2025

LinkAce is a self-hosted archive to collect website links. In versions 2.3.0 and below, the htmlKeywordsFromUrl function

ClipBucket v5 is an open source video sharing platform. Versions 5.5.2-#147 and below contain a stored Cross-Site Script

Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.27.1 and below, due to insufficient access-

Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.27.1 and below, when a user edits their pro

An issue was discovered in the GPU driver in Samsung Mobile Processor Exynos 1480, 2400, 1580, 2500. There is a use-afte

Galette is a membership management web application for non profit organizations. In versions 1.1.5.2 and below, Galette'

Galette is a membership management web application for non profit organizations. Versions 1.1.5.2 and below allow a user

An issue was discovered in the Secure Boot component in Samsung Mobile Processor and Wearable Processor Exynos 9820, 982

A reflected cross-site scripted (XSS) vulnerability in the /jsp/gsfr_feditorHTML.jsp endpoint of Zucchetti ZMaintenance

An issue was discovered in VTS in Samsung Mobile Processor and Wearable Processor Exynos 1280, 2200, 1380, W920, W930, W

NVIDIA RunAI for all platforms contains a vulnerability where a user could cause an improper restriction of communicatio

Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce Vibes Extension allows Mani

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Ma

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Co

Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Mulesoft Anypoint Code Builder allows

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allow

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allow

An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Invalid Pointer De

An issue was discovered in VTS in Samsung Mobile Processor and Wearable Processor Exynos 1080, 1280, 2200, 1380, 1480, 2

codeshare v1.0.0 was discovered to contain an information leakage vulnerability.

An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Untrusted Pointer

An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Out-of-bounds Read

WorkDo HRM SaaS HR and Payroll Tool 8.1 is affected vulnerable to Insecure Permissions. An authenticated user can create

The MeetingList plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up

The overly permissive sandbox configuration in DSPy allows attackers to steal sensitive files in cases when users build

The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More plugin for WordPress is vulne

In charger, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local es

In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local esca

In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local esca

In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege

In pda, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privil

In clkdbg, there is a possible escalation of privilege due to use after free. This could lead to local escalation of pri

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local es

In wlan STA driver, there is a possible out of bounds read due to a race condition. This could lead to local information

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local es

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local es

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local es

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local es

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local es

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local es

In preloader, there is a possible escalation of privilege due to an insecure default value. This could lead to local esc

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local es

The Centangle-Team plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including

The Visit Counter plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missin

The Pagerank Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Cross-Site Request Forgery in a

The MapMap plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. T

The Social Media WPCF7 Stop Words plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to

The Top Bar Notification plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and inc

The SH Contextual Help plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and inclu