2025

Cross-Site Scripting (XSS) vulnerability exists in askquery.php via the eid parameter in the CloudClassroom PHP Project.

Silverpeas 6.4.2 contains a stored cross-site scripting (XSS) vulnerability in the event management module. An authentic

A vulnerability has been found in Konica Minolta bizhub up to 20250202 and classified as problematic. This vulnerability

A vulnerability was found in code-projects Chat System up to 1.0 and classified as critical. This issue affects some unk

A vulnerability has been found in Whistle 2.9.98 and classified as problematic. This vulnerability affects unknown code

A vulnerability, which was classified as problematic, has been found in Fengoffice Feng Office 3.2.2.1. Affected by this

FastGPT is an open-source project that provides a platform for building, deploying, and operating AI-driven workflows an

Incorrect authorization vulnerability in TCMAN's GIM v11. This vulnerability allows an unprivileged attacker to modify t

Incorrect authorization vulnerability in TCMAN's GIM v11. This vulnerability allows an attacker, with low privilege leve

A vulnerability classified as problematic was found in Lucky LM-520-SC, LM-520-FSC and LM-520-FSC-SAM up to 20250321. Af

A vulnerability was found in Redash up to 10.1.0/25.1.0. It has been rated as problematic. This issue affects the functi

A vulnerability was detected in eCharge Hardy Barth Salia PLCC up to 2.3.81. Affected by this issue is some unknown func

Zohocorp ManageEngine OpManager, NetFlow Analyzer, Network Configuration Manager, Firewall Analyzer and OpUtils versions

A vulnerability was found in eGauge EG3000 Energy Monitor 3.6.3. It has been classified as problematic. This affects an

A vulnerability was found in Papendorf SOL Connect Center 3.3.0.0 and classified as problematic. Affected by this issue

A Reflected Cross-Site Scripting (XSS) vulnerability has been found in Bagisto v2.0.0. This vulnerability allows an atta

The Broadstreet WordPress plugin before 1.51.8 does not sanitise and escape a parameter before outputting it back in the

A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request. When a client

There's a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a c

The Newsletter WordPress plugin before 8.85 does not sanitise and escape some of its Form settings, which could allow h

The Newsletter WordPress plugin before 8.8.5 does not validate and escape some of its Widget options before outputting

The AuthPolicy metadata on Red Hat Connectivity Link contains an object which stores secretes, however it assumes those

A Developer persona can bring down the Authorino service, preventing the evaluation of all AuthPolicies on the cluster

The Authorino service in the Red Hat Connectivity Link is the authorization service for zero trust API security. Authori

A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been declared as critical. Aff

A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been classified as critical. A

A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. This issue a

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through improper input.

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through race condition.

A vulnerability classified as critical was found in PHPGurukul Employee Record Management System 1.3. Affected by this v

A vulnerability classified as critical has been found in PHPGurukul Employee Record Management System 1.3. Affected is a

A vulnerability was found in Tenda AC9 15.03.02.13. It has been rated as critical. This issue affects the function formS

The WpEvently plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in all versions

The Social Sharing Plugin – Sassy Social Share plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via

The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for Wo

The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for Wo

The Profiler – What Slowing Down Your WP plugin for WordPress is vulnerable to unauthorized modification of data due to

Jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Pr

Huawei EG8141A5 devices through V5R019C00S100, EG8145V5 devices through V5R019C00S100, and EG8145V5-V2 devices through V

A vulnerability has been found in PHPGurukul Employee Record Management System 1.3 and classified as critical. This vuln

A vulnerability, which was classified as critical, was found in PHPGurukul Employee Record Management System 1.3. This a

WOLFBOX Level 2 EV Charger Management Card Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerabilit

A path traversal vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, t

An out-of-bounds read vulnerability has been reported to affect File Station 5. If a local attacker gains an administra

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vu

A cross-site scripting (XSS) vulnerability has been reported to affect License Center. If exploited, the vulnerability c

A command injection vulnerability has been reported to affect QHora. If an attacker gains local network access who have

A vulnerability, which was classified as critical, has been found in PHPGurukul Employee Record Management System 1.3. A