2025

An Open Redirect vulnerability exists in the OAuth callback handler in file onlook/apps/web/client/src/app/auth/callback

AstrBot Project v3.5.22 contains a directory traversal vulnerability. The handler function install_plugin_upload of the

Improper Authentication vulnerability in GE Vernova Smallworld on Windows, Linux allows Authentication Abuse.This issue

A vulnerability was identified in projectworlds Online Notes Sharing Platform 1.0. Affected by this issue is some unknow

A Broken Object Level Authorization (BOLA) vulnerability was discovered in the tRPC project mutation APIs (update, delet

In pig-mesh In Pig version 3.8.2 and below, within the Token Management function under the System Management module, the

In pig-mesh Pig versions 3.8.2 and below, when setting up scheduled tasks in the Quartz management function under the sy

Multiple SQL injection vulnerabilitites in ycf1998 money-pos system before commit 11f276bd20a41f089298d804e43cb1c39d041e

An issue was discovered in rymcu forest thru commit f782e85 (2025-09-04) in function doBefore in file src/main/java/com/

There is an arbitrary file download vulnerability in GuoMinJim PersonManage thru commit 5a02b1ab208feacf3a34fc123c938116

A cross-site request forgery (CSRF) vulnerability has been reported to affect QuLog Center. The remote attackers can the

A cross-site scripting (XSS) vulnerability has been reported to affect Download Station. If a remote attacker gains a us

A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker, they can then exploit

A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains an admi

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, the

A cross-site scripting (XSS) vulnerability has been reported to affect File Station 5. If a remote attacker gains a user

A cross-site scripting (XSS) vulnerability has been reported to affect QuLog Center. If a remote attacker gains an admin

A cross-site scripting (XSS) vulnerability has been reported to affect Notification Center. If a remote attacker gains a

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a r

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user a

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a r

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a r

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a r

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user a

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user a

An SQL injection vulnerability has been reported to affect QuMagie. A remote attacker can exploit the vulnerability to e

A NULL pointer dereference vulnerability has been reported to affect several product versions. If a remote attacker gain

A vulnerability was determined in DedeBIZ up to 6.3.2. Affected by this vulnerability is an unknown functionality of the

A vulnerability was found in DedeBIZ up to 6.3.2. Affected is an unknown function of the file /admin/freelist_main.php.

A vulnerability has been found in DedeBIZ up to 6.3.2. This impacts an unknown function of the file /admin/templets_one_

Monsta FTP versions 2.11 and earlier contain a vulnerability that allows unauthenticated arbitrary file uploads. This fl

A security vulnerability has been detected in code-projects Responsive Hotel Site 1.0. The affected element is an unknow

A weakness has been identified in code-projects Responsive Hotel Site 1.0. Impacted is an unknown function of the file /

A security flaw has been discovered in code-projects Responsive Hotel Site 1.0. This issue affects some unknown processi

A vulnerability was identified in newbee-mall-plus up to 2.4.1. This vulnerability affects the function executeSeckill o

A vulnerability was determined in SourceCodester Best House Rental Management System 1.0. This affects the function dele

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 564 - SQL Injection: Hiberna

SQL injection vulnerability in DIAL's CentrosNet v2.64. Allows an attacker to retrieve, create, update, and delete datab

Use of password hash with insufficient computational effort issue exists in BUFFALO Wi-Fi router 'WSR-1800AX4 series'. W

curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host

archives is a Go library for extracting archives (tar, zip, etc.). Version 1.0.0 does not prevent a malicious user to fe

(conda) Constructor is a tool that enables users to create installers for conda package collections. In versions 3.12.2

ClipBucket v5 is an open source video sharing platform. In versions 5.5.2-#146 and below, the Manage Playlists feature i

The Page & Post Notes plugin for WordPress is vulnerable to unauthorized modification of notes due to a missing capabili

The WP Airbnb Review Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all

ClipBucket v5 is an open source video sharing platform. In versions 5.5.2 - #156 and below, an authenticated regular use

ClipBucket v5 is an open source video sharing platform. In versions 5.5.2-#146 and below, the Manage Photos feature is v

containerd is an open-source container runtime. Versions 1.7.28 and below, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 thro

The IDonate – Blood Donation, Request And Donor Management System plugin for WordPress is vulnerable to Insecure Direct

The IDonate – Blood Donation, Request And Donor Management System plugin for WordPress is vulnerable to Privilege Escala