2025

A security vulnerability in the /apis/dashboard.grafana.app/* endpoints allows authenticated users to bypass dashboard a

A vulnerability was found in Marwal Infotech CMS 1.0. It has been declared as critical. This vulnerability affects unkno

During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Devi

A vulnerability was found in Aem Solutions CMS up to 1.0. It has been classified as critical. This affects an unknown pa

Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to

Bluetooth HCI Adaptor from Realtek has a Link Following vulnerability. Local attackers with regular privileges can creat

A vulnerability was found in Mist Community Edition up to 4.7.1. It has been classified as critical. This affects the fu

A vulnerability was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. It has been rated as

A vulnerability was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. It has been declared

A vulnerability was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. It has been classifi

A vulnerability was found in SourceCodester Health Center Patient Record Management System 1.0. It has been declared as

The Newsletters plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.9.9

A vulnerability, which was classified as critical, has been found in SourceCodester Health Center Patient Record Managem

The Offsprout Page Builder plugin for WordPress is vulnerable to Privilege Escalation due to improper authorization plac

The WP-GeoMeta plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the wp_aj

A vulnerability classified as critical was found in PHPGurukul News Portal 4.1. Affected by this vulnerability is an unk

A vulnerability classified as critical has been found in SourceCodester PHP Display Username After Login 1.0. Affected i

A vulnerability was found in PHPGurukul Online Shopping Portal Project 1.0. It has been declared as critical. This vulne

A vulnerability was found in Campcodes Online Hospital Management System 1.0. It has been classified as critical. This a

A vulnerability was found in Campcodes Online Hospital Management System 1.0 and classified as critical. Affected by thi

A vulnerability has been found in Campcodes Online Hospital Management System 1.0 and classified as critical. Affected b

A vulnerability, which was classified as critical, was found in Campcodes Online Hospital Management System 1.0. Affecte

A vulnerability, which was classified as critical, has been found in Campcodes Online Hospital Management System 1.0. Th

A vulnerability classified as critical was found in Campcodes Online Hospital Management System 1.0. This vulnerability

An improper permission handling vulnerability was reported in Lenovo PC Manager that could allow a local attacker to per

An improper default permissions vulnerability was reported in Lenovo PC Manager that could allow a local attacker to ele

An untrusted search path vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate pr

A vulnerability classified as critical has been found in Campcodes Online Hospital Management System 1.0. This affects a

A vulnerability was found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0. It has been rated as critical. Affec

A vulnerability was found in FreeFloat FTP Server 1.0. It has been declared as critical. Affected by this vulnerability

A vulnerability was found in FreeFloat FTP Server 1.0. It has been classified as critical. Affected is an unknown functi

A stored Cross-site Scripting (XSS) vulnerability affecting Service Items Management in Service Process Engineer from Re

A stored Cross-site Scripting (XSS) vulnerability affecting 3D Markup in Collaborative Industry Innovator from Release 3

A stored Cross-site Scripting (XSS) vulnerability affecting Change Governance in Product Manager from Release 3DEXPERIEN

A stored Cross-site Scripting (XSS) vulnerability affecting Requirements in Product Manager from Release 3DEXPERIENCE R2

A stored Cross-site Scripting (XSS) vulnerability affecting Results Analytics in Multidisciplinary Optimization Engineer

A stored Cross-site Scripting (XSS) vulnerability affecting Model Definition in Product Manager from Release 3DEXPERIENC

A stored Cross-site Scripting (XSS) vulnerability affecting Risk Management in Project Portfolio Manager from Release 3D

A stored Cross-site Scripting (XSS) vulnerability affecting City Discover in City Referential Manager on Release 3DEXPER

A stored Cross-site Scripting (XSS) vulnerability affecting City Referential in City Referential Manager on Release 3DE

A stored Cross-site Scripting (XSS) vulnerability affecting Compare in Collaborative Industry Innovator from Release 3DE

Insertion of Sensitive Information Into Sent Data vulnerability in vanquish WooCommerce Orders & Customers Exporter wooc

Improper access control in user group management in Devolutions Server 2025.1.7.0 and earlier allows a non-administrativ

A vulnerability exists in the SOAP Web services of the Asset Suite versions listed below. If successfully exploited, an

The Browse As plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 0.2. This is

An issue has been discovered in GitLab EE that allows for cross-site-scripting attack and content security policy bypass

Due to excessive privileges granted to the web user running the airpointer web platform, a malicious actor that gains co

Zitadel is open-source identity infrastructure software. Prior to versions 2.70.12, 2.71.10, and 3.2.2, a potential vuln

GetSimple CMS is a content management system. In versions starting from 3.3.16 to 3.3.21, an authenticated user with acc

Client-side enforcement of server-side security issue exists in wivia 5 all versions. If exploited, an unauthenticated a