2025

A vulnerability was found in itsourcecode Placement Management System 1.0. It has been rated as critical. This issue aff

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this

A vulnerability, which was classified as critical, was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af447

A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been declared as critical. Affected by

A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been classified as critical. Affected

Multiple SEIKO EPSON printer drivers for Windows OS are configured with an improper access permission settings when inst

A remote unauthenticated attacker may be able to change the IP adress of the device, and therefore affecting the availab

A vulnerability classified as critical was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644). Affected by this vuln

EndpointRequest.to() creates a matcher for null/** if the actuator endpoint, for which the EndpointRequest has been crea

A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. It has been rated as critical. This issue

A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. It has been declared as critical. This vu

A vulnerability classified as critical was found in CodeAstro Membership Management System 1.0. This vulnerability affec

A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525 and classified as critical. This issue affects some unknown

A vulnerability has been found in TOTOLINK N150RT 3.4.0-B20190525 and classified as critical. This vulnerability affects

A vulnerability, which was classified as critical, was found in TOTOLINK N150RT 3.4.0-B20190525. This affects an unknown

Quick Agent V3 and Quick Agent V2 contain an issue with improper limitation of a pathname to a restricted directory ('Pa

A vulnerability, which was classified as critical, has been found in TOTOLINK N150RT 3.4.0-B20190525. Affected by this i

A vulnerability classified as critical was found in TOTOLINK N150RT 3.4.0-B20190525. Affected by this vulnerability is a

A vulnerability classified as critical has been found in TOTOLINK N150RT 3.4.0-B20190525. Affected is an unknown functio

Karaz Karazal through 2025-04-14 allows reflected XSS via the lang parameter to the default URI.

A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. It has been classified as critical. Affec

A vulnerability has been found in PHPGurukul COVID19 Testing Management System 1.0 and classified as critical. This vuln

A vulnerability, which was classified as critical, was found in PHPGurukul COVID19 Testing Management System 1.0. This a

A vulnerability, which was classified as critical, has been found in PHPGurukul COVID19 Testing Management System 1.0. A

A vulnerability classified as critical was found in PHPGurukul COVID19 Testing Management System 1.0. Affected by this v

An issue in CatoNetworks CatoClient before v.5.8.0 allows attackers to escalate privileges and achieve a race condition

A vulnerability, which was classified as critical, has been found in withstars Books-Management-System 1.0. This issue a

A vulnerability was found in withstars Books-Management-System 1.0. It has been rated as critical. Affected by this issu

There is a code-related vulnerability in the GoldenDB database product. Attackers can access system tables to disrupt th

There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through th

The Edumall theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.2.4 via th

A vulnerability classified as critical has been found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shad

The Aeropage Sync for Airtable plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type val

The Integração entre Eduzz e Woocommerce plugin for WordPress is vulnerable to unauthorized modification of data due to

The Add custom page template plugin for WordPress is vulnerable to PHP Code Injection leading to Remote Code Execution i

The Jupiter X Core plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.8.

The Xpro Elementor Addons - Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and i

The The Create custom forms for WordPress with a smart form plugin for smart businesses plugin for WordPress is vulnerab

NETSCOUT nGeniusONE before 6.4.0 b2350 has a Sensitive File Accessible Without Proper Authentication to an endpoint.

NETSCOUT nGeniusONE before 6.4.0 b2350 allows Technical Information Disclosure via a Stack Trace.

NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module.

NETSCOUT nGeniusONE before 6.4.0 b2350 allows local users to leverage Insecure Permissions for the nGeniusCLI File.

An issue in Mytel Telecom Online Account System v1.0 allows attackers to bypass the OTP verification process via a craft

ScreenConnect versions 25.2.3 and earlier versions may be susceptible to a ViewState code injection attack. ASP.NET Web

Commvault Web Server has an unspecified vulnerability that can be exploited by a remote, authenticated attacker. Accordi

Dify is an open-source LLM app development platform. Prior to version 0.6.12, a normal user is able to access and modify

A flaw was found in Moodle. A remote code execution risk was identified in the Moodle LMS EQUELLA repository. By default

A flaw was found in Moodle. A remote code execution risk was identified in the Moodle LMS Dropbox repository. By default

A flaw was found in Moodle. The analysis request action in the Brickfield tool did not include the necessary token to pr

A security vulnerability was discovered in Moodle that can allow hackers to gain access to sensitive information about s