2025

A vulnerability was determined in FastAdmin up to 1.7.0.20250506. Affected is the function selectpage of the file applic

A vulnerability was found in 1541492390c yougou-mall up to 0a771fa817c924efe52c8fe0a9a6658eee675f9f. This impacts the fu

A flaw has been found in code-projects Simple Stock System 1.0. The impacted element is an unknown function of the file

CVAT is an open source interactive video and image annotation tool for computer vision. In versions 2.8.1 through 2.52.0

A security flaw has been discovered in floooh sokol up to 33e2271c431bf21de001e972f72da17a984da932. This vulnerability a

Orejime is a consent manager that focuses on accessibility. On HTML elements handled by Orejime prior to version 2.3.2,

pluginsGLPI's Database Inventory Plugin "manages" the Teclib' inventory agents in order to perform an inventory of the d

A vulnerability was determined in WebAssembly Binaryen up to 125. Affected by this issue is the function WasmBinaryReade

Gotham Gaia application was found to be exposing multiple unauthenticated endpoints.

Cross Site Request Forgery (CSRF) vulnerability in Turms Admin API thru v0.10.0-SNAPSHOT allows attackers to gain escala

Galette is a membership management web application for non profit organizations. Starting in version 1.1.4 and prior to

Turms IM Server v0.10.0-SNAPSHOT and earlier contains a broken access control vulnerability in the user online status qu

Turms Server v0.10.0-SNAPSHOT and earlier contains a plaintext password storage vulnerability in the administrator authe

Turms AI-Serving module v0.10.0-SNAPSHOT and earlier contains an improper file type validation vulnerability in the OCR

A flaw was found in libnbd. A malicious actor could exploit this by convincing libnbd to open a specially crafted Unifor

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Restajet Information Technologies Inc. Online Food

The Image Photo Gallery Final Tiles Grid plugin for WordPress is vulnerable to authorization bypass in all versions up t

The myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program plugin for WordPress is vulne

The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the colibri_blog_posts sh

A stored cross-site scripting (XSS) vulnerability exists in the Digital IDs functionality of the Foxit PDF Editor Cloud

A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Trusted Certificates feature.

A stored cross-site scripting (XSS) vulnerability exists in the Portfolio feature of the Foxit PDF Editor cloud (pdfonli

A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Layer Import functionality. A

A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Page Templates feature. A cra

A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Predefined Text feature of th

A stored cross-site scripting (XSS) vulnerability exists in webplugins.foxit.com. A postMessage handler fails to validat

A memory corruption vulnerability exists in the 3D annotation handling of Foxit PDF Reader due to insufficient bounds ch

A memory corruption vulnerability exists in the 3D annotation handling of Foxit PDF Reader due to insufficient bounds ch

A memory corruption vulnerability exists in the 3D annotation handling of Foxit PDF Reader due to insufficient bounds ch

There is an improper authentication vulnerability in some Hikvision DVR products. Due to the improper implementation of

There is a privilege escalation vulnerability in some Hikvision DVR products. Due to the improper implementation of auth

The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's babe-search-fo

Incomplete removal of sensitive information before transfer vulnerability in M-Files Corporation M-Files Server allows d

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin for WordPress is vulnerable to Sensitive

Versions of the package fastapi-sso before 0.19.0 are vulnerable to Cross-site Request Forgery (CSRF) due to the imprope

A vulnerability was found in code-projects Online Appointment Booking System 1.0. Impacted is an unknown function of the

The Deployment Infrastructure in Mintlify Platform before 2025-11-15 allows remote attackers to bypass security patches

A Directory Traversal vulnerability in the Static Asset Proxy Endpoint in Mintlify Platform before 2025-11-15 allows rem

The GitHub Integration API in Mintlify Platform before 2025-11-15 allows remote attackers to obtain sensitive repository

The Static Asset API in Mintlify Platform before 2025-11-15 allows remote attackers to inject arbitrary web script or HT

A vulnerability was detected in Edimax BR-6208AC 1.02. This impacts the function handle_retr of the component FTP Daemon

A weakness has been identified in JeecgBoot up to 3.9.0. The impacted element is the function SysUserOnlineController of

A security flaw has been discovered in JeecgBoot up to 3.9.0. The affected element is an unknown function of the file je

A security vulnerability has been detected in CodeAstro Real Estate Management System 1.0. Affected is an unknown functi

A weakness has been identified in CodeAstro Real Estate Management System 1.0. This impacts an unknown function of the f

A security flaw has been discovered in CodeAstro Real Estate Management System 1.0. This affects an unknown function of

A vulnerability was identified in CodeAstro Real Estate Management System 1.0. The impacted element is an unknown functi

Improper Authorization (CWE-285) in Kibana can lead to privilege escalation (CAPEC-233) by allowing an authenticated use

Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow an authenticated user with sna

Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can allow a low-privileged authenticated user t