2025

A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1. This affects the function ff_aac_searc

A vulnerability classified as critical has been found in SourceCodester Best Employee Management System 1.0. This affect

A vulnerability was found in SourceCodester E-Learning System 1.0. It has been classified as critical. Affected is an un

A vulnerability was found in SourceCodester E-Learning System 1.0 and classified as problematic. This issue affects some

A vulnerability has been found in PHPGurukul Online Nurse Hiring System 1.0 and classified as critical. This vulnerabili

Versions of the package tarteaucitronjs before 1.17.0 are vulnerable to Cross-site Scripting (XSS) via the getElemWidth(

A vulnerability was found in SourceCodester Telecom Billing Management System 1.0. It has been rated as critical. This i

A vulnerability classified as problematic was found in opensolon Solon up to 3.0.8. This vulnerability affects unknown c

A vulnerability classified as critical has been found in PHPGurukul Online Nurse Hiring System 1.0. This affects an unkn

A vulnerability was found in PHPGurukul Online Nurse Hiring System 1.0. It has been rated as critical. Affected by this

A vulnerability was found in PHPGurukul Online Nurse Hiring System 1.0. It has been declared as critical. Affected by th

A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been classified as critical. A

A vulnerability, which was classified as critical, was found in PHPGurukul/Campcodes Online Shopping Portal 2.1. This af

The Accept Donations with PayPal & Stripe plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the r

A vulnerability classified as critical was found in code-projects Real Estate Property Management System 1.0. Affected b

A vulnerability classified as problematic has been found in Harpia DiagSystem 12. Affected is an unknown function of the

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WarfarePlugins Soc

Missing Authorization vulnerability in enituretechnology Distance Based Shipping Calculator distance-based-shipping-calc

Missing Authorization vulnerability in appsbd Vitepos vitepos-lite allows Exploiting Incorrectly Configured Access Contr

A vulnerability, which was classified as problematic, was found in OFCMS 1.1.3. Affected is an unknown function. The man

A vulnerability, which was classified as problematic, has been found in westboy CicadasCMS 1.0. This issue affects some

The Rife Elementor Extensions & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plug

The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to unauthorized order creation in al

The Pago por Redsys plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'Ds_MerchantParameters'

The Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) p

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to

IBM Watson Query on Cloud Pak for Data 4.0.0 through 4.0.9, 4.5.0 through 4.5.3, 4.6.0 through 4.6.6, 4.7.0 through 4.7.

A vulnerability in the SecureROM of some Apple devices can be exploited by an unauthenticated local attacker to execute

A Cross-Site Request Forgery (CSRF) in the component /back/UserController.java of Jspxcms v9.0 to v9.5 allows attackers

Wangmarket v4.10 to v5.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /agency/AgencyU

MRCMS v3.1.2 was discovered to contain a server-side template injection (SSTI) vulnerability in the component \servlet\D

A vertical privilege escalation vulnerability in the component /controller/UserController.java of MRCMS v3.1.2 allows at

Totolink X5000R V9.1.0u.6369_B20230113 is vulnerable to command injection via the apcli_wps_gen_pincode function in mtkw

Totolink X5000R V9.1.0u.6369_B20230113 is vulnerable to command injection via the vif_disable function in mtkwifi.lua.

SQL Injection vulnerability in PbootCMS 1.4.1 in parsing if statements in templates, resulting in a malicious user's abi

A vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects unknown code of the file

An arbitrary file upload vulnerability in the component /file/savefile.do of MRCMS v3.1.2 allows attackers to execute ar

MRCMS v3.1.2 was discovered to contain an arbitrary file write vulnerability via the component /file/save.do.

GFast between v2 to v3.2 was discovered to contain a SQL injection vulnerability via the SortName parameter at /system/l

An XML External Entity (XXE) vulnerability in the deserializeArgs() method of Java SDK for CloudEvents v4.0.1 allows att

Tenda AC8 V16.03.34.06 is vulnerable to Buffer Overflow in the get_parentControl_list_Info function.

There is a RCE vulnerability in Tenda AC6 15.03.05.16_multi. In the formexeCommand function, the parameter cmdinput will

Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the sub_452A4 function.

IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 thro

A vulnerability, which was classified as critical, was found in dingfanzu CMS up to 20250210. Affected is an unknown fun

A vulnerability, which was classified as problematic, has been found in iteachyou Dreamer CMS 4.1.3. This issue affects

A vulnerability was found in Harpia DiagSystem 12. It has been rated as critical. This issue affects some unknown proces

The SVG Support plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions u

Opera Mini for Android before version 52.2 is vulnerable to an address bar spoofing attack. The vulnerability allows a m

The WP-Appbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's appbox shortcode in all