2025

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 7.0.3.

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache OFBiz. This issue

Bruno is an open source IDE for exploring and testing APIs. A bug in the assertion runtime caused assert expressions to

MyDumper is a MySQL Logical Backup Tool. The MySQL C client library (libmysqlclient) allows authenticated remote actors

Bruno is an open source IDE for exploring and testing APIs. Prior to 1.39.1, the custom tool-tip components which intern

D-LINK DI-8100 16.07.26A1 is vulnerable to Buffer Overflow in the ipsec_net_asp function via the remot_ip parameter.

D-LINK DI-8100 16.07.26A1 is vulnerable to Buffer Overflow in the ipsec_road_asp function via the host_ip parameter.

By first using the AI chatbot in one tab and later activating it in another tab, the document title of the previous tab

Memory safety bugs present in Firefox 136 and Thunderbird 136. Some of these bugs showed evidence of memory corruption a

After selecting a malicious Windows `.url` shortcut from the local filesystem, an unexpected file could be uploaded. *

Leaking of file descriptors from the fork server to web content processes could allow for privilege escalation attacks.

An attacker could read 32 bits of values spilled onto the stack in a JIT compiled function. This vulnerability was fixed

Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8. Some of these bugs

A crafted URL containing specific Unicode characters could have hidden the true origin of the page, resulting in a poten

JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free. This vulner

Missing Authorization vulnerability in Zoho Flow Zoho Flow zoho-flow allows Exploiting Incorrectly Configured Access Con

VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with local administrative

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability. A

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Read vulnerability.

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Read vulnerability.

A MongoDB server under specific conditions running on Linux with TLS and CRL revocation status checking enabled, fails t

When run on commands with certain arguments set, explain may fail to validate these arguments before using them. This ca

Specifically crafted MongoDB wire protocol messages can cause mongos to crash during command validation. This can occur

Bypass/Injection vulnerability in Apache Camel in Camel-Undertow component under particular conditions. This issue affe

The Contempo Real Estate Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versio

The WP RealEstate plugin for WordPress, used by the Homeo theme, is vulnerable to privilege escalation in all versions u

The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to privilege escalation via account t

A user authorized to access a view may be able to alter the intended collation, allowing them to access to a different o

Welcart e-Commerce 2.11.6 and earlier versions contains an untrusted data deserialization vulnerability. If this vulnera

Authentication Bypass Issue If the path does not contain / and contain., authentication is not required. Expected Norm

Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions allows bad actors to execute ar

The Real Estate 7 WordPress theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validat

Private Data Structure Returned From A Public Method vulnerability in Apache Answer. This issue affects Apache Answer:

A vulnerability exists in Apache ActiveMQ Artemis whereby a user with the createDurableQueue or createNonDurableQueue pe

The PowerPack Elementor Addons (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to Stored Cro

The Groundhogg plugin for Wordpress is vulnerable to Stored Cross-Site Scripting via the ‘label' parameter in versions u

The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via any location that typi

The WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder plugin for WordPres

Missing Authorization vulnerability in YayCommerce YayExtra yayextra allows Exploiting Incorrectly Configured Access Con

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Bridge Co

Authentication Bypass Using an Alternate Path or Channel vulnerability in Hossein Material Dashboard material-dashboard

Deserialization of Untrusted Data vulnerability in silverplugins217 Multiple Shipping And Billing Address For Woocommerc

Deserialization of Untrusted Data vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Obje

Deserialization of Untrusted Data vulnerability in MDJM Mobile DJ Manager mobile-dj-manager allows Object Injection.This

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in randyjensen RJ Qui

Debug Messages Revealing Unnecessary Information vulnerability in TLA Media GTM Kit gtm-kit allows Retrieve Embedded Sen

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Xavi Ivars XV Rand

Missing Authorization vulnerability in KingAddons.com King Addons for Elementor king-addons.This issue affects King Addo

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in primersoftware Pri

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Wham SKU Genera