2025

Kestra is an event-driven orchestration platform. The error message in execution "Overview" tab is vulnerable to stored

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F

An Improper Access Control vulnerability in the Stylus Tools component of Google ChromeOS version 16238.64.0 on the gara

Insufficient Logging vulnerability in Wikimedia Foundation Mediawiki - AbuseFilter Extension allows Data Leakage Attacks

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F

The CheckUser extension’s Special:Investigate interface is vulnerable to reflected XSS due to improper escaping of certa

A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been declared as critical. This vul

In Splunk Enterprise versions below 9.4.2, 9.3.5, 9.2.7, and 9.1.10 and Splunk Cloud Platform versions below 9.3.2411.10

In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7, and 9.1.10, a low-privileged user that does not hold the "admin

In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7, and 9.1.10, and Splunk Cloud Platform versions below 9.3.2411.1

In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7 and 9.1.10, and Splunk Cloud Platform versions below 9.3.2411.10

In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7 and 9.1.10, and Splunk Cloud Platform versions below 9.3.2411.10

In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7, and 9.1.10, a user who holds a role that contains the high-priv

In Splunk Enterprise versions below 9.4.2, 9.3.5, 9.2.6, and 9.1.9 and Splunk Cloud Platform versions below 9.3.2411.103

IBM Engineering Requirements Management DOORS 9.7.2.9, under certain configurations, could allow a remote attacker to ob

An open redirect vulnerability in gnuboard5 v.5.5.16 allows a remote attacker to obtain sensitive information via the bb

An open redirect vulnerability in gnuboard5 v.5.5.16 allows a remote attacker to obtain sensitive information via thebbs

An open redirect vulnerability in gnuboard5 v.5.5.16 allows a remote attacker to obtain sensitive information via the in

A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been classified as critical. This a

giscus is a commenting system powered by GitHub Discussions. A bug in giscus' discussions creation API allowed an unauth

WeGIA is a web manager for charitable institutions. An XSS Injection vulnerability was identified in novo_memorando.php.

WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F

WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified

IBM Storage Virtualize 8.5, 8.6, and 8.7 products could allow a user to escalate their privileges to that of another use

An authorized user can issue queries with duplicate _id fields, that leads to unexpected behavior in MongoDB Server, whi

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F

The ApprovedRevs extension for MediaWiki is vulnerable to stored XSS in multiple locations where system messages are ins

Dokploy is a self-hostable Platform as a Service (PaaS) that simplifies the deployment and management of applications an

Dokploy is a self-hostable Platform as a Service (PaaS) that simplifies the deployment and management of applications an

A vulnerability classified as problematic has been found in CodeAstro Online Movie Ticket Booking System 1.0. This affec

MongoDB Server may be susceptible to disruption caused by high memory usage, potentially leading to server crash. This c

An issue has been identified in MongoDB Server where unredacted queries may inadvertently appear in server logs when cer

The WikiCategoryTagCloud extension is vulnerable to reflected XSS via the linkstyle attribute, which is improperly conca

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F

A vulnerability, which was classified as critical, was found in itsourcecode Employee Management System up to 1.0. This

A vulnerability, which was classified as critical, has been found in itsourcecode Employee Management System up to 1.0.

A vulnerability classified as critical was found in itsourcecode Employee Management System up to 1.0. Affected by this

A vulnerability classified as critical has been found in code-projects Online Note Sharing 1.0. Affected is an unknown f

A vulnerability was found in Campcodes Complaint Management System 1.0. It has been rated as critical. This issue affect

A vulnerability in the ObsidianReader class of the run-llama/llama_index repository, specifically in version 0.12.27, al

The JSONReader in run-llama/llama_index versions 0.12.28 is vulnerable to a stack overflow due to uncontrolled recursive

lunary-ai/lunary versions prior to 1.9.24 are vulnerable to stored cross-site scripting (XSS). An unauthenticated attack

A physical attacker with no privileges can gain full control of the affected device due to improper neutralization of sp

An XSS vulnerability exists in langgenius/dify versions prior to 1.1.3, specifically affecting Firefox browsers. This vu

A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, sp

A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, sp

A vulnerability in the ArxivReader class of the run-llama/llama_index repository, versions up to v0.12.22.post1, allows

A vulnerability was found in Campcodes Complaint Management System 1.0. It has been classified as critical. This affects