2025

The Trust Reviews plugin for Google, Tripadvisor, Yelp, Airbnb and other platforms plugin for WordPress is vulnerable to

The cForms – Light speed fast Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versi

The HidePost plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3.

The Sync Feedly plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1

The VM Menu Reorder plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and i

A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknow

A flaw has been found in Portabilis i-Educar up to 2.10. This affects an unknown part of the file /periodo-lancamento. E

Versions of the package github.com/nyaruka/phonenumbers before 1.2.2 are vulnerable to Improper Validation of Syntactic

A vulnerability was detected in Portabilis i-Educar up to 2.10. Affected by this issue is some unknown functionality of

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request

The Team Members plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the first and last name fields in

IBM Storage TS4500 Library 1.11.0.0 and 2.11.0.0 is vulnerable to cross-site scripting. This vulnerability allows an u

IBM Storage TS4500 Library 1.11.0.0 and 2.11.0.0 is vulnerable to cross-site request forgery which could allow an attack

Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions starting from

A security vulnerability has been detected in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unkno

A weakness has been identified in Portabilis i-Educar up to 2.10. Affected is an unknown function of the file /module/Ap

PiranhaCMS 12.0 allows stored XSS in the Text content block of Standard and Standard Archive Pages via /manager/pages, e

A vulnerability has been found in itsourcecode Open Source Job Portal 1.0. Affected by this issue is some unknown functi

A weakness has been identified in itsourcecode Online Clinic Management System 1.0. Affected is an unknown function of t

A vulnerability was determined in Jinher OA 2.0. The impacted element is an unknown function of the file /c6/Jhsoft.Web.

A vulnerability was found in Dibo Data Decision Making System up to 2.7.0. The affected element is the function download

Sourcecodester Employee Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via 'Add Designation.'

A flaw has been found in DataTables up to 1.10.13. The affected element is an unknown function of the file /examples/res

A weakness has been identified in givanz Vvveb up to 1.0.7.2. This vulnerability affects unknown code. Executing manipul

Flag Forge is a Capture The Flag (CTF) platform. From versions 2.0.0 to before 2.3.2, the public endpoint /api/user/[use

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Archit

Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c.

Mercusys MW305R 3.30 and below is has a Transport Layer Security (TLS) certificate private key disclosure.

A security flaw has been discovered in givanz Vvveb up to 1.0.7.2. This affects an unknown part of the component Image H

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Webbeyaz We

Todoist v8484 contains a stored cross-site scripting (XSS) vulnerability in the avatar upload functionality. The applica

A flaw has been found in Four-Faith Water Conservancy Informatization Platform 1.0. This affects an unknown function of

A security vulnerability has been detected in kalcaddle kodbox up to 1.61.09. The affected element is the function fileO

A weakness has been identified in OGRECave Ogre up to 14.4.1. Impacted is the function STBIImageCodec::encode of the fil

A flaw was found in the live query subscription mechanism of the database engine. This vulnerability allows record or gu

Insertion of Sensitive Information Into Sent Data vulnerability in Vimesoft Information Technologies and Software Inc. V

A security flaw has been discovered in OGRECave Ogre up to 14.4.1. This issue affects the function STBIImageCodec::encod

A vulnerability was determined in BehaviorTree up to 4.7.0. This affects the function ParseScript of the file /src/scrip

A vulnerability has been found in vstakhov libucl up to 0.9.2. Affected by this vulnerability is the function ucl_includ

An issue was discovered in GitLab CE/EE affecting all versions starting from 17.2 before 18.2.7, 18.3 before 18.3.3, and

A privilege escalation issue has been discovered in GitLab EE affecting all versions from 16.6 prior to 18.2.7, 18.3 pri

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alex Moss Google+

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kontur.us kontur A

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Terry L. SEO Searc

Server-Side Request Forgery (SSRF) vulnerability in silence Silencesoft RSS Reader external-rss-reader allows Server Sid

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Space Studio Click

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rozx Recaptcha – w

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in honzat Page Manager for Elem

Missing Authorization vulnerability in wpshuffle WP Subscription Forms PRO wp-subscription-forms-pro allows Exploiting I