2025

Missing Authorization vulnerability in BdThemes Element Pack Pro allows Exploiting Incorrectly Configured Access Control

Cross-Site Request Forgery (CSRF) vulnerability in BdThemes Element Pack Pro allows Cross Site Request Forgery.This issu

A vulnerability, which was classified as critical, has been found in PHPGurukul Medical Card Generation System 1.0. This

A vulnerability classified as critical was found in PHPGurukul Medical Card Generation System 1.0. This vulnerability af

A vulnerability classified as critical has been found in PHPGurukul Medical Card Generation System 1.0. This affects an

Para is a multitenant backend server/framework for object persistence and retrieval. A vulnerability that exists in vers

The Yii 2 Redis extension provides the redis key-value store support for the Yii framework 2.0. On failing connection, t

Improper access control in users MFA feature in Devolutions Server 2025.1.7.0 and earlier allows a user with user manage

In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptograph

Improper access control in Tor network blocking feature in Devolutions Server 2025.1.10.0 and earlier allows an authenti

A stored XSS vulnerability in RSMail! component 1.19.20 - 1.22.26 for Joomla was discovered. The issue occurs within the

A stored XSS vulnerability in RSBlog! component 1.11.6 - 1.14.4 for Joomla was discovered. The vulnerability allows auth

A SQLi vulnerability in RSMediaGallery component 1.7.4 - 2.1.6 for Joomla was discovered. The vulnerability is due to th

A path traversal vulnerability in RSFirewall component 2.9.7 - 3.1.5 for Joomla was discovered. This vulnerability allow

Improper access control in permissions component in Devolutions Server 2025.1.10.0 and earlier allows an authenticated u

A vulnerability, which was classified as critical, has been found in PHPGurukul Complaint Management System 2.0. Affecte

A vulnerability classified as critical was found in PHPGurukul Complaint Management System 2.0. Affected by this vulnera

A vulnerability classified as critical has been found in PHPGurukul Complaint Management System 2.0. Affected is an unkn

A vulnerability was found in PHPGurukul Complaint Management System 2.0. It has been rated as critical. This issue affec

A vulnerability was found in PHPGurukul Complaint Management System 2.0. It has been declared as critical. This vulnerab

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cro

A vulnerability was found in PHPGurukul Complaint Management System 2.0. It has been classified as critical. This affect

A vulnerability was found in PHPGurukul Complaint Management System 2.0 and classified as critical. Affected by this iss

A vulnerability has been found in PHPGurukul Complaint Management System 2.0 and classified as critical. Affected by thi

A vulnerability, which was classified as critical, was found in PHPGurukul Complaint Management System 2.0. Affected is

A vulnerability classified as critical has been found in SourceCodester Student Result Management System 1.0. This affec

When loading a specifically crafted ICNS format image file in QImage then it will trigger a crash.  This issue affects

A vulnerability has been found in PHPGurukul Notice Board System 1.0 and classified as critical. Affected by this vulner

A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been rated

A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been declar

aerc before 93bec0d allows directory traversal in commands/msgview/open.go because of direct path concatenation of the n

An issue was discovered in Django 5.2 before 5.2.3, 5.1 before 5.1.11, and 4.2 before 4.2.23. Internal HTTP response log

A vulnerability classified as critical was found in code-projects Patient Record Management System 1.0. Affected by this

A vulnerability classified as critical was found in PHPGurukul Online Fire Reporting System 1.2. This vulnerability affe

A vulnerability classified as critical has been found in PHPGurukul Online Fire Reporting System 1.2. This affects an un

A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been rated as critical. Affected by thi

Rack is a modular Ruby web server interface. Starting in version 3.1.0 and prior to version 3.1.16, there is a denial of

PostgreSQL Anonymizer v2.0 and v2.1 contain a vulnerability that allows a masked user to bypass the masking rules define

A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been declared as critical. Affected by

A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been classified as critical. Affected i

A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2 and classified as critical. This issue affects

A vulnerability has been found in PHPGurukul Online Fire Reporting System 1.2 and classified as critical. This vulnerabi

A vulnerability, which was classified as critical, was found in CodeAstro Real Estate Management System 1.0. This affect

A vulnerability, which was classified as critical, has been found in CodeAstro Real Estate Management System 1.0. Affect

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to versions 2.1.13 and 2.2.13, the `Deno.env.toObject`

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 1.41.3 and prior to versions 2.1.13, 2.2.

FreshRSS is a self-hosted RSS feed aggregator. Prior to version 1.26.2, it's possible to poison feed favicons by adding

An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /course/edit/{id} endpoint.

An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /students/edit/{id} endpoint.

Listmonk v4.1.0 (fixed in v5.0.0) is vulnerable to SQL Injection in the QuerySubscribers function which allows attackers