2025

In Tenable Security Center versions prior to 6.7.0, an improper access control vulnerability exists where an authenticat

Synapse is an open source Matrix homeserver implementation. Lack of validation for device keys in Synapse before 1.138.3

A fastjson deserialization vulnerability in uzy-ssm-mall v1.1.0 allows attackers to execute arbitrary code via supplying

Sourcecodester Link Status Checker 1.0 is vulnerable to a Cross-Site Scripting (XSS) in the Enter URLs to check input fi

Multiple cross-site scripting (XSS) vulnerabilities in the Notifications widget in Liferay Portal 7.4.3.102 through 7.4.

Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an authorization bypass through user-controlled key vulnerab

A vulnerability was detected in SourceCodester Simple E-Commerce Bookstore 1.0. The affected element is an unknown funct

A security vulnerability has been detected in SourceCodester Wedding Reservation Management System 1.0. Impacted is the

Cross Site Scripting in vaahcms v.2.3.1 allows a remote attacker to execute arbitrary code via upload method in the stor

An XML External Entity (XXE) vulnerability in the /mall/wxpay/pay component of uzy-ssm-mall v1.1.0 allows attackers to e

redragon-erp v1.0 was discovered to contain a Shiro deserialization vulnerability caused by the default Shiro key.

WukongCRM-9.0-JAVA was discovered to contain a fastjson deserialization vulnerability via the /OaExamine/setOaExamine in

Configuroweb Sistema Web de Inventario 1.0 is vulnerable to a Stored Cross-Site Scripting (XSS) due to the lack of input

Stored cross-site scripting (XSS) vulnerability in Forms in Liferay Portal 7.3.2 through 7.4.3.111, and Liferay DXP 2023

Stored cross-site scripting (XSS) vulnerability in diagram type products in Commerce in Liferay Portal 7.4.3.18 through

A weakness has been identified in SourceCodester Farm Management System 1.0. This issue affects some unknown processing

A security flaw has been discovered in SourceCodester Wedding Reservation Management System 1.0. This vulnerability affe

A vulnerability was identified in SourceCodester Simple E-Commerce Bookstore 1.0. This affects an unknown part of the fi

Novel-Plus with 5.2.0 was discovered to contain a Stored Cross-Site Scripting (XSS) vulnerability via the /book/addComme

Novel-Plus up to 5.2.4 was discovered to contain a Stored Cross-Site Scripting (XSS) vulnerability via the /author/updat

Cross-site scripting (XSS) vulnerability in the Commerce Product Comparison Table widget in Liferay Portal 7.4.0 through

A vulnerability was determined in projectworlds Advanced Library Management System 1.0. Affected by this issue is some u

A vulnerability was found in SourceCodester Hotel and Lodge Management System 1.0. Affected by this vulnerability is an

A vulnerability has been found in SourceCodester Hotel and Lodge Management System 1.0. Affected is an unknown function

A flaw has been found in SourceCodester Hotel and Lodge Management System 1.0. This impacts an unknown function of the f

A vulnerability was detected in SourceCodester Hotel and Lodge Management System 1.0. This affects an unknown function o

The Welcart e-Commerce plugin for WordPress is vulnerable to SQL Injection via the cookie in all versions up to, and inc

File upload leading to remote code execution (RCE) in the “melis-cms-slider” module of Melis Technology's Melis Platform

Vulnerability in the melis-core module of Melis Technology's Melis Platform, which, if exploited, allows an unauthentica

SQL injection vulnerability based on the melis-cms module of the Melis platform from Melis Technology. This vulnerabilit

A security vulnerability has been detected in SourceCodester Hotel and Lodge Management System up to 1.0. The impacted e

A weakness has been identified in SourceCodester Hotel and Lodge Management System 1.0. The affected element is an unkno

A vulnerability was detected in Kilo Code up to 4.86.0. Affected is the function ClineProvider of the file src/core/webv

A security vulnerability has been detected in TOTOLINK N600R up to 4.3.0cu.7866_B20220506. This impacts the function set

A weakness has been identified in JhumanJ OpnForm up to 1.9.3. This affects an unknown function of the file /api/passwor

A security flaw has been discovered in JhumanJ OpnForm up to 1.9.3. The impacted element is an unknown function of the c

Successful exploitation of the vulnerability could allow an unauthenticated attacker to gain access to a victim’s Sync a

A vulnerability was identified in JhumanJ OpnForm up to 1.9.3. The affected element is an unknown function of the compon

A vulnerability was determined in JhumanJ OpnForm up to 1.9.3. Impacted is an unknown function of the file /edit. Execut

A vulnerability was found in JhumanJ OpnForm up to 1.9.3. This issue affects some unknown processing of the file /show/i

A vulnerability has been found in JhumanJ OpnForm up to 1.9.3. This vulnerability affects unknown code of the file /cust

A flaw has been found in JhumanJ OpnForm up to 1.9.3. This affects an unknown part of the file /api/open/forms/ of the c

A vulnerability was detected in JhumanJ OpnForm up to 1.9.3. Affected by this issue is some unknown functionality of the

A security vulnerability has been detected in JhumanJ OpnForm up to 1.9.3. Affected by this vulnerability is an unknown

The Chartify – WordPress Chart Plugin for WordPress is vulnerable to Missing Authentication for Critical Function in all

The Find Me On WordPress plugin through 2.0.9.1 does not sanitize and escape a parameter before using it in a SQL statem

A weakness has been identified in itsourcecode Student Transcript Processing System 1.0. Affected is an unknown function

A security flaw has been discovered in itsourcecode Leave Management System 1.0. This impacts the function redirect of t

A vulnerability was identified in itsourcecode Leave Management System 1.0. This affects an unknown function of the file

The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vu