2025

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote

A security flaw has been discovered in code-projects Simple Grading System 1.0. Affected is an unknown function of the f

A vulnerability was identified in code-projects Simple Grading System 1.0. This impacts an unknown function of the file

SolidInvoice version 2.3.7 is vulnerable to a stored cross-site scripting (XSS) issue in the Clients module. An authenti

SolidInvoice version 2.3.7 is vulnerable to a Stored Cross-Site Scripting (XSS) issue in the Tax Rates functionality. Th

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user a

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user a

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user a

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user a

A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If a remo

A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If a remote attacker gains a user

A security vulnerability has been detected in PHPGurukul Directory Management System 2.0. This vulnerability affects unk

Gitpod is a developer platform for cloud development environments. In versions before main-gha.33628 for both Gitpod Cla

Opencast is a free, open-source platform to support the management of educational audio and video content. In version 18

Incomplete authorization of linked device synchronization messages in WhatsApp for iOS prior to v2.25.21.73, WhatsApp Bu

Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Com

A security flaw has been discovered in AiondaDotCom mcp-ssh up to 1.0.3. Affected by this issue is some unknown function

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metada

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metada

A vulnerability was found in shafhasan chatbox up to 156a39cde62f78532c3265a70eda12c70907e56f. This impacts an unknown f

A vulnerability has been found in yeqifu carRental up to 3fabb7eae93d209426638863980301d6f99866b3. This affects the func

A weakness has been identified in mtons mblog up to 3.5.0. This issue affects some unknown processing of the file /admin

Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultura

Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultura

Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultura

Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultura

Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultura

Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultura

Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultura

Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultura

The Slider Revolution plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 6.7.36

The Events Addon for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Typewr

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Synology RADIUS Se

Uncaught exception issue exists in Multiple products in bizhub series. If a malformed file is imported as an S/MIME Emai

The iATS Online Forms plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order' parameter in all ve

The Ultimate Tag Warrior Importer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to

The OSM Map Widget for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Map

The List Subpages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title’ parameter in all ver

The LWSCache plugin for WordPress is vulnerable to unauthorized modification of data due to improper authorization on th

Multiple products provided by iND Co.,Ltd contain an insecure storage of sensitive information vulnerability. If exploit

A security flaw has been discovered in E4 Sistemas Mercatus ERP 2.00.019. The affected element is an unknown function of

A vulnerability was found in Portabilis i-Educar up to 2.10. This vulnerability affects unknown code of the file /educac

A vulnerability has been found in Portabilis i-Educar up to 2.10. This affects an unknown part of the file /module/Formu

A flaw has been found in Portabilis i-Educar up to 2.10. Affected by this issue is some unknown functionality of the fil

A vulnerability was detected in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionali

There is an Unquoted Service Path Vulnerability in some HikCentral FocSign versions. This could allow an authenticated u

There is a CSV Injection Vulnerability in some HikCentral Master Lite versions. This could allow an attacker to inject e

A vulnerability was determined in Telesquare TLR-2005KSH 1.2.4. The affected element is an unknown function of the file

A vulnerability was found in Xinhu RockOA up to 2.6.9. Impacted is the function publicsaveAjax of the file /index.php. P

Akamai Ghost before 2025-07-21 allows HTTP Request Smuggling via an OPTIONS request that has an entity body, because the