2025

A weakness has been identified in code-projects Online Complaint Site 1.0. Affected is an unknown function of the file /

A security flaw has been discovered in ChurchCRM up to 5.18.0. This impacts the function AuthMiddleware of the file src/

A vulnerability was identified in Tenda AC7 15.03.06.44. This affects an unknown function of the file /goform/saveAutoQo

A vulnerability was determined in Tenda AC7 15.03.06.44. The impacted element is an unknown function of the file /goform

A vulnerability was found in Tenda AC7 15.03.06.44. The affected element is an unknown function of the file /goform/Wifi

A vulnerability has been found in Tenda AC7 15.03.06.44. Impacted is an unknown function of the file /goform/SetUpnpCfg.

A flaw has been found in Tenda AC7 15.03.06.44. This issue affects some unknown processing of the file /goform/SetDDNSCf

A vulnerability was detected in Tenda AC7 15.03.06.44. This vulnerability affects unknown code of the file /goform/AdvSe

The WP Go Maps (formerly WP Google Maps) plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in all

The Community Events plugin for WordPress is vulnerable to SQL Injection via the ‘event_venue’ parameter in all versions

The Cookie Notice & Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the uuid parameter in

A weakness has been identified in code-projects Online Complaint Site 1.0. Impacted is an unknown function of the file /

A security flaw has been discovered in code-projects Online Complaint Site 1.0. This issue affects some unknown processi

A vulnerability was identified in code-projects Online Complaint Site 1.0. This vulnerability affects unknown code of th

A vulnerability was determined in code-projects E-Commerce Website 1.0. This affects an unknown part of the file /pages/

A vulnerability was found in code-projects Voting System 1.0. Affected by this issue is some unknown functionality of th

Flowise is a drag & drop user interface to build a customized large language model flow. In versions prior to 3.0.8, Wri

A flaw has been found in code-projects E-Commerce Website 1.0. Affected is an unknown function of the file /pages/suppli

A vulnerability was detected in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /page

A security vulnerability has been detected in code-projects Voting System 1.0. This affects an unknown function of the f

MongoDB Connector for BI installation via MSI on Windows leaves ACLs unset on custom install directories allows Privileg

A weakness has been identified in PHPGurukul Beauty Parlour Management System 1.1. The impacted element is an unknown fu

A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. The affected element is an unkno

A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1. Impacted is an unknown function of th

Web Developer for Chrome v0.4.9 contained malicious code that generated a domain via a DGA and fetched a remote script.

CCleaner v5.33.6162 and CCleaner Cloud v1.07.3191 (32-bit builds) contained a malicious pre-entry-point loader that dive

ProjectWorlds Gym Management System1.0 is vulnerable to SQL Injection via the "id" parameter in the profile/edit.php pag

A vulnerability was determined in PHPGurukul Beauty Parlour Management System 1.1. This issue affects some unknown proce

A vulnerability was determined in GNU Binutils 2.45. The affected element is the function elf_x86_64_relocate_section of

A vulnerability was found in GNU Binutils 2.45. Impacted is the function _bfd_x86_elf_late_size_sections of the file bfd

An issue in the permission verification module and organization/application editing interface in Casdoor v2.26.0 and bef

An OS Command Injection vulnerability in the Admin panel in Curo UC300 5.42.1.7.1.63R1 allows local attackers to inject

A vulnerability was found in wonderwhy-er DesktopCommanderMCP up to 0.2.13. The impacted element is the function Command

A vulnerability has been found in wonderwhy-er DesktopCommanderMCP up to 0.2.13. The affected element is the function ex

Server-Side Request Forgery (SSRF) in the Remote Browser Plugin in Sonatype Nexus Repository 2.x up to and including 2.1

Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to Open

Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to Open

A logic error exists in the Falcon sensor for Windows that could allow an attacker, with the prior ability to execute co

A race condition exists in the Falcon sensor for Windows that could allow an attacker, with the prior ability to execute

A security vulnerability has been detected in wonderwhy-er DesktopCommanderMCP up to 0.2.13. This vulnerability affects

A weakness has been identified in D-Link DIR-852 up to 20251002. This affects an unknown part of the file /HNAP1/. Execu

A security flaw has been discovered in SourceCodester Farm Management System 1.0. Affected by this issue is some unknown

Cleartext Storage of Sensitive Information in Memory vulnerability in ABB MConfig.This issue affects MConfig: through 1.

Framelink Figma MCP Server before 0.6.3 allows an unauthenticated remote attacker to execute arbitrary operating system

A vulnerability was identified in SourceCodester Farm Management System 1.0. Affected by this vulnerability is an unknow

A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function add_user

A flaw has been found in varunsardana004 Blood-Bank-And-Donation-Management-System up to dc9e0393d826fbc85fad9755b5bc12c

SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/profile.php vi

In Gemini iOS, when a user shared a snippet of a conversation, it would share the entire conversation via a sharable pub

HAProxy Kubernetes Ingress Controller before 3.1.13, when the config-snippets feature flag is used, accepts config snipp