privilege escalation.

On affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been

LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An addit

A vulnerability, which was classified as critical, was found in PHPGurukul Restaurant Table Booking System 1.0. Affected

An out-of-bounds write vulnerability exists in the ma_dr_flac__decode_samples__lpc functionality of Miniaudio miniaudio

An Uncontrolled Search Path Element vulnerability exists which could allow a malicious actor to perform DLL hijacking an

Rack is a modular Ruby web server interface. The Rack::Sendfile middleware logs unsanitised header values from the X-Sen

A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multipl

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wind Media E-Comme

Unauthenticated reflected cross-site scripting (XSS) vulnerability in Uniguest Tripleplay before 24.2.1 allows remote at

Memory safety bugs present in Firefox 135 and Thunderbird 135. Some of these bugs showed evidence of memory corruption a

A select option could partially obscure the confirmation prompt shown before launching external apps. This could be used

Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, and Thunderbird 128.7

jar: URLs retrieve local file content packaged in a ZIP archive. The null and everything after it was ignored when retri

On 64-bit CPUs, when the JIT compiles WASM i32 return values they can pick up bits from left over memory. This can poten

An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access. Onl

It was possible to cause a use-after-free in the content process side of a WebTransport connection, leading to a potenti

On Windows, a compromised content process could use bad StreamData sent over AudioIPC to trigger a use-after-free in the

VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGF

VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trig

Multi-concurrency vulnerability in the media digital copyright protection module Impact: Successful exploitation of this

Permission verification bypass vulnerability in the notification module Impact: Successful exploitation of this vulnerab

Permission bypass vulnerability in the window module Impact: Successful exploitation of this vulnerability may affect se