2025

A vulnerability was found in code-projects Document Management System 1.0 and classified as critical. This issue affects

Quantum SuperLoader 3 V94.0 005E.0h devices allow attackers to access the hardcoded fa account because there are only 65

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the

NVIDIA Omniverse Launcher for Windows and Linux contains a vulnerability in the launcher logs, where a user could cause

php-jwt v6.11.0 was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key leng

A vulnerability was discovered in the storage policy for certain sets of encryption keys in the HPE Telco Network Functi

A vulnerability was discovered in the storage policy for certain sets of authentication keys in the HPE Telco Network Fu

A vulnerability was discovered in the storage policy for certain sets of sensitive credential information in the HPE Tel

OPEXUS FOIAXpress Public Access Link (PAL) version v11.1.0 allows an unauthenticated, remote attacker to query the /App/

OPEXUS FOIAXpress Public Access Link (PAL) version v11.1.0 allows attackers to bypass account-lockout and CAPTCHA protec

OPEXUS FOIAXpress Public Access Link (PAL), version v11.1.0, allows an authenticated user to add entries to the list of

CloudClassroom-PHP-Project 1.0 contains a reflected Cross-site Scripting (XSS) vulnerability in the email parameter of t

Sielox AnyWare v2.1.2 was discovered to contain a SQL injection vulnerability via the email address field of the passwor

A SQL Injection vulnerability exists in the takeassessment2.php endpoint of the CloudClassroom-PHP-Project 1.0, where th

A file upload vulnerability was discovered in CS Cart 4.18.3, allows attackers to execute arbitrary code. CS Cart 4.18.3

Cross Site Request Forgery (CSRF) vulnerability in CS Cart 4.18.3, allows attackers to add products to a user's comparis

A Plaintext Storage of a Password vulnerability in SUSE exposes the credentials for the HTTP proxy in the log files. Thi

A cross-site scripting (XSS) vulnerability exists in the LB-Link BL-CPE300M 01.01.02P42U14_06 router's web interface. Th

A stored Cross Site Scripting (xss) vulnerability in the "content management" feature in AnQiCMS v.3.4.11 allows a remot

ExaGrid EX10 6.3 - 7.0.1.P08 is vulnerable to Incorrect Access Control in the MailConfiguration API endpoint, where user

An open redirect in Sielox AnyWare v2.1.2 allows attackers to execute a man-in-the-middle attack via a crafted URL.

A flaw was found in Ansible Automation Platform (AAP) where the Gateway API returns the client secret for certain GitHub

Copyparty is a portable file server. In versions 1.18.6 and below, when accessing the recent uploads page at `/?ru`, use

The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all

A vulnerability, which was classified as critical, was found in Campcodes Online Hotel Reservation System 1.0. Affected

A vulnerability, which was classified as critical, has been found in Campcodes Online Hotel Reservation System 1.0. This

The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Path Traversal in all versions up to,

The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to unauthorized modification and loss of

A vulnerability classified as critical has been found in Campcodes Online Hotel Reservation System 1.0. This affects an

A carefully crafted request using the Image plugin could trigger an XSS vulnerability on Apache JSPWiki, which could al

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting

Multiple versions of PowerCMS allow unrestricted upload of dangerous files. If a product administrator accesses a malici

Multiple versions of PowerCMS improperly neutralize formula elements in a CSV file. If a product user creates a malform

A path traversal issue exists in file uploading feature of multiple versions of PowerCMS. Arbitrary files may be overwri

Stored cross-site scripting vulnerability exists in multiple versions of PowerCMS. If a product user accesses a maliciou

Reflected cross-site scripting vulnerability exists in multiple versions of PowerCMS. If a product administrator accesse

A vulnerability, which was classified as problematic, was found in Portabilis i-Educar 2.9. Affected is an unknown funct

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.9. This issue affects some

A vulnerability classified as problematic was found in Portabilis i-Educar 2.9. This vulnerability affects unknown code

A vulnerability classified as problematic has been found in Portabilis i-Educar 2.9. This affects an unknown part of the

A vulnerability was found in Portabilis i-Educar 2.9. It has been rated as problematic. Affected by this issue is some u

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘author’

A vulnerability, which was classified as critical, was found in Kehua Charging Pile Cloud Platform 1.0. This affects an

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.10. Affected by this issue

A vulnerability classified as critical was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.4.7.

A vulnerability classified as critical has been found in openviglet shio up to 0.3.8. Affected is the function shStaticF

A vulnerability was found in openviglet shio up to 0.3.8. It has been rated as critical. This issue affects the function

A vulnerability was found in code-projects Intern Membership Management System 1.0. It has been declared as problematic.

IBM Aspera Faspex 5.0.0 through 5.0.12.1 could allow an authenticated user to perform unauthorized actions due to client

IBM Aspera Faspex 5.0.0 through 5.0.12.1 could allow an authenticated user to perform unauthorized actions due to client