2025

A security flaw has been discovered in Campcodes Complete Online Beauty Parlor Management System 1.0. Impacted is an unk

The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to PHP Object Injection in all ver

The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to unauthor

Missing Authorization vulnerability in HappyFiles HappyFiles Pro happyfiles-pro allows Exploiting Incorrectly Configured

A vulnerability was identified in Campcodes Complete Online Beauty Parlor Management System 1.0. This issue affects some

Versa SASE Client for Windows versions released between 7.8.7 and 7.9.4 contain a local privilege escalation vulnerabili

The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to unauthorized modification of data due

In Delphix Continuous Compliance version 2025.3.0 and later, following a recent bug fix to correctly handle CR+LF (Windo

The HTTPS service on Tapo C200 v3, v5, C425 v1.2 and C100 v5  exposes a connectAP interface without proper authenticatio

LDAP Tool Box Self Service Password 1.5.2 contains a password reset vulnerability that allows attackers to manipulate HT

Flatnux 2021-03.25 contains an authenticated file upload vulnerability that allows administrative users to upload arbitr

Dotclear 2.25.3 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious P

AspEmail 5.6.0.2 contains a binary permission vulnerability that allows local users to escalate privileges through the P

OCS Inventory NG 2.3.0.0 contains an unquoted service path vulnerability that allows local attackers to escalate privile

Arcsoft PhotoStudio 6.0.0.172 contains an unquoted service path vulnerability in the ArcSoft Exchange Service that allow

BrainyCP 1.0 contains an authenticated remote code execution vulnerability that allows logged-in users to inject arbitra

A security flaw has been discovered in code-projects Simple Stock System 1.0. Affected by this issue is some unknown fun

A vulnerability was identified in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unkno

A vulnerability was detected in code-projects Simple Blood Donor Management System 1.0. The affected element is an unkno

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0, if an arbitrary p

A security vulnerability has been detected in code-projects Simple Blood Donor Management System 1.0. Impacted is an unk

A weakness has been identified in code-projects Simple Stock System 1.0. This issue affects some unknown processing of t

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0, Langflow provides

Galette is a membership management web application for non profit organizations. Starting in version 0.9.6 and prior to

ArcSearch for iOS versions prior to 1.45.2 could display a different domain in the address bar than the content being sh

ArcSearch for Android versions prior to 1.12.6 could display a different domain in the address bar than the content bein

EVE-NG 6.4.0-13-PRO is vulnerable to Directory Traversal. The /api/export interface allows authenticated users to export

The Takes web framework's TkFiles take thru 2.0-SNAPSHOT fails to canonicalize HTTP request paths before resolving them

Turms AI-Serving module v0.10.0-SNAPSHOT and earlier contains an image decompression bomb denial of service vulnerabilit

igmpproxy 0.4 before commit 2b30c36 allows remote attackers to cause a denial of service (application crash) via a craft

A vulnerability was detected in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /

A security vulnerability has been detected in code-projects Scholars Tracking System 1.0. The impacted element is an unk

A weakness has been identified in code-projects Scholars Tracking System 1.0. The affected element is an unknown functio

Cross-Site Request Forgery (CSRF) vulnerability in Restajet Information Technologies Inc. Online Food Delivery System al

Mismatched length fields in Zlib compressed protocol headers may allow a read of uninitialized heap memory by an unauthe

Apache NiFi 1.20.0 through 2.6.0 include the GetAsanaObject Processor, which requires integration with a configurable Di

The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'outbound_resource' par

A heap-based buffer overflow vulnerability exists in the PDF parsing of Foxit PDF Reader when processing specially craft

A use-after-free vulnerability exists in the annotation handling of Foxit PDF Reader before 2025.2.1, 14.0.1, and 13.2.1

A use-after-free vulnerability exists in the PDF file parsing of Foxit PDF Reader before 2025.2.1, 14.0.1, and 13.2.1 on

A use-after-free vulnerability exists in the AcroForm handling of Foxit PDF Reader and Foxit PDF Editor before 2025.2.1,

The HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player plugin for WordPress is vulnerable to Server-S

The Ocean Modal Window WordPress plugin before 2.3.3 is vulnerable to Remote Code Execution via the modal display logic.

A vulnerability was determined in code-projects Scholars Tracking System 1.0. The affected element is an unknown functio

A Server-Side Template Injection (SSTI) vulnerability in the MDX Rendering Engine in Mintlify Platform before 2025-11-15

Successful exploitation of the vulnerability could allow an attacker with local network access to send a specially craft

A local privilege escalation vulnerability exists in the Foxit PDF Reader/Editor Update Service. During plugin installat

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the software

Improper neutralization of input during web page generation ('cross-site scripting') in Azure Cosmos DB allows an unauth

Improper neutralization of input during web page generation ('Cross-site Scripting') (CWE-79) allows an authenticated us