2025

A vulnerability classified as critical has been found in diyhi bbs 6.8. Affected is the function Add of the file /src/ma

Sangfor aTrust through 2.4.10 allows users to modify the ExecStartPre command.

A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. Affected by this

In Yealink RPS before 2025-05-26, the certificate upload function does not properly validate certificate content, potent

Yealink RPS before 2025-05-26 does not prevent OpenAPI access by frozen enterprise accounts, allowing unauthorized acces

The Yealink RPS API before 2025-05-26 lacks rate limiting, potentially enabling information disclosure via excessive req

A Cross-Site Scripting (XSS) vulnerability has been identified in Psono-Client’s handling of vault entries of type websi

A vulnerability has been found in PHPGurukul Art Gallery Management System 1.1 and classified as critical. Affected by t

A vulnerability, which was classified as critical, was found in PHPGurukul Art Gallery Management System 1.1. Affected i

A vulnerability, which was classified as critical, has been found in PHPGurukul Art Gallery Management System 1.1. This

A vulnerability classified as critical was found in PHPGurukul Art Gallery Management System 1.1. This vulnerability aff

A vulnerability classified as critical has been found in PHPGurukul Art Gallery Management System 1.1. This affects an u

A vulnerability was found in PHPGurukul Art Gallery Management System 1.1. It has been rated as critical. Affected by th

A vulnerability was found in PHPGurukul Art Gallery Management System 1.1. It has been declared as critical. Affected by

A vulnerability was found in PHPGurukul Art Gallery Management System 1.1. It has been classified as critical. Affected

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an authenticated user to delete another user's

IBM Process Mining 2.0.1 IF001 and 2.0.1 could allow a remote attacker to conduct phishing attacks, using an open redire

The 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for WordPress is vulnerable to Stored

The TableOn – WordPress Posts Table Filterable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

FastGPT is an AI Agent building platform. Prior to version 4.9.12, the LastRoute Parameter on login page is vulnerable t

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In version

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. In version

A vulnerability was found in HobbesOSR Kitten up to c4f8b7c3158983d1020af432be1b417b28686736 and classified as critical.

A Denial of Service (DoS) condition has been discovered in GitLab CE/EE affecting all versions from 7.10 prior before 16

An issue in redoxOS kernel before commit 5d41cd7c allows a local attacker to cause a denial of service via the `setitime

A vulnerability classified as problematic has been found in code-projects Automated Voting System 1.0. Affected is an un

A vulnerability was found in itsourcecode Employee Record Management System 1.0. It has been rated as critical. This iss

A command injection vulnerability was discovered in the TrustyAI Explainability toolkit. Arbitrary commands placed in ce

A vulnerability was found in SourceCodester Advance Charity Management System 1.0. It has been classified as critical. T

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Anonform Ab ANON::

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Metagauss ProfileGrid profi

Server-Side Request Forgery (SSRF) vulnerability in BoldGrid Post and Page Builder by BoldGrid post-and-page-builder all

Cross-Site Request Forgery (CSRF) vulnerability in BoldGrid Post and Page Builder by BoldGrid post-and-page-builder allo

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ninja Team File Ma

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Firelight Fireligh

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chad Butler WP-Mem

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BlueGlass Interact

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in prismtechstudios M

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Atakan Au Automati

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webvitaly Sitekit

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StellarWP WPComple

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ProWCPlugins Relat

Cross-Site Request Forgery (CSRF) vulnerability in Rameez Iqbal Real Estate Manager real-estate-manager allows Cross Sit

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jordy Meow Code En

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in aviplugins.com WP

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Engine Gutenber

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in anantaddons Anant

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Buying Buddy Buyin

Cross-Site Request Forgery (CSRF) vulnerability in Yamna Khawaja Mailing Group Listserv wp-mailing-group allows Cross Si

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CyrilG Fyrebox Qui