2025

The BerqWP – Automated All-In-One Page Speed Optimization for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript p

A vulnerability was found in code-projects Online Movie Streaming 1.0. It has been classified as critical. Affected is a

A vulnerability has been found in PHPGurukul Boat Booking System 1.0 and classified as critical. This vulnerability affe

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the

pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is disputed by the Supplier because the key length i

Archer 6.11.00204.10014 allows attackers to execute arbitrary code via crafted system inputs that would be exported into

jwt v5.4.3 was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key lengths a

A cross-site scripting (XSS) vulnerability in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows attackers to execute arb

A Stored Cross-Site Scripting (XSS) vulnerability in Microweber CMS 2.0 allows attackers to inject malicious scripts int

A vulnerability has been found in code-projects Vehicle Management 1.0 and classified as critical. Affected by this vuln

A stored cross-site scripting (XSS) vulnerability exists in DevaslanPHP project-management v1.2.4. The vulnerability res

An issue was discovered in CS Cart 4.18.3 allows the vendor login functionality lacks essential security controls such a

ExaGrid EX10 6.3 - 7.0.1.P08 is vulnerable to Incorrect Access Control. Since version 6.3, ExaGrid enforces restrictions

A vulnerability, which was classified as critical, was found in code-projects Vehicle Management 1.0. Affected is an unk

A Broken Access Control vulnerability in MagnusBilling v7.8.5.3 allows newly registered users to gain escalated privileg

CS Cart 4.18.3 is vulnerable to Insecure Direct Object Reference (IDOR). The user profile functionality allows enabling

A vulnerability, which was classified as critical, has been found in code-projects Vehicle Management 1.0. This issue af

The NinjaScanner – Virus & Malware scan plugin for WordPress is vulnerable to arbitrary file deletion due to insufficien

A vulnerability was found in Campcodes Online Hotel Reservation System 1.0. It has been rated as critical. Affected by t

A vulnerability classified as critical has been found in code-projects Vehicle Management 1.0. Affected is an unknown fu

A high privileged remote attacker can execute arbitrary OS commands using an undocumented method allowing to escape the

An unauthenticated remote attacker can cause a Denial of Service by sending a large number of requests to the http servi

A vulnerability was found in code-projects Vehicle Management 1.0. It has been rated as critical. This issue affects som

A vulnerability was found in code-projects Vehicle Management 1.0. It has been declared as critical. This vulnerability

A carefully crafted request when creating a header link using the wiki markup syntax, which could allow the attacker to

A vulnerability was found in code-projects Vehicle Management 1.0. It has been classified as critical. This affects an u

A vulnerability was found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this issue i

A path traversal issue exists in backup and restore feature of multiple versions of PowerCMS. A product administrator ma

A vulnerability has been found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this vu

ZXHN-F660T and ZXHN-F660A provided by ZTE Japan K.K. use a common credential for all installations. With the knowledge o

The AI Engine plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the re

A vulnerability has been found in Kehua Charging Pile Cloud Platform 1.0 and classified as critical. This vulnerability

A vulnerability was found in code-projects Intern Membership Management System 1.0. It has been classified as critical.

A vulnerability was found in projectworlds Online Admission System 1.0 and classified as critical. Affected by this issu

CVE-2025-49083 is a vulnerability in the management console of Absolute Secure Access after version 12.00 and prior to v

A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. This vulnerabili

A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been rated as critical. Affected

GitProxy is an application that stands between developers and a Git remote endpoint. In versions 1.19.1 and below, att

A vulnerability was found in code-projects Online Farm System 1.0. It has been declared as critical. Affected by this vu

A vulnerability was found in code-projects Online Farm System 1.0. It has been classified as critical. Affected is an un

A vulnerability was found in code-projects Online Farm System 1.0 and classified as critical. This issue affects some un

A vulnerability has been found in code-projects Vehicle Management 1.0 and classified as critical. This vulnerability af

vproxy is an HTTP/HTTPS/SOCKS5 proxy server. In versions 2.3.3 and below, untrusted data is extracted from the user-cont

TrustedFirmware-M (aka Trusted Firmware for M profile Arm CPUs) before 2.1.3 and 2.2.x before 2.2.1 lacks length validat

GetProjectsIdea Create School Management System 1.0 is vulnerable to Cross Site Scripting (XSS) in my_profile_update_for

Ceph is a distributed object, block, and file storage platform. In versions 19.2.3 and below, it is possible to send an

A vulnerability, which was classified as critical, was found in code-projects Vehicle Management 1.0. This affects an un

The firmware of the AZIOT 2MP Full HD Smart Wi-Fi CCTV Home Security Camera (version V1.00.02) contains an Incorrect Acc

A vulnerability, which was classified as critical, has been found in code-projects Exam Form Submission 1.0. Affected by

A vulnerability classified as critical was found in code-projects Exam Form Submission 1.0. Affected by this vulnerabili