2025

An authenticated remote code execution (RCE) vulnerability exists in multiple WSO2 products due to improper input valida

A stored cross-site scripting (XSS) vulnerability in the Admin Log Viewer of S-Cart <=10.0.3 allows a remote authenticat

An authenticated stored cross-site scripting (XSS) vulnerability exists in multiple WSO2 products due to improper valida

An information disclosure vulnerability exists in multiple WSO2 products due to improper implementation of the enrich me

Authorization Bypass Through User-Controlled Key vulnerability in Anadolu Hayat Emeklilik Inc. AHE Mobile allows Privile

danny-avila/librechat is affected by an authorization bypass vulnerability due to improper access control checks. The `c

A vulnerability was identified in Campcodes Society Membership Information System 1.0. This issue affects some unknown p

A vulnerability was determined in Portabilis i-Educar up to 2.10. This vulnerability affects unknown code of the file /m

A vulnerability was found in Portabilis i-Educar up to 2.10. This affects an unknown part of the file /module/Componente

A vulnerability has been found in Portabilis i-Educar up to 2.10. Affected by this issue is some unknown functionality o

The CleverControl employee monitoring software (v11.5.1041.6) fails to validate TLS server certificates during the insta

In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Fix null-ptr-deref in bitmap_parse

In the Linux kernel, the following vulnerability has been resolved: bpf: Tell memcg to use allow_spinning=false path in

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix recursive semaphore deadlock in fiemap c

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix subvolume deletion lockup caused by inod

In the Linux kernel, the following vulnerability has been resolved: ceph: always call ceph_shift_unused_folios_left()

In the Linux kernel, the following vulnerability has been resolved: ceph: fix crash after fscrypt_encrypt_pagecache_blo

In the Linux kernel, the following vulnerability has been resolved: net: fec: Fix possible NPD in fec_enet_phy_reset_af

In the Linux kernel, the following vulnerability has been resolved: igb: Fix NULL pointer dereference in ethtool loopba

In the Linux kernel, the following vulnerability has been resolved: macsec: sync features on RTM_NEWLINK Syzkaller man

A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown function

A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0. The impacted element is an u

The Widget Options - Extended plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'do_sid

A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0. This impacts an unknown func

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in emarket-design Req

SAP BI Platform allows an attacker to modify the IP address of the LogonToken for the OpenDoc. On accessing the modified

A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. This affects an unkno

A weakness has been identified in PHPJabbers Restaurant Menu Maker up to 1.1. Affected by this issue is some unknown fun

A security flaw has been discovered in Campcodes Online Beauty Parlor Management System 1.0. Affected by this vulnerabil

A vulnerability was identified in Campcodes Online Beauty Parlor Management System 1.0. Affected is an unknown function

A vulnerability was determined in axboe fio up to 3.41. This impacts the function __parse_jobs_ini of the file init.c. E

A vulnerability has been found in fuyang_lipengjun platform 1.0. The impacted element is the function SysSmsLogControlle

In Liferay Portal 7.4.0 through 7.4.3.112, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.8,

Insecure Direct Object Reference (IDOR) vulnerability with commerce order notes in Liferay Portal 7.3.5 through 7.4.3.11

A flaw has been found in fuyang_lipengjun platform 1.0. The affected element is the function TopicCategoryController of

A vulnerability was detected in fuyang_lipengjun platform 1.0. Impacted is the function TopicController of the file /top

A security vulnerability has been detected in fuyang_lipengjun platform 1.0. This issue affects the function UserCouponC

Batch Engine in Liferay Portal 7.4.0 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.7, 2023.Q3.1 through 2

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to v

iNiLabs School Express (SMS Express) 6.2 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the content

Stocky POS with Inventory Management & HRM (ui-lib) version 5.0 is affected by a Stored Cross-Site Scripting (XSS) vulne

When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than in

A vulnerability was determined in D-Link DIR-823X 240126/240802/250416. Affected by this vulnerability is an unknown fun

Conventional Changelog generates changelogs and release notes from a project's commit messages and metadata. Prior to ve

MagicProject AI version 9.1 is affected by a Cross-Site Scripting (XSS) vulnerability within the chatbot generation feat

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fernando Acosta Ma

Missing Authorization vulnerability in AdvancedCoding wpDiscuz wpdiscuz allows Exploiting Incorrectly Configured Access

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Medi

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Soleda

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci