2025

A vulnerability has been found in LitmusChaos Litmus up to 3.19.0 and classified as problematic. This vulnerability affe

A vulnerability, which was classified as critical, was found in LitmusChaos Litmus up to 3.19.0. This affects an unknown

A vulnerability, which was classified as problematic, has been found in LitmusChaos Litmus up to 3.19.0. Affected by thi

A vulnerability classified as problematic was found in LitmusChaos Litmus up to 3.19.0. Affected by this vulnerability i

A vulnerability classified as problematic has been found in LitmusChaos Litmus up to 3.19.0. Affected is an unknown func

A vulnerability was found in LitmusChaos Litmus up to 3.19.0. It has been rated as critical. This issue affects some unk

A vulnerability was found in Portabilis i-Educar up to 2.9.0. It has been declared as critical. This vulnerability affec

A vulnerability was found in Portabilis i-Educar up to 2.9.0. It has been classified as problematic. This affects an unk

A vulnerability was found in Qiyuesuo Eelectronic Signature Platform up to 4.34 and classified as critical. Affected by

A vulnerability, which was classified as problematic, has been found in Vinades NukeViet up to 4.5.06. This issue affect

A vulnerability classified as critical has been found in linlinjava litemall up to 1.8.0. Affected is the function Uploa

A vulnerability has been found in TDuckCloud tduck-platform up to 5.1 and classified as critical. Affected by this vulne

A vulnerability was found in macrozheng mall up to 1.0.3 and classified as problematic. This issue affects the function

A vulnerability, which was classified as critical, has been found in linlinjava litemall up to 1.8.0. Affected by this i

The The7 theme for WordPress is vulnerable to Stored Cross-Site Scripting via its lightbox rendering code in all version

A vulnerability, which was classified as problematic, has been found in Weee RICEPO App 6.17.77 on Android. This issue a

SSRF vulnerability in FreeMarker templates in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through

The Assemblyline 4 Service Client interfaces with the API to fetch tasks and publish the result for a service in Assembl

Frappe Learning is a learning system that helps users structure their content. In versions 2.33.0 and below, the image u

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certifi

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certifi

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certifi

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certifi

oak is a middleware framework for Deno's native HTTP server, Deno Deploy, Node.js 16.5 and later, Cloudflare Workers and

A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0 and classified as problematic. This issue affects some unkno

A vulnerability has been found in zlt2000 microservices-platform up to 6.0.0 and classified as problematic. This vulnera

A vulnerability, which was classified as critical, has been found in GNU cflow up to 1.8. Affected by this issue is the

Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id parameter

A reflected cross-site scripting (XSS) vulnerability in the List All FTP User Function in EHCP v20.04.1.b allows authent

OpenMetadata <=1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function l

OpenMetadata <=1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function l

The public-facing product registration endpoint server responds differently depending on whether the S/N is valid and u

The MOD3 command traffic between the monitoring application and the inverter is transmitted in plaintext without encryp

A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.133, and Liferay DXP 2025

IBM Cloud Pak for Business Automation 24.0.0 through 24.0.0 IF005 and 24.0.1 through 24.0.1 IF002 could allow an authent

A vulnerability has been found in MigoXLab LMeterX 1.2.0 and classified as critical. Affected by this vulnerability is t

Path Traversal vulnerability in API Endpoint in Mobile Industrial Robots (MiR) Software Versions prior to 3.0.0 on MiR R

The OpenStreetMap for Gutenberg and WPBakery Page Builder (formerly Visual Composer) WordPress plugin through 1.2.0 does

Powered BLUE Server versions 0.20130927 and prior contain a path traversal vulnerability. If this vulnerability is explo

Powered BLUE 870 versions 0.20130927 and prior contain an OS command injection vulnerability. If this vulnerability is e

EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary com

EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary com

EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary com

A vulnerability was found in Antabot White-Jotter 0.22. It has been declared as critical. This vulnerability affects the

A vulnerability was found in Huuge Box App 1.0.3 on Android. It has been classified as problematic. This affects an unkn

A vulnerability has been found in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0 and classified as criti

A vulnerability, which was classified as critical, was found in Wanzhou WOES Intelligent Optimization Energy Saving Syst

A vulnerability, which was classified as critical, has been found in Wanzhou WOES Intelligent Optimization Energy Saving

A vulnerability classified as critical was found in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0. This

Astro is a web framework for content-driven websites. In versions 5.2.0 through 5.12.7, there is an Open Redirect vulner