2025

Deserialization of Untrusted Data vulnerability in themeton Spare allows Object Injection. This issue affects Spare: fro

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in _CreativeMedia_ El

Deserialization of Untrusted Data vulnerability in yuliaz Rapyd Payment Extension for WooCommerce rapyd-payments allows

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdistillery Navig

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Suhas Surse WP Emp

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla WPCRM - C

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

The html.parser.HTMLParser class had worse-case quadratic complexity when processing certain crafted malformed inputs po

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows

A privilege escalation from host to domain vulnerability was found in the FreeIPA project. The FreeIPA package fails to

conda-forge-webservices is the web app deployed to run conda-forge admin commands and linting. Prior to version 2025.3.2

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Secure Access Client for Win

A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection,

Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual serv

Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway

Arbitrary file read in NetScaler Console and NetScaler SDX (SVM)

The Simple Logo Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all

The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the pl

The Poll, Survey & Quiz Maker Plugin by Opinion Stage plugin for WordPress is vulnerable to unauthorized modification of

Mezzanine CMS, in versions prior to 6.1.1, contains a Stored Cross-Site Scripting (XSS) vulnerability in the admin inter

The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file uploads d

Reflected Cross-Site Scripting (XSS) in osCommerce v4. This vulnerability allows an attacker to execute JavaScript code

A vulnerability classified as critical was found in Webkul QloApps 1.6.1. Affected by this vulnerability is an unknown f

A vulnerability classified as critical has been found in themanojdesai python-a2a up to 0.5.5. Affected is the function

A vulnerability was found in frdel Agent-Zero up to 0.8.4. It has been rated as problematic. This issue affects the func

A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. This vulnerability aff

A vulnerability was found in TOTOLINK A3002R 4.0.0-B20230531.1404. It has been classified as critical. This affects an u

The Ivory Search WordPress plugin before 5.5.10 does not sanitise and escape some of its settings, which could allow hi

A vulnerability was found in TOTOLINK A3002RU 3.0.0-B20230809.1615 and classified as critical. Affected by this issue is

A vulnerability has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713 and classified as critical. Affected by this v

A vulnerability, which was classified as critical, was found in SourceCodester Simple Food Ordering System 1.0. Affected

A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.

A vulnerability classified as critical was found in code-projects Hostel Management System 1.0. This vulnerability affec

A vulnerability classified as critical has been found in D-Link DIR-665 1.00. This affects the function sub_AC78 of the

A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been rated as critical. Affect

A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been declared as critical. Aff

A vulnerability was found in PHPGurukul Hostel Management System 1.0. It has been classified as critical. Affected is an

A vulnerability was found in PHPGurukul Hostel Management System 1.0 and classified as critical. This issue affects some

A vulnerability has been found in PHPGurukul Hostel Management System 1.0 and classified as critical. This vulnerability

(conda) Constructor is a tool which allows constructing an installer for a collection of conda packages. Prior to versio

A vulnerability, which was classified as critical, was found in Steel Browser up to 0.1.3. This affects the function han

The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to SQL Injection via the ‘prgSort

The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

The Wise Chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the X-Forwarded-For header in all ve

A vulnerability has been found in TP-Link TL-WR940N V4 and TL-WR841N V11. Affected by this issue is some unknown funct

A vulnerability classified as critical was found in TOTOLINK X15 1.0.0-B20230714.1105. Affected by this vulnerability is

A vulnerability classified as critical has been found in TOTOLINK A3002R 4.0.0-B20230531.1404. Affected is an unknown fu

A vulnerability was found in TOTOLINK A3002RU 3.0.0-B20230809.1615. It has been rated as critical. This issue affects so